$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer File: q8wu6vrqrw1E480gBAmZ7T6LblY.cer (raw, json) Hash identifier: ET83g+H2hK3w9h9QbWrHp7bEed3fhbvybA2Ct+BCVTo= Subject key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E19D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:08:04 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 103.20.160.0/22 IP: 150.242.244.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57757 (0xe19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:08:04 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:aa:16:47:15:70:b5:be:06:de:4a:d6:11: a1:38:c8:75:fd:5e:0f:86:9d:e0:e6:22:42:c1:f6: 3e:7e:04:38:0a:f2:2c:b3:10:5b:89:38:43:0e:1d: e2:9d:9b:d2:3b:1d:22:25:42:38:cc:92:10:85:28: f6:9d:7d:de:d3:e9:5e:7a:4f:74:ec:1c:66:be:1b: db:45:6d:9a:d7:1b:35:39:59:cb:57:ec:b8:de:dd: 18:f2:56:d0:e3:5c:22:ed:aa:75:f6:74:2f:82:1f: b5:96:81:fd:58:09:40:cc:61:e5:c6:7b:87:21:ff: 15:07:d8:33:d4:80:fe:47:13:2e:44:23:10:cf:11: 5d:93:db:9a:65:6e:fa:99:ee:f3:98:e3:e1:f6:c3: 68:a8:9d:01:55:f6:e2:4a:e9:9c:36:d2:65:b2:17: 2c:6f:80:d4:7f:0a:f4:23:df:8a:b6:73:c3:92:21: 47:54:23:f3:39:ad:15:ac:e9:0a:d1:97:e6:86:73: f4:c6:1c:00:42:29:5c:26:81:95:34:8b:56:be:29: a5:f1:52:35:d9:65:10:f7:76:39:aa:f7:42:a9:43: 74:92:c9:f3:70:95:0d:03:a3:7a:15:a1:7a:69:09: 5a:c4:2a:30:38:3d:e3:f9:cd:61:2d:af:35:d2:9b: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.20.160.0/22 150.242.244.0/22 Signature Algorithm: sha256WithRSAEncryption 12:16:e2:01:e2:fe:4d:9a:4d:9c:4d:18:2c:5b:e0:38:14:42: 7f:0e:f6:b7:cd:12:bf:61:3c:a3:34:4e:80:4b:05:97:ae:3c: 8f:5b:09:89:2f:cd:5e:74:2f:39:47:cc:90:5d:c2:40:39:db: ad:03:9b:f4:ea:b2:2e:fd:1f:c1:2f:5b:c8:7b:5a:bf:7e:d7: 16:68:68:a0:ec:e0:86:c1:2d:37:10:c1:bb:1a:44:50:6b:19: 5d:f3:4a:27:9e:2e:6e:fd:9f:40:ae:96:59:22:86:c5:61:5c: 1d:c4:c1:5a:36:9d:38:9f:54:4b:74:77:9b:c6:0e:4f:31:fa: d0:c3:e9:7b:78:77:69:98:e3:3e:e7:6e:97:2a:6c:f4:19:af: 31:3c:1f:ca:c7:be:68:1a:67:d7:7c:27:0c:aa:f4:4f:30:fe: e3:4c:e1:f5:0b:4a:e9:bf:1e:b5:ad:8f:27:1a:ed:3d:6d:30: d4:66:3a:25:b6:92:d6:d2:cd:52:99:54:12:86:c9:6c:35:41: e0:8e:8d:b6:e0:43:fa:a8:2a:76:cf:7d:b2:12:55:4b:cd:fd: 12:5c:60:fb:b5:ef:0e:a7:18:eb:17:9e:7c:26:36:d6:53:b2: 6e:6f:32:0b:d8:ba:59:e0:6a:36:65:fa:c3:8b:3c:35:d4:a7: f1:f3:47:f6 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAOGdMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA4MDRaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEFCQ0MyRUVBRkFFQUFGMEQ0NEUzQ0QyMDA0MDk5OUVEM0U4QjZF NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIKoWRxVwtb4G3krW EaE4yHX9Xg+GneDmIkLB9j5+BDgK8iyzEFuJOEMOHeKdm9I7HSIlQjjMkhCFKPad fd7T6V56T3TsHGa+G9tFbZrXGzU5WctX7Lje3RjyVtDjXCLtqnX2dC+CH7WWgf1Y CUDMYeXGe4ch/xUH2DPUgP5HEy5EIxDPEV2T25plbvqZ7vOY4+H2w2ionQFV9uJK 6Zw20mWyFyxvgNR/CvQj34q2c8OSIUdUI/M5rRWs6QrRl+aGc/TGHABCKVwmgZU0 i1a+KaXxUjXZZRD3djmq90KpQ3SSyfNwlQ0Do3oVoXppCVrEKjA4PeP5zWEtrzXS m7l1AgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUq8wu6vrqrw1E480gBAmZ7T6LblYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMxNy9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZxSgAwQClvL0MA0GCSqGSIb3 DQEBCwUAA4IBAQASFuIB4v5Nmk2cTRgsW+A4FEJ/Dva3zRK/YTyjNE6ASwWXrjyP WwmJL81edC85R8yQXcJAOdutA5v06rIu/R/BL1vIe1q/ftcWaGig7OCGwS03EMG7 GkRQaxld80onni5u/Z9ArpZZIobFYVwdxMFaNp04n1RLdHebxg5PMfrQw+l7eHdp mOM+526XKmz0Ga8xPB/Kx75oGmfXfCcMqvRPMP7jTOH1C0rpvx61rY8nGu09bTDU ZjoltpLW0s1SmVQShslsNUHgjo224EP6qCp2z32yElVLzf0SXGD7te8OpxjrF558 JjbWU7JubzIL2LpZ4Go2ZfrDizw11Kfx80f2 -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:34 2025 by rpki-client