$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/lpPABd1I-3AAbT-K0ysiHRUe08w.cer File: lpPABd1I-3AAbT-K0ysiHRUe08w.cer (raw, json) Hash identifier: M0XbC6N6dtk9TiGsCh7CW3VzsszeLRwwW0kEuuCPV3w= Subject key identifier: 96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E0CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:05:36 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2401:92a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57549 (0xe0cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:05:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9693C005DD48FB70006D3F8AD32B221D151ED3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:77:7f:fd:09:85:7f:98:fb:a8:80:53:4b: f2:4a:d9:a3:f7:5a:42:2e:1e:77:13:76:70:d5:6f: 5d:fa:57:13:82:2b:a8:05:dc:e8:9b:c4:13:7e:60: 47:a2:63:13:c1:c9:7c:20:20:01:96:08:32:13:57: 43:38:4f:59:97:bf:fd:82:d0:d4:a7:23:b7:32:da: 4b:64:36:f4:fa:8a:e9:2b:e6:5d:af:4e:4a:ed:b1: 61:af:76:cd:c4:e8:f8:4b:60:bc:e0:10:70:cc:86: 2a:fa:fe:e3:e1:23:8f:83:da:30:7e:74:76:76:04: a0:90:a9:c3:9f:0c:20:2c:3a:d1:5f:bb:a4:6f:19: b7:ec:b9:3e:a6:13:83:0c:26:48:23:76:9e:f8:b7: 97:9a:c2:e7:21:2d:cd:c0:5e:df:cb:ee:47:6a:04: de:84:37:a6:29:2a:a9:32:64:f0:08:00:cd:69:9a: f5:da:ad:6e:15:cf:dd:5e:67:3b:a1:bd:65:24:6c: 70:de:ae:62:74:8d:8a:30:4e:55:f0:3a:a9:9c:28: 37:71:2c:33:90:72:c4:6b:52:6f:14:67:47:2f:3b: b0:69:99:49:0b:2d:a0:0d:c8:c0:c2:b5:87:cb:0c: 50:d5:c6:5a:f1:15:23:bb:c8:66:c1:01:cc:24:08: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:92a0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:49:17:ac:6b:cb:04:04:f6:37:4d:45:15:33:eb:d5:66:ab: cd:45:89:e0:65:b4:30:d1:e3:bc:f2:32:9e:6d:c2:4d:09:95: 6c:04:19:27:ba:43:f2:7a:d6:a4:7d:76:d1:2c:58:51:df:a3: 23:6d:68:ee:81:be:43:c5:4e:df:55:2f:4a:f5:b1:39:fb:62: 62:3c:46:49:8a:53:5d:38:ce:1d:7e:8a:60:ea:0a:97:97:1c: d1:5e:e6:b5:57:9c:74:6e:53:15:10:64:71:83:b3:97:76:d5: 2b:c9:7a:9c:e3:29:f5:59:8b:40:63:4f:7d:32:4e:42:c5:2e: 9b:3c:df:a2:fb:5b:8b:7d:53:53:31:3a:8d:99:19:ad:d6:9f: 93:5d:2e:b8:8b:c3:0b:03:b9:2d:9d:51:c9:a4:3d:e0:da:01: 5d:a4:7d:bc:f9:bc:c4:8a:87:04:48:69:95:3b:72:89:3a:10: 1e:f6:21:4b:66:a4:df:58:ef:5a:3f:24:5a:23:97:8a:af:52: d9:aa:e2:49:2c:2c:74:84:26:0b:8a:ab:d2:19:ba:35:11:92: d1:32:8d:21:56:5f:de:33:30:bc:f2:bf:60:57:41:fd:f0:fd: cb:fa:62:a8:b1:ac:21:18:4c:4e:99:51:d9:12:6c:bc:3b:2a: 83:aa:f3:f3 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAODNMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA1MzZaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDk2OTNDMDA1REQ0OEZCNzAwMDZEM0Y4QUQzMkIyMjFEMTUxRUQz Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUHd//QmFf5j7qIBT S/JK2aP3WkIuHncTdnDVb136VxOCK6gF3OibxBN+YEeiYxPByXwgIAGWCDITV0M4 T1mXv/2C0NSnI7cy2ktkNvT6iukr5l2vTkrtsWGvds3E6PhLYLzgEHDMhir6/uPh I4+D2jB+dHZ2BKCQqcOfDCAsOtFfu6RvGbfsuT6mE4MMJkgjdp74t5eawuchLc3A Xt/L7kdqBN6EN6YpKqkyZPAIAM1pmvXarW4Vz91eZzuhvWUkbHDermJ0jYowTlXw OqmcKDdxLDOQcsRrUm8UZ0cvO7BpmUkLLaANyMDCtYfLDFDVxlrxFSO7yGbBAcwk CJ8FAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUlpPABd1I+3AAbT+K0ysiHRUe08ww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NC9scFBBQmQxSS0zQUFiVC1LMHlzaUhSVWUwOHcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGSoDANBgkqhkiG9w0BAQsF AAOCAQEAD0kXrGvLBAT2N01FFTPr1WarzUWJ4GW0MNHjvPIynm3CTQmVbAQZJ7pD 8nrWpH120SxYUd+jI21o7oG+Q8VO31UvSvWxOftiYjxGSYpTXTjOHX6KYOoKl5cc 0V7mtVecdG5TFRBkcYOzl3bVK8l6nOMp9VmLQGNPfTJOQsUumzzfovtbi31TUzE6 jZkZrdafk10uuIvDCwO5LZ1RyaQ94NoBXaR9vPm8xIqHBEhplTtyiToQHvYhS2ak 31jvWj8kWiOXiq9S2ariSSwsdIQmC4qr0hm6NRGS0TKNIVZf3jMwvPK/YFdB/fD9 y/piqLGsIRhMTplR2RJsvDsqg6rz8w== -----END CERTIFICATE-----Generated at Wed Nov 5 15:50:50 2025 by rpki-client