$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer File: f_5usVL6-W0Yv8af0-O_mYYqqfE.cer (raw, json) Hash identifier: r6PT5XiGqhsEafCB7cEbNSBLQ8kCEW/SBnVGq6wZkY8= Subject key identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E27F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:57 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 210.87.72.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57983 (0xe27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:10:57 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:89:f8:c1:a6:4b:5f:a3:87:13:d9:1c:2e: b9:b9:5b:de:5b:2a:02:c8:76:e6:ee:9e:d9:1c:e6: c6:bf:98:a6:48:c6:f9:81:e1:84:b8:47:97:1c:3a: 3f:67:b2:64:5a:26:dc:4f:df:52:da:3e:a2:9d:fc: e0:35:08:44:d4:63:7d:19:04:14:59:1a:1f:32:8f: d8:c1:36:14:af:ef:1e:0e:45:a0:0a:7c:5e:91:37: 02:fd:0e:8e:78:24:66:ce:77:ce:7c:9d:4e:03:85: 4d:dd:16:01:98:4a:4d:c4:70:15:b4:91:a6:b3:f3: 7e:7b:4d:2e:52:30:0c:7b:84:2a:25:d5:89:f3:f5: 05:87:4d:22:3c:ae:4b:0b:6c:5f:1c:8d:cb:cd:33: e8:25:57:d2:0f:da:e3:98:52:a8:d2:6c:a1:6b:2d: 7c:80:e6:06:d2:89:85:2c:f2:10:3f:d4:67:fe:5c: e5:db:b5:5c:50:a6:8b:90:17:5f:21:d7:fe:4b:a0: 79:9a:91:f1:9b:8e:c3:02:49:57:ab:6b:62:b0:31: 3e:85:09:dc:e8:9d:dc:2a:c2:1a:03:71:68:36:74: 90:f8:01:41:ed:b0:56:48:53:76:fb:a1:de:06:44: 46:0b:c9:74:cb:7b:32:ab:91:1b:3a:46:ea:23:bc: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.87.72.0/23 Signature Algorithm: sha256WithRSAEncryption b3:74:81:9f:ec:52:06:b1:08:bd:9f:09:fd:a0:4a:d8:03:b8: 51:6b:75:97:15:11:d1:d5:64:e1:b6:b1:9c:7b:d3:44:6b:86: 14:da:c9:38:40:de:ce:3a:7e:69:2a:01:25:23:9a:a4:f8:79: e3:19:2b:d2:5b:55:7e:86:8e:b5:9a:98:ff:77:e9:31:06:3a: c0:0d:39:cc:1a:8b:cd:41:4f:24:58:35:15:d6:57:6f:1d:ed: 1b:8b:d6:79:cd:c3:30:c9:c0:5a:c7:e4:2f:39:21:49:12:d0: dc:46:fd:d9:d2:b0:64:6c:41:85:84:27:6e:08:5d:92:65:b0: 94:bc:54:25:35:ab:71:eb:98:0d:1b:a0:33:ce:e8:16:36:14: 8f:d0:25:9b:bf:51:3d:fc:56:cd:7c:45:8d:e6:ce:66:15:34: 2f:fd:71:65:2d:9d:d0:6a:ad:2d:10:5e:f9:3b:04:59:68:5e: 9e:67:c1:68:56:cf:f2:0e:36:da:28:ae:f1:c5:5e:9f:46:0a: 1c:07:8b:06:d2:e0:bc:c4:f4:60:be:44:33:29:d4:0e:32:13: 7b:be:fc:64:38:dc:ca:98:ae:ab:bf:64:8b:63:63:08:65:95: d3:ea:0a:d6:3d:30:ee:c2:f5:08:67:3f:ac:33:25:9b:6c:1f: 24:de:7d:de -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOJ/MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEwNTdaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDdGRkU2RUIxNTJGQUY5NkQxOEJGQzY5RkQzRTNCRjk5ODYyQUE5 RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgon4waZLX6OHE9kc Lrm5W95bKgLIdubuntkc5sa/mKZIxvmB4YS4R5ccOj9nsmRaJtxP31LaPqKd/OA1 CETUY30ZBBRZGh8yj9jBNhSv7x4ORaAKfF6RNwL9Do54JGbOd858nU4DhU3dFgGY Sk3EcBW0kaaz8357TS5SMAx7hCol1Ynz9QWHTSI8rksLbF8cjcvNM+glV9IP2uOY UqjSbKFrLXyA5gbSiYUs8hA/1Gf+XOXbtVxQpouQF18h1/5LoHmakfGbjsMCSVer a2KwMT6FCdzondwqwhoDcWg2dJD4AUHtsFZIU3b7od4GREYLyXTLezKrkRs6Ruoj vEZfAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUf/5usVL6+W0Yv8af0+O/mYYqqfEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Ni9mXzV1c1ZMNi1XMFl2OGFmMC1PX21ZWXFxZkUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ldIMA0GCSqGSIb3DQEBCwUA A4IBAQCzdIGf7FIGsQi9nwn9oErYA7hRa3WXFRHR1WThtrGce9NEa4YU2sk4QN7O On5pKgElI5qk+HnjGSvSW1V+ho61mpj/d+kxBjrADTnMGovNQU8kWDUV1ldvHe0b i9Z5zcMwycBax+QvOSFJEtDcRv3Z0rBkbEGFhCduCF2SZbCUvFQlNatx65gNG6Az zugWNhSP0CWbv1E9/FbNfEWN5s5mFTQv/XFlLZ3Qaq0tEF75OwRZaF6eZ8FoVs/y DjbaKK7xxV6fRgocB4sG0uC8xPRgvkQzKdQOMhN7vvxkONzKmK6rv2SLY2MIZZXT 6grWPTDuwvUIZz+sMyWbbB8k3n3e -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:53 2025 by rpki-client