$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer File: iUp18p1qbq-EUdP-mXPCDuMBfko.cer (raw, json) Hash identifier: cJoxZpOyMJH1re+45hXxClChBqiLIIIVOzPlIUwQDTk= Subject key identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E1D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:08:49 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2400:6da0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57815 (0xe1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:08:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:47:41:2e:38:58:15:ff:7f:8c:9c:8c:13: 07:e3:e6:8a:dd:04:5f:64:6e:b9:79:ec:10:9a:00: 3d:50:3c:a8:db:f7:ef:c2:e0:8b:5a:b9:ab:77:c3: 64:b1:31:4b:27:0e:00:d2:3a:08:ad:1d:47:47:c7: 92:a1:18:fb:09:4c:29:89:a3:28:c2:1a:42:04:15: 02:58:21:ec:54:35:2c:26:f4:96:26:9f:78:1e:cc: 1d:09:2e:98:2e:d4:bb:2c:30:f4:73:3a:b8:03:57: dd:50:42:43:a8:86:38:52:86:d9:92:3b:88:26:1c: a9:f4:ca:92:77:7b:b1:27:8e:06:f4:e4:e1:41:c5: 68:33:f9:ee:b1:51:f9:c2:c9:a6:59:26:18:7a:94: ac:56:84:50:b7:1e:d0:57:c6:c8:b0:6b:96:a9:2d: 54:17:fa:e9:65:2e:fa:e9:7b:41:54:37:a6:43:ae: 86:4a:a9:db:f5:dd:32:1c:eb:49:82:77:dc:1d:14: c8:bf:ea:41:51:55:42:bb:79:0c:9b:87:cd:d3:95: e7:dd:ff:96:6d:a1:6f:9b:60:4a:d5:99:03:5f:81: 27:4a:35:a1:27:7f:24:d9:d2:51:8d:8f:bf:89:a4: 10:48:f1:10:90:ff:02:f5:09:52:78:12:29:2a:6e: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:6da0::/32 Signature Algorithm: sha256WithRSAEncryption 04:86:71:13:2c:f2:7f:08:c4:df:49:01:d3:c5:e4:fc:1a:ce: 80:6f:4b:e1:24:70:a5:46:7e:9d:25:3f:f7:c0:bc:fd:46:c9: 35:81:87:b5:4b:86:cc:d0:1a:d8:ed:15:f8:e2:f9:7f:51:d8: 6d:97:76:ca:7d:74:cd:7e:ba:4e:59:26:d7:1e:3d:53:b6:c7: 57:e3:7b:be:a2:bc:67:d8:66:7f:88:c9:56:2d:65:66:32:73: 0d:3f:0b:3a:97:02:b7:6f:00:b1:19:87:9c:f0:9c:f8:87:4f: 92:06:1f:0c:5f:1b:b1:e1:f9:ea:8e:c4:98:86:36:27:61:6f: a8:71:ff:8e:9c:80:53:d4:ea:a8:3e:04:ff:1d:c0:d4:cf:2c: e6:f6:a2:39:b0:97:06:39:b5:2f:81:91:7a:28:e5:21:0a:0c: 39:93:a7:22:7d:c0:34:fe:bc:e3:f2:e4:48:e1:d5:f1:55:24: 95:4c:a8:e5:e1:56:ba:1d:39:7d:b6:42:2f:a7:ee:75:b0:5f: 24:d8:52:a1:68:5e:7c:9b:17:0e:fd:19:d3:21:0a:4d:2f:ff: 4e:f8:63:00:a3:92:44:35:8e:c6:61:d0:d7:84:d1:95:45:0e: b8:62:01:85:9e:7f:52:7a:12:d0:55:a6:7d:02:2d:27:c0:bc: 7a:95:b8:4c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOHXMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA4NDlaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDg5NEE3NUYyOUQ2QTZFQUY4NDUxRDNGRTk5NzNDMjBFRTMwMTdF NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVUdBLjhYFf9/jJyM Ewfj5ordBF9kbrl57BCaAD1QPKjb9+/C4Itauat3w2SxMUsnDgDSOgitHUdHx5Kh GPsJTCmJoyjCGkIEFQJYIexUNSwm9JYmn3gezB0JLpgu1LssMPRzOrgDV91QQkOo hjhShtmSO4gmHKn0ypJ3e7Enjgb05OFBxWgz+e6xUfnCyaZZJhh6lKxWhFC3HtBX xsiwa5apLVQX+ullLvrpe0FUN6ZDroZKqdv13TIc60mCd9wdFMi/6kFRVUK7eQyb h83Tlefd/5ZtoW+bYErVmQNfgSdKNaEnfyTZ0lGNj7+JpBBI8RCQ/wL1CVJ4Eikq blOFAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUiUp18p1qbq+EUdP+mXPCDuMBfkow HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx NDMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzE0My9pVXAxOHAxcWJxLUVVZFAtbVhQQ0R1TUJma28ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJABtoDANBgkqhkiG9w0BAQsF AAOCAQEABIZxEyzyfwjE30kB08Xk/BrOgG9L4SRwpUZ+nSU/98C8/UbJNYGHtUuG zNAa2O0V+OL5f1HYbZd2yn10zX66Tlkm1x49U7bHV+N7vqK8Z9hmf4jJVi1lZjJz DT8LOpcCt28AsRmHnPCc+IdPkgYfDF8bseH56o7EmIY2J2FvqHH/jpyAU9TqqD4E /x3A1M8s5vaiObCXBjm1L4GReijlIQoMOZOnIn3ANP684/LkSOHV8VUklUyo5eFW uh05fbZCL6fudbBfJNhSoWhefJsXDv0Z0yEKTS//TvhjAKOSRDWOxmHQ14TRlUUO uGIBhZ5/UnoS0FWmfQItJ8C8epW4TA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:24 2025 by rpki-client