$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer File: kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer (raw, json) Hash identifier: 4LexVhuh90gkglPqQXnvkoInzZ5XcXnhzamQoyu6IfY= Subject key identifier: 91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:13:16 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 151241 IP: 2402:16e0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55440 (0xd890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:13:16 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=91B3CFBF06D0F4F0610D21720AB8C769FA7F0285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:d4:1c:e3:ab:c3:c0:96:6c:f1:34:b0:40: 80:72:18:73:ec:5f:ef:a9:9f:62:41:e3:83:87:8a: 79:7e:33:5b:85:a1:84:01:6e:21:5f:ea:9d:cc:19: f3:8e:d3:99:82:31:ca:07:d2:ea:bb:54:19:5d:47: 94:65:91:78:58:d7:63:17:4e:3b:0b:dd:77:e5:4b: fe:40:45:e4:0c:dd:df:c9:e4:8a:11:cf:bd:66:0b: ed:09:71:f2:67:f1:ca:2e:68:bb:75:9e:5f:41:ab: e7:92:19:4c:ce:33:fb:06:6d:bb:fa:1b:80:7b:91: e5:b0:53:e4:1c:c0:75:97:6f:2b:7f:8b:38:c5:80: 3c:e5:dc:f4:b3:47:24:9c:16:e3:c0:0a:97:ac:f2: 0b:33:cd:98:53:33:07:25:b9:fd:20:86:d8:31:43: 77:a1:bd:5d:e2:0e:df:03:d8:dc:4f:79:bd:a0:88: 10:ba:ff:08:b6:07:ff:84:f9:8a:51:d6:b4:57:07: 01:4b:92:fb:61:46:78:80:d0:f4:c1:9c:9b:3d:0c: 57:42:79:bc:2e:85:4f:8b:0c:cd:00:c2:bf:b0:a7: 07:e3:2a:91:3a:58:8e:d2:dc:ac:d6:75:bb:35:a9: 8e:52:12:4f:73:f8:15:51:dc:7d:9c:fe:a2:69:77: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151241 sbgp-ipAddrBlock: critical IPv6: 2402:16e0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:13:70:80:28:0f:a1:64:4d:03:61:67:0e:dd:10:ef:ac:0d: 3a:95:24:41:6c:c5:d9:c7:22:29:69:c2:1c:c2:67:c5:b9:07: 15:08:b4:d8:c3:8d:61:a6:d0:e1:51:c1:fd:7c:4a:da:a9:3f: 53:73:12:63:80:ca:ae:41:32:5a:34:6c:af:7a:0b:f0:ad:58: f0:27:b5:9f:26:a2:15:3e:e8:24:1f:e3:5c:86:92:0e:78:84: b2:c2:fa:e0:16:50:2a:6a:40:3f:f5:f5:0f:3b:5c:9f:b5:16: 23:ed:cf:d6:8a:a5:a7:4d:82:da:d9:8b:a2:2b:12:d9:9a:e5: b7:0c:a1:81:ce:51:3f:68:1e:75:22:d9:7a:da:5a:d5:4f:a0: 2f:15:69:7a:c3:c4:6f:97:21:f5:0c:0d:8b:b4:34:07:48:fc: 98:fe:86:a9:83:d6:f7:35:72:2b:64:4f:8b:73:31:dc:d4:f2: 93:3f:ad:6a:af:d2:49:f9:a6:7e:4a:89:86:c5:44:1b:be:9f: cc:b1:49:26:59:59:84:64:70:58:1e:0b:1b:d5:e7:40:aa:10: 16:87:33:ac:bb:9e:88:c6:0e:28:d0:0a:d3:cc:aa:e4:26:69: dd:de:3d:89:0a:18:ee:a1:ca:8c:c1:79:84:9c:22:72:c5:66: 3e:f0:51:e2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDANiQMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzMTZaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDkxQjNDRkJGMDZEMEY0RjA2MTBEMjE3MjBBQjhDNzY5RkE3RjAy ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJtQc46vDwJZs8TSw QIByGHPsX++pn2JB44OHinl+M1uFoYQBbiFf6p3MGfOO05mCMcoH0uq7VBldR5Rl kXhY12MXTjsL3XflS/5AReQM3d/J5IoRz71mC+0JcfJn8couaLt1nl9Bq+eSGUzO M/sGbbv6G4B7keWwU+QcwHWXbyt/izjFgDzl3PSzRyScFuPACpes8gszzZhTMwcl uf0ghtgxQ3ehvV3iDt8D2NxPeb2giBC6/wi2B/+E+YpR1rRXBwFLkvthRniA0PTB nJs9DFdCebwuhU+LDM0Awr+wpwfjKpE6WI7S3KzWdbs1qY5SEk9z+BVR3H2c/qJp d8RvAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUkbPPvwbQ9PBhDSFyCrjHafp/AoUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz ODIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM4Mi9rYlBQdndiUTlQQmhEU0Z5Q3JqSGFmcF9Bb1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOyTAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQCFuAwDQYJKoZIhvcNAQELBQADggEBAC0TcIAoD6FkTQNhZw7d EO+sDTqVJEFsxdnHIilpwhzCZ8W5BxUItNjDjWGm0OFRwf18StqpP1NzEmOAyq5B Mlo0bK96C/CtWPAntZ8mohU+6CQf41yGkg54hLLC+uAWUCpqQD/19Q87XJ+1FiPt z9aKpadNgtrZi6IrEtma5bcMoYHOUT9oHnUi2XraWtVPoC8VaXrDxG+XIfUMDYu0 NAdI/Jj+hqmD1vc1citkT4tzMdzU8pM/rWqv0kn5pn5KiYbFRBu+n8yxSSZZWYRk cFgeCxvV50CqEBaHM6y7nojGDijQCtPMquQmad3ePYkKGO6hyozBeYScInLFZj7w UeI= -----END CERTIFICATE-----Generated at Wed Aug 13 05:54:02 2025 by rpki-client