$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer File: cWgV4hPhAadE_JLy-1sSReSx0m8.cer (raw, json) Hash identifier: hdivDO36nB8H/oJIKcN6kKh7S1OkaB6FqV17uuHaJGY= Subject key identifier: 71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E2DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:12:46 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 103.100.68.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58079 (0xe2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:12:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=716815E213E101A744FC92F2FB5B1245E4B1D26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:e1:bd:38:72:03:03:28:d6:e2:9d:92:01: 66:d0:a7:54:74:53:ec:0a:b1:73:5a:d2:5f:2c:e1: 54:ab:f5:e4:19:16:2e:91:b1:95:5b:e9:99:f1:9b: 67:48:4e:48:18:14:a0:a1:18:a0:a7:7a:cd:ec:d6: 4c:43:7d:ab:e3:5b:59:d8:36:dc:1b:a1:26:d1:dc: a1:cb:d1:65:cb:04:40:f5:87:37:da:81:c4:c9:c5: 4f:9f:03:be:e9:d4:b4:1c:72:c4:7d:dd:f1:00:aa: 9f:43:83:5e:23:5a:71:3e:b0:ab:52:78:a5:e5:52: 23:d0:e0:3b:9c:62:5a:d9:bf:17:67:d4:47:24:dd: 4d:5f:3b:b8:77:33:8a:d9:ad:90:db:0b:e5:07:96: ad:9c:aa:64:15:b7:70:6b:c2:78:da:f0:33:29:47: 60:77:ca:8d:19:2e:e1:f6:56:5e:73:63:83:8d:9d: ea:a1:8c:ab:37:88:9a:d2:bf:fa:75:73:04:ee:20: 9a:03:32:26:cf:55:a6:37:5c:a7:17:0b:6b:e0:ca: 3e:e1:12:3e:2f:68:a6:3b:05:0c:85:cc:7e:50:33: af:4d:c1:c9:9d:d8:59:07:d9:57:e1:6a:ef:6b:18: 97:b6:84:ab:e5:00:0c:62:61:12:b4:b5:d7:ab:f1: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.100.68.0/22 Signature Algorithm: sha256WithRSAEncryption 63:36:df:60:cb:c4:63:f8:5a:12:ca:68:1f:2c:70:7c:14:f8: e4:68:13:13:36:91:96:f3:27:f1:7b:85:a7:6d:57:d5:90:d2: 1e:99:e2:28:72:87:a3:0f:19:06:3b:83:04:07:ba:cd:cb:ff: 42:25:ff:ae:28:25:ac:05:e1:7d:4d:dc:f9:88:77:7b:51:d3: 15:7c:82:73:6f:4c:46:eb:bc:d5:b7:94:be:f2:6c:8a:60:2a: f1:be:c7:b0:42:01:fc:b8:8d:af:83:7f:c8:3c:8c:0f:e4:9a: 69:35:f0:47:17:c6:48:c2:18:a9:3d:3f:df:4f:4b:42:87:96: 77:fc:b2:88:d0:98:c4:c2:f1:f9:41:e6:ec:c4:bf:73:67:87: 2d:06:43:31:07:1d:cf:c4:1a:8f:c5:a2:a6:d5:53:6b:88:16: b0:29:3b:ee:06:e8:d7:7f:77:2d:44:62:cf:49:8f:bb:4b:8e: 3a:63:67:8e:c8:be:77:12:65:8a:94:cd:b7:96:d7:9e:10:b2: 6f:fc:99:4c:60:e5:41:91:b0:36:d4:34:b8:11:53:12:eb:cc: 45:fe:90:af:d9:25:97:09:2d:9e:5a:e0:ff:55:16:dd:d5:4e: d1:38:6c:3a:82:57:09:1c:15:de:61:93:03:fa:06:3f:29:61: 5c:b0:50:74 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOLfMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEyNDZaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDcxNjgxNUUyMTNFMTAxQTc0NEZDOTJGMkZCNUIxMjQ1RTRCMUQy NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeOG9OHIDAyjW4p2S AWbQp1R0U+wKsXNa0l8s4VSr9eQZFi6RsZVb6Znxm2dITkgYFKChGKCnes3s1kxD favjW1nYNtwboSbR3KHL0WXLBED1hzfagcTJxU+fA77p1LQccsR93fEAqp9Dg14j WnE+sKtSeKXlUiPQ4DucYlrZvxdn1Eck3U1fO7h3M4rZrZDbC+UHlq2cqmQVt3Br wnja8DMpR2B3yo0ZLuH2Vl5zY4ONneqhjKs3iJrSv/p1cwTuIJoDMibPVaY3XKcX C2vgyj7hEj4vaKY7BQyFzH5QM69Nwcmd2FkH2Vfhau9rGJe2hKvlAAxiYRK0tder 8StdAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUcWgV4hPhAadE/JLy+1sSReSx0m8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1 OTAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjU5MC9jV2dWNGhQaEFhZEVfSkx5LTFzU1JlU3gwbTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2REMA0GCSqGSIb3DQEBCwUA A4IBAQBjNt9gy8Rj+FoSymgfLHB8FPjkaBMTNpGW8yfxe4WnbVfVkNIemeIocoej DxkGO4MEB7rNy/9CJf+uKCWsBeF9Tdz5iHd7UdMVfIJzb0xG67zVt5S+8myKYCrx vsewQgH8uI2vg3/IPIwP5JppNfBHF8ZIwhipPT/fT0tCh5Z3/LKI0JjEwvH5Qebs xL9zZ4ctBkMxBx3PxBqPxaKm1VNriBawKTvuBujXf3ctRGLPSY+7S446Y2eOyL53 EmWKlM23lteeELJv/JlMYOVBkbA21DS4EVMS68xF/pCv2SWXCS2eWuD/VRbd1U7R OGw6glcJHBXeYZMD+gY/KWFcsFB0 -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:00 2025 by rpki-client