$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer File: ii_gbrsaEyg7Dk5QWd2p82MpLvo.cer (raw, json) Hash identifier: /59klnNr5t8tOePJ2ly594JBCFOZ7kChvREZGqkufXQ= Subject key identifier: 8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 428F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 09:33:44 +0000 Certificate not after: Fri 23 Oct 2026 09:22:11 +0000 Subordinate resources: IP: 157.15.104.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17039 (0x428f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 09:33:44 2025 GMT Not After : Oct 23 09:22:11 2026 GMT Subject: CN=8A2FE06EBB1A13283B0E4E5059DDA9F363292EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:9e:eb:52:e0:91:c4:df:5e:d5:46:26:f1: 57:8f:ec:fb:37:21:aa:66:69:f0:41:b7:30:ab:10: 32:ef:f3:7e:cf:2e:23:d2:a9:37:2b:40:1b:f1:0b: a9:cb:1a:71:00:8b:89:10:2d:b2:d3:28:a1:72:0a: d8:74:92:2f:6f:e7:cf:f4:95:73:f4:14:a3:bc:4d: ac:6e:a8:27:cb:05:eb:37:e8:b1:41:5b:60:11:fb: c4:4a:07:9f:9b:cd:f8:eb:32:e4:cf:bb:0c:13:f4: 5d:9d:86:38:88:dd:7b:f3:bf:fb:7d:85:b4:aa:0d: cd:08:c2:16:13:e8:c8:63:c8:d8:c5:a6:bd:2b:8f: 03:3a:41:e4:e6:29:98:7d:e8:7d:bc:e5:d7:f3:47: 63:51:97:3b:cb:67:3f:07:94:62:7c:af:5a:eb:49: 9e:22:bd:42:e8:d5:9c:d2:75:63:aa:fd:88:4f:dc: b6:12:87:15:d8:07:db:8c:10:18:4e:9f:df:d4:c6: e4:fe:2f:be:a9:7c:12:32:50:b0:2a:8e:e9:bf:39: 14:90:60:25:c5:e1:9e:17:10:61:b1:61:da:89:e7: 24:48:d6:73:9b:cf:a1:8c:bf:10:03:10:69:ef:e3: c5:e9:ce:9c:60:dd:3c:e8:11:1f:8c:c5:38:3e:39: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2F:E0:6E:BB:1A:13:28:3B:0E:4E:50:59:DD:A9:F3:63:29:2E:FA X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ii_gbrsaEyg7Dk5QWd2p82MpLvo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.15.104.0/23 Signature Algorithm: sha256WithRSAEncryption 61:02:0a:85:d7:f5:58:4f:94:0c:9d:03:c0:9a:05:26:59:10: 83:8c:ac:dc:2a:38:a0:00:a6:db:d7:f3:6b:78:f0:12:e9:4e: ef:5e:5e:0a:2c:11:ad:2f:90:fb:4f:af:ac:4b:9b:62:eb:4b: 1f:b1:7a:78:73:8b:b0:fb:dd:60:1e:50:93:05:39:1a:43:69: a2:30:03:9b:ea:b0:d4:6a:dd:90:66:3d:83:bf:05:69:51:fa: 11:d2:af:b3:97:82:74:64:13:72:83:ed:bf:35:dd:67:dc:4f: 9b:3a:65:02:9c:89:a1:64:0c:23:bd:aa:7b:42:23:e4:dd:9f: 91:88:02:b3:2b:43:90:4e:43:eb:8e:13:e4:6f:2a:ad:06:7e: 70:a7:09:29:b9:07:10:88:e4:6f:0d:7d:de:df:3f:f8:ae:21: f9:76:24:28:54:8c:1b:a0:36:00:da:b2:d1:65:c1:6f:29:7c: d4:a5:d2:c3:f9:ed:e3:66:c1:a7:22:d1:8d:77:68:0c:c8:19: 70:6d:5b:02:5c:2a:22:ca:a5:88:4e:3f:c9:e1:19:fd:13:3a: 60:5c:a8:b3:b2:a8:b7:d5:f2:3f:51:61:1c:ef:92:20:bd:80: 60:62:f6:94:a9:5a:88:64:fa:c1:10:35:07:8c:4f:2e:2e:45: 6e:c4:86:97 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQo8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzA5MzM0NFoXDTI2MTAyMzA5MjIxMVowMzEx MC8GA1UEAxMoOEEyRkUwNkVCQjFBMTMyODNCMEU0RTUwNTlEREE5RjM2MzI5MkVG QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6bnutS4JHE317VRibx V4/s+zchqmZp8EG3MKsQMu/zfs8uI9KpNytAG/ELqcsacQCLiRAtstMooXIK2HSS L2/nz/SVc/QUo7xNrG6oJ8sF6zfosUFbYBH7xEoHn5vN+Osy5M+7DBP0XZ2GOIjd e/O/+32FtKoNzQjCFhPoyGPI2MWmvSuPAzpB5OYpmH3ofbzl1/NHY1GXO8tnPweU YnyvWutJniK9QujVnNJ1Y6r9iE/cthKHFdgH24wQGE6f39TG5P4vvql8EjJQsCqO 6b85FJBgJcXhnhcQYbFh2onnJEjWc5vPoYy/EAMQae/jxenOnGDdPOgRH4zFOD45 LHkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSKL+BuuxoTKDsOTlBZ3anzYyku+jAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjY2L2lpX2dicnNhRXlnN0RrNVFXZDJwODJNcEx2by5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdD2gwDQYJKoZIhvcNAQELBQAD ggEBAGECCoXX9VhPlAydA8CaBSZZEIOMrNwqOKAAptvX82t48BLpTu9eXgosEa0v kPtPr6xLm2LrSx+xenhzi7D73WAeUJMFORpDaaIwA5vqsNRq3ZBmPYO/BWlR+hHS r7OXgnRkE3KD7b813WfcT5s6ZQKciaFkDCO9qntCI+Tdn5GIArMrQ5BOQ+uOE+Rv Kq0GfnCnCSm5BxCI5G8Nfd7fP/iuIfl2JChUjBugNgDastFlwW8pfNSl0sP57eNm waci0Y13aAzIGXBtWwJcKiLKpYhOP8nhGf0TOmBcqLOyqLfV8j9RYRzvkiC9gGBi 9pSpWohk+sEQNQeMTy4uRW7Ehpc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:04:18 2025 by rpki-client