$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer File: f_5usVL6-W0Yv8af0-O_mYYqqfE.cer (raw, json) Hash identifier: rDwlX10Ct+iEA/cqklYnWa3TGaS6pu1zt1Qn65iMDwc= Subject key identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D9AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:16:35 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 210.87.72.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 17:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55724 (0xd9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:16:35 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:89:f8:c1:a6:4b:5f:a3:87:13:d9:1c:2e: b9:b9:5b:de:5b:2a:02:c8:76:e6:ee:9e:d9:1c:e6: c6:bf:98:a6:48:c6:f9:81:e1:84:b8:47:97:1c:3a: 3f:67:b2:64:5a:26:dc:4f:df:52:da:3e:a2:9d:fc: e0:35:08:44:d4:63:7d:19:04:14:59:1a:1f:32:8f: d8:c1:36:14:af:ef:1e:0e:45:a0:0a:7c:5e:91:37: 02:fd:0e:8e:78:24:66:ce:77:ce:7c:9d:4e:03:85: 4d:dd:16:01:98:4a:4d:c4:70:15:b4:91:a6:b3:f3: 7e:7b:4d:2e:52:30:0c:7b:84:2a:25:d5:89:f3:f5: 05:87:4d:22:3c:ae:4b:0b:6c:5f:1c:8d:cb:cd:33: e8:25:57:d2:0f:da:e3:98:52:a8:d2:6c:a1:6b:2d: 7c:80:e6:06:d2:89:85:2c:f2:10:3f:d4:67:fe:5c: e5:db:b5:5c:50:a6:8b:90:17:5f:21:d7:fe:4b:a0: 79:9a:91:f1:9b:8e:c3:02:49:57:ab:6b:62:b0:31: 3e:85:09:dc:e8:9d:dc:2a:c2:1a:03:71:68:36:74: 90:f8:01:41:ed:b0:56:48:53:76:fb:a1:de:06:44: 46:0b:c9:74:cb:7b:32:ab:91:1b:3a:46:ea:23:bc: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.87.72.0/23 Signature Algorithm: sha256WithRSAEncryption b6:3a:4e:d9:5a:e2:40:dd:d5:bc:19:4a:c8:e6:e5:79:6a:be: 6c:e3:96:2a:97:db:39:22:f9:6d:df:24:a0:da:8a:ca:be:97: 80:12:9b:9d:b4:d5:fd:b8:9d:9d:71:f1:e3:e6:5e:a4:80:d4: cb:b3:c8:2e:6e:04:f8:a2:69:fb:d2:2f:0e:e2:73:36:fd:cd: 93:95:71:3c:a9:36:9f:e5:d4:bf:04:30:db:4b:e4:80:d4:1a: a6:48:aa:bb:06:a1:70:4e:99:a8:89:8b:ea:37:58:be:f3:d1: d5:1f:23:a5:3e:2a:4c:2a:58:d8:16:36:62:8d:5d:d6:8c:5b: 45:17:42:b9:9b:56:dc:4d:0d:37:b6:57:bd:64:79:11:9b:21: 64:60:de:e2:20:2e:25:df:19:94:1b:1a:d3:dd:b1:30:7f:d3: 34:d8:2a:3f:06:98:4e:b4:a3:ca:80:16:f6:bb:5a:35:86:be: 55:5b:00:8c:98:25:57:2f:9f:8c:f8:70:c2:d3:5a:bf:79:5b: c0:fa:b3:8c:58:d5:46:03:19:86:b5:ab:2e:4e:48:42:a0:f3: 1e:21:de:27:72:78:ba:54:82:f3:9d:70:8b:20:80:51:38:48: 65:37:a8:68:ea:8d:fe:87:01:aa:51:52:2e:73:2c:3f:2d:60: d9:d8:67:15 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDANmsMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE2MzVaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDdGRkU2RUIxNTJGQUY5NkQxOEJGQzY5RkQzRTNCRjk5ODYyQUE5 RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgon4waZLX6OHE9kc Lrm5W95bKgLIdubuntkc5sa/mKZIxvmB4YS4R5ccOj9nsmRaJtxP31LaPqKd/OA1 CETUY30ZBBRZGh8yj9jBNhSv7x4ORaAKfF6RNwL9Do54JGbOd858nU4DhU3dFgGY Sk3EcBW0kaaz8357TS5SMAx7hCol1Ynz9QWHTSI8rksLbF8cjcvNM+glV9IP2uOY UqjSbKFrLXyA5gbSiYUs8hA/1Gf+XOXbtVxQpouQF18h1/5LoHmakfGbjsMCSVer a2KwMT6FCdzondwqwhoDcWg2dJD4AUHtsFZIU3b7od4GREYLyXTLezKrkRs6Ruoj vEZfAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUf/5usVL6+W0Yv8af0+O/mYYqqfEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Ni9mXzV1c1ZMNi1XMFl2OGFmMC1PX21ZWXFxZkUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ldIMA0GCSqGSIb3DQEBCwUA A4IBAQC2Ok7ZWuJA3dW8GUrI5uV5ar5s45Yql9s5Ivlt3ySg2orKvpeAEpudtNX9 uJ2dcfHj5l6kgNTLs8gubgT4omn70i8O4nM2/c2TlXE8qTaf5dS/BDDbS+SA1Bqm SKq7BqFwTpmoiYvqN1i+89HVHyOlPipMKljYFjZijV3WjFtFF0K5m1bcTQ03tle9 ZHkRmyFkYN7iIC4l3xmUGxrT3bEwf9M02Co/BphOtKPKgBb2u1o1hr5VWwCMmCVX L5+M+HDC01q/eVvA+rOMWNVGAxmGtasuTkhCoPMeId4ncni6VILznXCLIIBROEhl N6ho6o3+hwGqUVIucyw/LWDZ2GcV -----END CERTIFICATE-----Generated at Tue Aug 12 14:02:13 2025 by rpki-client