$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jJMxBDzLH-EZ8cLr4BxWx982ErY.cer File: jJMxBDzLH-EZ8cLr4BxWx982ErY.cer (raw, json) Hash identifier: dT33vYbAVYOnto2Gu1MpCaN9ZxUAaKeAXEam868fkgg= Subject key identifier: 8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:09:54 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 110.173.96.0/19 IP: 202.173.224.0/19 IP: 211.148.128.0/19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57897 (0xe229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:09:54 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8C9331043CCB1FE119F1C2EBE01C56C7DF3612B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:8b:ea:85:4d:aa:e4:c7:13:27:38:a2:60: 25:f6:31:79:b5:03:71:85:15:6f:4e:7e:95:b2:96: 56:fb:6a:41:65:6f:07:d2:2c:80:04:67:e5:2a:61: e0:77:a3:3d:01:54:df:6c:7d:05:18:91:1e:43:7a: 23:cd:87:a0:b8:53:0c:c5:88:cd:61:20:34:40:f8: a0:1e:36:08:94:60:6c:00:13:49:f6:f7:a4:84:c8: ac:03:f2:fe:0f:27:16:d5:52:3b:a2:4e:49:8e:01: e6:ae:35:4d:b2:73:52:b6:4c:39:df:18:a8:21:22: b7:7e:60:dc:49:9d:c2:85:c8:10:37:5a:13:e5:22: 8d:57:dd:a7:80:c3:98:49:d3:82:c2:6e:58:7a:1d: 7c:0a:1d:ef:75:93:94:dd:23:6d:77:82:ec:88:66: a7:56:5a:18:c8:28:8c:84:23:9a:11:df:a1:7c:44: 5f:0b:f1:f4:ff:d6:9b:4f:8e:98:b4:90:97:2f:61: 4b:96:3a:ec:0e:ab:12:92:4a:5a:94:e9:b6:02:05: 63:62:9c:90:41:24:82:f8:83:b9:95:4a:35:1d:07: 93:06:c6:44:f7:98:69:fe:0c:d4:e8:85:3e:0b:df: 55:ae:7f:3a:4d:dd:77:dc:d3:68:43:d9:63:83:bf: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.173.96.0/19 202.173.224.0/19 211.148.128.0/19 Signature Algorithm: sha256WithRSAEncryption b1:cd:d7:90:63:ad:53:12:06:55:fd:73:68:1c:2c:71:6b:bb: 8e:74:98:cf:e6:5c:c0:dc:c0:3e:c0:6a:84:3b:df:02:79:6d: ae:d4:f5:61:50:af:c1:bb:55:8d:d2:c3:25:8b:08:84:42:6d: 68:8b:13:1c:e2:37:5d:8d:52:af:7d:ff:04:79:df:9e:93:a6: 2b:a6:e4:65:13:f1:c8:d5:6c:c6:0a:be:29:c9:14:f1:63:00: fd:5a:cc:13:4a:49:05:e7:23:db:8a:c1:ec:fb:fb:fb:b3:4a: 84:0d:1a:8d:06:40:2b:31:c8:75:8c:97:c6:33:9c:4c:a1:68: 3c:33:d6:da:20:88:c2:83:93:f5:8c:41:13:4c:e0:de:e5:31: e8:e2:0d:44:c1:02:52:cc:cf:6e:17:49:06:4b:b8:48:cd:0f: 1c:4f:0f:1a:49:18:f2:a4:cf:29:df:46:8f:83:b2:a9:14:48: 1f:94:8e:23:36:f7:41:00:a5:0e:15:57:11:bc:4f:a2:97:7d: 77:92:dd:90:2d:60:de:1b:6c:5e:c1:c1:cb:96:0d:5a:49:dd: 11:c4:03:2f:87:59:ee:0d:14:e3:d0:4e:4b:a0:32:6d:21:13: 16:ff:d0:05:18:ed:c8:00:38:7d:73:55:bd:aa:9b:c2:3a:c9: 36:db:bc:83 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDAOIpMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA5NTRaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDhDOTMzMTA0M0NDQjFGRTExOUYxQzJFQkUwMUM1NkM3REYzNjEy QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hIvqhU2q5McTJzii YCX2MXm1A3GFFW9OfpWyllb7akFlbwfSLIAEZ+UqYeB3oz0BVN9sfQUYkR5DeiPN h6C4UwzFiM1hIDRA+KAeNgiUYGwAE0n296SEyKwD8v4PJxbVUjuiTkmOAeauNU2y c1K2TDnfGKghIrd+YNxJncKFyBA3WhPlIo1X3aeAw5hJ04LCblh6HXwKHe91k5Td I213guyIZqdWWhjIKIyEI5oR36F8RF8L8fT/1ptPjpi0kJcvYUuWOuwOqxKSSlqU 6bYCBWNinJBBJIL4g7mVSjUdB5MGxkT3mGn+DNTohT4L31WufzpN3Xfc02hD2WOD v/AxAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUjJMxBDzLH+EZ8cLr4BxWx982ErYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1NC9qSk14QkR6TEgtRVo4Y0xyNEJ4V3g5ODJFclkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFbq1gAwQFyq3gAwQF05SAMA0G CSqGSIb3DQEBCwUAA4IBAQCxzdeQY61TEgZV/XNoHCxxa7uOdJjP5lzA3MA+wGqE O98CeW2u1PVhUK/Bu1WN0sMliwiEQm1oixMc4jddjVKvff8Eed+ek6YrpuRlE/HI 1WzGCr4pyRTxYwD9WswTSkkF5yPbisHs+/v7s0qEDRqNBkArMch1jJfGM5xMoWg8 M9baIIjCg5P1jEETTODe5THo4g1EwQJSzM9uF0kGS7hIzQ8cTw8aSRjypM8p30aP g7KpFEgflI4jNvdBAKUOFVcRvE+il313kt2QLWDeG2xewcHLlg1aSd0RxAMvh1nu DRTj0E5LoDJtIRMW/9AFGO3IADh9c1W9qpvCOsk227yD -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:39 2025 by rpki-client