$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VXtsbLEjoSwu4XgmgJvlOtqpROY.cer File: VXtsbLEjoSwu4XgmgJvlOtqpROY.cer (raw, json) Hash identifier: lflGL5lur9OmsT1aIEHurixLZy6JpZdNNRydxoCSemU= Subject key identifier: 55:7B:6C:6C:B1:23:A1:2C:2E:E1:78:26:80:9B:E5:3A:DA:A9:44:E6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:13:01 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 151227 IP: 2402:1160::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55416 (0xd878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:13:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=557B6C6CB123A12C2EE17826809BE53ADAA944E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:2b:19:54:81:21:8f:b4:5e:41:77:8e:db: e5:86:db:d2:e6:0f:4b:6d:dc:cb:52:a8:b4:6e:81: 22:ee:06:da:05:ef:13:42:90:9d:87:c4:ef:0a:45: b2:ec:63:20:1b:46:8f:3b:7b:81:bf:f0:7b:77:a5: 7e:d6:4c:59:02:25:c0:fa:c1:a4:3d:f0:c4:b9:fd: ea:26:54:b5:94:07:16:0f:f9:db:e9:d4:8c:ab:7c: b3:d7:7f:b2:a4:07:84:5e:fa:90:74:ab:b3:c0:ba: 0a:9e:2e:ae:4c:b9:20:ba:43:29:b7:b8:e3:87:9e: 7f:4b:b7:94:f0:ec:ba:59:27:82:df:74:95:a1:0e: 13:02:61:b1:13:31:29:9d:ac:05:d2:59:61:f7:45: ba:d7:33:06:bc:4d:8e:2f:c8:ee:a3:ee:a6:17:cc: ae:ee:09:df:44:62:3a:54:79:20:fc:ab:cf:f6:5f: 0c:9f:1a:9e:02:93:73:f9:6d:2f:f4:b9:17:93:71: 23:84:80:7e:e6:1a:d7:fe:2f:a0:ce:6f:b1:0e:6f: bc:e9:07:95:b4:ab:71:6d:ab:8a:1c:a5:4f:19:83: cd:23:2d:3c:d3:b3:7a:3a:9e:79:3f:52:e8:4f:66: 50:87:97:c5:cf:18:27:99:0e:83:4f:df:78:75:bf: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:6C:6C:B1:23:A1:2C:2E:E1:78:26:80:9B:E5:3A:DA:A9:44:E6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3375/VXtsbLEjoSwu4XgmgJvlOtqpROY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151227 sbgp-ipAddrBlock: critical IPv6: 2402:1160::/32 Signature Algorithm: sha256WithRSAEncryption 47:72:83:de:bf:21:90:87:69:45:f3:57:3f:77:01:2c:60:50: e3:dc:ec:07:13:a9:68:5c:d2:9f:e3:c7:88:f5:2d:f5:00:3f: 36:ca:b0:03:74:9e:cc:b7:10:07:7e:0c:af:0e:67:8a:2a:21: 8f:59:9d:a2:e5:52:7e:ac:e0:ed:3d:f6:0e:c1:6e:f6:a0:c9: 5e:09:42:22:03:ab:4d:a4:10:18:0c:58:99:5c:1c:69:b3:34: 28:79:76:6d:c5:33:e3:07:d9:20:40:6e:87:b6:8a:51:9a:dd: 15:23:52:36:10:e1:2b:e4:9f:86:e2:5a:cd:a8:ad:f6:69:a9: f5:30:4a:0b:66:d0:5d:9d:0d:8d:7f:da:52:08:f4:2a:63:9e: 8c:49:2b:22:c9:4c:f8:02:64:75:b2:45:62:1e:7d:e2:e2:df: 7f:92:b6:24:51:4c:0b:6d:01:67:4c:e8:0c:72:71:f5:11:7c: 79:5a:44:1b:02:e7:5d:fc:08:9e:29:89:e8:47:cd:27:41:77: b9:56:6e:71:14:e5:9a:55:4d:a2:4f:fc:42:fd:3d:6a:48:60: 99:bd:c7:1c:0d:aa:d4:7d:2b:cb:87:71:91:b5:2b:75:b1:b9: 0b:cc:26:34:74:5f:32:74:7a:35:36:c8:f2:af:9d:b0:ed:0e: ea:82:6e:ce -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDANh4MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzMDFaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDU1N0I2QzZDQjEyM0ExMkMyRUUxNzgyNjgwOUJFNTNBREFBOTQ0 RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0CsZVIEhj7ReQXeO 2+WG29LmD0tt3MtSqLRugSLuBtoF7xNCkJ2HxO8KRbLsYyAbRo87e4G/8Ht3pX7W TFkCJcD6waQ98MS5/eomVLWUBxYP+dvp1IyrfLPXf7KkB4Re+pB0q7PAugqeLq5M uSC6Qym3uOOHnn9Lt5Tw7LpZJ4LfdJWhDhMCYbETMSmdrAXSWWH3RbrXMwa8TY4v yO6j7qYXzK7uCd9EYjpUeSD8q8/2XwyfGp4Ck3P5bS/0uReTcSOEgH7mGtf+L6DO b7EOb7zpB5W0q3Ftq4ocpU8Zg80jLTzTs3o6nnk/UuhPZlCHl8XPGCeZDoNP33h1 v8M1AgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUVXtsbLEjoSwu4XgmgJvlOtqpROYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3NS9WWHRzYkxFam9Td3U0WGdtZ0p2bE90cXBST1kubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOuzAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQCEWAwDQYJKoZIhvcNAQELBQADggEBAEdyg96/IZCHaUXzVz93 ASxgUOPc7AcTqWhc0p/jx4j1LfUAPzbKsAN0nsy3EAd+DK8OZ4oqIY9ZnaLlUn6s 4O099g7BbvagyV4JQiIDq02kEBgMWJlcHGmzNCh5dm3FM+MH2SBAboe2ilGa3RUj UjYQ4Svkn4biWs2orfZpqfUwSgtm0F2dDY1/2lII9CpjnoxJKyLJTPgCZHWyRWIe feLi33+StiRRTAttAWdM6AxycfURfHlaRBsC5138CJ4piehHzSdBd7lWbnEU5ZpV TaJP/EL9PWpIYJm9xxwNqtR9K8uHcZG1K3WxuQvMJjR0XzJ0ejU2yPKvnbDtDuqC bs4= -----END CERTIFICATE-----Generated at Wed Aug 13 06:01:15 2025 by rpki-client