$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer File: VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer (raw, json) Hash identifier: /K4yWd7wcQMqDMmO/5XLREZCz9L2MGkoJ2uMVTCi96M= Subject key identifier: 54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E27D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:56 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 202.38.8.0/21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57981 (0xe27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:10:56 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:2d:0f:4c:24:30:33:7c:48:55:e3:c0:94: 31:1b:77:98:a5:12:8a:ff:03:14:b7:9e:26:f4:3f: ff:d0:66:07:e9:8e:c7:5a:96:70:90:62:98:25:53: bf:38:f8:71:9c:c2:19:9e:5a:87:02:36:e2:d4:96: 2d:15:f8:6b:e8:3c:5a:43:17:53:df:09:73:02:82: 3b:a9:58:59:c3:78:42:6c:7c:57:4f:b8:4a:39:d2: ed:85:10:28:96:32:0d:bf:7e:91:e1:a0:03:84:42: ea:51:57:c6:c1:e5:a0:52:51:e6:bf:46:4a:bc:89: b4:64:fd:b4:aa:74:b1:68:fd:4d:04:e0:15:c5:9f: 2e:7a:cd:94:5c:b7:f2:ec:53:93:76:c3:df:60:b8: 68:9a:d6:98:14:c7:c0:cc:ed:84:56:8c:ef:fd:95: 97:d0:0d:2c:96:8c:c9:9e:37:d6:e0:80:9d:e5:7a: 00:20:69:50:ce:ad:90:f1:48:c0:c1:3a:e7:0c:e0: 94:a6:78:01:5b:c2:d3:00:e0:0a:96:6f:1f:ed:3a: 43:87:31:95:26:b8:01:30:9d:92:36:48:3e:44:42: 66:0d:8a:c8:82:1f:44:9e:ca:19:eb:94:79:af:84: 61:b7:b5:80:a3:12:a8:69:f4:d9:67:29:fb:3e:7f: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.38.8.0/21 Signature Algorithm: sha256WithRSAEncryption ae:58:58:18:f9:bd:73:b1:ba:92:dc:48:25:59:a4:db:e1:94: 15:6b:d7:aa:d0:4e:68:2d:d3:4d:61:a7:eb:66:5b:f0:16:f5: 58:44:ae:ef:aa:55:6a:59:40:88:f9:36:57:c7:d0:0e:f9:8d: 80:15:7b:48:93:99:7e:8b:cc:23:64:1b:7b:53:7a:ee:02:3f: db:30:92:e7:c5:aa:bd:e3:53:1d:c9:41:ec:63:0a:5c:38:7e: 18:a3:ab:82:b2:6d:40:92:97:e4:2d:30:34:02:24:f3:2d:8f: 1b:dd:0e:21:05:ff:70:d7:b5:f4:bf:dc:77:33:d5:11:be:55: 96:25:d3:93:35:d7:61:d4:0d:d3:cb:3f:1c:2a:5e:74:f0:eb: a4:53:6a:0c:bd:a1:e2:8f:4e:7b:0b:82:bb:37:45:91:8f:1b: 89:44:a9:17:7d:db:c9:c0:d6:8e:40:b4:ec:2c:77:c7:46:86: 7c:5c:a6:66:25:2f:a0:fb:cc:4a:e1:4a:ea:c0:74:da:d5:11: 20:d3:a1:55:27:9e:5b:3b:ed:66:56:19:20:a8:3e:30:ce:f6: 37:41:32:a3:5f:38:8c:9d:5a:84:72:40:94:14:18:49:20:11: 2a:0e:94:95:d7:c5:ac:88:51:bd:ba:56:f9:a6:85:17:91:a3: 52:c9:e3:2e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOJ9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEwNTZaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDU0QjVGRkI2Q0ZBODc5RTRFQjU4QUUyMEFCRDk2Q0Q5Q0JFMDcy NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9S0PTCQwM3xIVePA lDEbd5ilEor/AxS3nib0P//QZgfpjsdalnCQYpglU784+HGcwhmeWocCNuLUli0V +GvoPFpDF1PfCXMCgjupWFnDeEJsfFdPuEo50u2FECiWMg2/fpHhoAOEQupRV8bB 5aBSUea/Rkq8ibRk/bSqdLFo/U0E4BXFny56zZRct/LsU5N2w99guGia1pgUx8DM 7YRWjO/9lZfQDSyWjMmeN9bggJ3legAgaVDOrZDxSMDBOucM4JSmeAFbwtMA4AqW bx/tOkOHMZUmuAEwnZI2SD5EQmYNisiCH0SeyhnrlHmvhGG3tYCjEqhp9NlnKfs+ f5tDAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUVLX/ts+oeeTrWK4gq9ls2cvgcnAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIxMy9WTFhfdHMtb2VlVHJXSzRncTlsczJjdmdjbkEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyiYIMA0GCSqGSIb3DQEBCwUA A4IBAQCuWFgY+b1zsbqS3EglWaTb4ZQVa9eq0E5oLdNNYafrZlvwFvVYRK7vqlVq WUCI+TZXx9AO+Y2AFXtIk5l+i8wjZBt7U3ruAj/bMJLnxaq941MdyUHsYwpcOH4Y o6uCsm1AkpfkLTA0AiTzLY8b3Q4hBf9w17X0v9x3M9URvlWWJdOTNddh1A3Tyz8c Kl508OukU2oMvaHij057C4K7N0WRjxuJRKkXfdvJwNaOQLTsLHfHRoZ8XKZmJS+g +8xK4UrqwHTa1REg06FVJ55bO+1mVhkgqD4wzvY3QTKjXziMnVqEckCUFBhJIBEq DpSV18WsiFG9ulb5poUXkaNSyeMu -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:00 2025 by rpki-client