$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer File: aNHWIOHqFxAY048aCIaBCXhdurE.cer (raw, json) Hash identifier: 0tuQeND6dCXj9wzC2UpWQN1juXllivtNk6oGaCttITo= Subject key identifier: 68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:37 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 63561 IP: 103.203.216.0/22 IP: 202.61.88.0/22 IP: 2403:c980::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57957 (0xe265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:10:37 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:3e:64:7a:5a:81:ba:32:9d:80:b0:25:03: f3:4d:8f:a9:1e:2f:0d:12:8c:67:e0:68:21:a6:d8: 9d:8f:7e:ef:cd:37:72:9b:f0:79:49:84:76:3b:8b: 0b:51:85:85:98:d3:7b:b8:d3:09:68:f3:f4:cf:86: ce:fa:22:05:0a:da:a9:24:b5:6a:5c:8d:82:ed:0e: d5:c8:18:32:25:ad:eb:dc:0a:4b:ab:af:65:19:50: 03:5b:bd:07:ef:14:54:95:2e:1f:f7:e4:74:ec:ae: 37:2d:7e:d1:eb:6f:99:6a:76:56:a8:2e:ad:a0:70: 06:4c:c0:fa:3e:8f:c6:27:c6:71:df:76:9b:fa:82: 52:d3:9a:3b:c3:91:0c:bf:33:54:d2:fc:61:21:6b: 2a:28:66:d4:a7:88:1a:39:9b:31:12:e1:cc:1c:01: 12:e1:73:ae:e8:ce:4f:ff:b3:44:e6:c7:6d:6a:ac: b5:4b:1c:0b:36:20:43:57:8e:48:4e:90:0f:58:9a: f9:1a:3e:55:81:a6:00:21:15:06:40:af:ba:6d:ae: 7b:2a:1f:7e:58:4a:eb:4a:62:ea:dc:15:27:3d:68: 98:e9:d2:39:63:4e:cd:53:68:b3:89:79:9e:14:d5: dc:fb:7c:0f:b1:0c:98:ef:40:78:85:d6:70:42:49: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63561 sbgp-ipAddrBlock: critical IPv4: 103.203.216.0/22 202.61.88.0/22 IPv6: 2403:c980::/32 Signature Algorithm: sha256WithRSAEncryption 36:b7:9e:b2:14:8f:2a:c4:31:f9:b2:e4:8d:e5:13:c3:4a:af: 2b:4d:77:2d:72:70:bf:31:7b:46:94:26:e4:fd:1e:21:64:4b: 24:fd:e2:25:7b:2c:12:ef:4b:af:74:0a:5b:af:8f:b3:18:b0: 9c:95:99:8f:c7:13:3e:e2:00:43:90:bd:5e:c5:17:b7:b2:c6: fd:35:2e:ac:36:33:5f:b7:05:1c:53:85:63:70:6e:39:e3:f7: f2:c8:bb:ff:f2:f5:9a:40:58:7a:e2:ef:d4:bb:23:21:af:aa: e6:45:f3:d6:51:96:1e:df:7e:48:6e:01:e5:4e:7a:09:38:51: 58:6e:94:e3:f6:a8:64:d1:49:ba:13:aa:89:1b:3d:6b:f7:a3: 49:93:b5:15:1b:63:49:be:02:e0:18:00:5b:4e:27:20:0c:ba: 89:9b:b7:ba:f9:a0:be:f1:f1:55:d1:0c:af:10:15:2e:0b:f3: 7d:3c:c0:1f:e9:68:5b:7f:b1:f9:65:56:23:c6:f2:06:ec:25: 29:95:f0:65:c2:4e:66:c2:29:7e:cd:20:e5:45:22:cf:a0:cd: 00:3c:a8:5f:6b:14:b1:ee:10:02:8a:e9:f1:4a:52:5f:2c:1d: f8:d8:01:a4:46:65:20:51:4c:ef:c9:83:1f:95:a4:91:5e:a7: 36:19:a0:c1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIDAOJlMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEwMzdaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDY4RDFENjIwRTFFQTE3MTAxOEQzOEYxQTA4ODY4MTA5Nzg1REJB QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ET5kelqBujKdgLAl A/NNj6keLw0SjGfgaCGm2J2Pfu/NN3Kb8HlJhHY7iwtRhYWY03u40wlo8/TPhs76 IgUK2qkktWpcjYLtDtXIGDIlrevcCkurr2UZUANbvQfvFFSVLh/35HTsrjctftHr b5lqdlaoLq2gcAZMwPo+j8YnxnHfdpv6glLTmjvDkQy/M1TS/GEhayooZtSniBo5 mzES4cwcARLhc67ozk//s0Tmx21qrLVLHAs2IENXjkhOkA9YmvkaPlWBpgAhFQZA r7ptrnsqH35YSutKYurcFSc9aJjp0jljTs1TaLOJeZ4U1dz7fA+xDJjvQHiF1nBC SaY7AgMBAAGjggKGMIICgjAdBgNVHQ4EFgQUaNHWIOHqFxAY048aCIaBCXhdurEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1 ODUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMTU4NS9hTkhXSU9IcUZ4QVkwNDhhQ0lhQkNYaGR1ckUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4STA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAmfL2AMEAso9WDANBAIAAjAHAwUAJAPJgDANBgkqhkiG9w0BAQsF AAOCAQEANreeshSPKsQx+bLkjeUTw0qvK013LXJwvzF7RpQm5P0eIWRLJP3iJXss Eu9Lr3QKW6+PsxiwnJWZj8cTPuIAQ5C9XsUXt7LG/TUurDYzX7cFHFOFY3BuOeP3 8si7//L1mkBYeuLv1LsjIa+q5kXz1lGWHt9+SG4B5U56CThRWG6U4/aoZNFJuhOq iRs9a/ejSZO1FRtjSb4C4BgAW04nIAy6iZu3uvmgvvHxVdEMrxAVLgvzfTzAH+lo W3+x+WVWI8byBuwlKZXwZcJOZsIpfs0g5UUiz6DNADyoX2sUse4QAorp8UpSXywd +NgBpEZlIFFM78mDH5WkkV6nNhmgwQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:24:30 2025 by rpki-client