$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer File: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer (raw, json) Hash identifier: PZSO6i8dNztyRg5nVMIYF1D9Lvae3yv2cr3SqZv1QJY= Subject key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:09:49 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2401:a720::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57891 (0xe223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:09:49 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:ac:7b:83:c2:5c:5a:cd:e2:76:64:31:01: b6:81:2b:77:7b:7f:96:68:39:07:f3:31:75:86:f4: 95:ec:77:a2:6d:19:8d:8c:29:49:21:04:39:98:43: 2d:3c:6d:8d:eb:b3:08:c5:2a:7d:79:4e:63:22:38: fc:0a:8e:5a:e5:de:8a:8c:e9:61:d3:53:1b:76:38: f4:b9:18:98:b2:a1:8a:02:ba:fb:39:c8:3a:f4:ac: ed:73:e5:73:9a:35:45:10:26:b6:09:49:52:ec:29: 2a:ab:e8:cc:d4:df:6a:2a:d2:e3:56:61:76:69:26: b9:1a:0c:b9:b2:36:06:12:d3:40:d6:72:11:61:f7: ec:59:7e:dc:5b:9a:3d:0e:da:14:8e:40:da:68:37: a7:43:08:3f:d3:eb:7b:f2:7d:90:98:a4:c2:23:9a: a7:b1:d0:49:50:29:83:90:15:25:11:7d:20:90:72: 42:cf:cf:38:3d:76:a3:49:39:c1:f2:72:aa:39:ba: f3:cb:53:ed:ca:28:b3:74:6e:25:78:d6:02:e6:64: d8:24:92:82:34:f2:38:74:78:28:91:cf:f0:91:a7: d4:57:35:89:99:b8:83:e0:ed:a6:aa:64:30:18:36: 25:ac:36:65:dd:e4:ad:99:18:a0:fa:65:cb:81:a4: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:a720::/32 Signature Algorithm: sha256WithRSAEncryption 14:96:34:b6:c7:46:38:26:94:ae:f5:95:f9:16:61:46:55:a4: 7a:ed:c2:4a:71:ce:8d:c8:f3:d3:4e:1e:07:fa:8a:1d:75:82: cc:c2:2e:97:e9:22:b2:25:47:7a:5c:2e:eb:33:9e:e2:33:16: e5:13:8a:9a:30:8b:27:26:ff:ee:92:79:a9:78:7d:5d:53:f7: b6:20:3f:50:95:b7:f3:bf:a7:42:d4:86:82:07:29:cc:ec:9f: 37:5b:25:f2:82:0a:62:77:0f:19:8e:74:53:f3:85:8e:58:10: 1a:1e:49:7e:96:33:fa:9d:7e:ce:32:2c:01:41:d1:5b:67:44: 89:71:98:e3:20:95:d1:f8:61:1c:42:5c:9d:e5:06:e6:00:e3: 70:23:fa:a8:51:24:ee:6f:5f:f7:3e:aa:81:ae:12:12:e2:ba: 08:fd:a8:b1:5d:e3:bd:1d:54:c1:b0:94:1f:75:ec:54:ad:9b: 08:74:97:c1:22:70:98:58:5b:3f:2a:70:35:d8:db:64:1d:9f: 76:d5:b5:14:66:01:65:1c:59:67:84:b7:9a:c8:44:a6:bb:43: d3:ce:12:63:09:fa:68:c8:4a:06:c0:22:4f:b5:f6:ee:d4:d4: 18:dc:69:0a:1d:95:3b:1e:90:2e:69:c7:a8:1b:04:88:bf:c9: 16:47:95:c4 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOIjMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA5NDlaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEFGOEE1NzFDMEM3Q0JBMzE5M0M3RTk0MUNGNDYzMURDMzMwMjNG RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4Kx7g8JcWs3idmQx AbaBK3d7f5ZoOQfzMXWG9JXsd6JtGY2MKUkhBDmYQy08bY3rswjFKn15TmMiOPwK jlrl3oqM6WHTUxt2OPS5GJiyoYoCuvs5yDr0rO1z5XOaNUUQJrYJSVLsKSqr6MzU 32oq0uNWYXZpJrkaDLmyNgYS00DWchFh9+xZftxbmj0O2hSOQNpoN6dDCD/T63vy fZCYpMIjmqex0ElQKYOQFSURfSCQckLPzzg9dqNJOcHycqo5uvPLU+3KKLN0biV4 1gLmZNgkkoI08jh0eCiRz/CRp9RXNYmZuIPg7aaqZDAYNiWsNmXd5K2ZGKD6ZcuB pA5lAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUr4pXHAx8ujGTx+lBz0Yx3DMCP9kw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy OTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI5My9yNHBYSEF4OHVqR1R4LWxCejBZeDNETUNQOWsubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGnIDANBgkqhkiG9w0BAQsF AAOCAQEAFJY0tsdGOCaUrvWV+RZhRlWkeu3CSnHOjcjz004eB/qKHXWCzMIul+ki siVHelwu6zOe4jMW5ROKmjCLJyb/7pJ5qXh9XVP3tiA/UJW387+nQtSGggcpzOyf N1sl8oIKYncPGY50U/OFjlgQGh5JfpYz+p1+zjIsAUHRW2dEiXGY4yCV0fhhHEJc neUG5gDjcCP6qFEk7m9f9z6qga4SEuK6CP2osV3jvR1UwbCUH3XsVK2bCHSXwSJw mFhbPypwNdjbZB2fdtW1FGYBZRxZZ4S3mshEprtD084SYwn6aMhKBsAiT7X27tTU GNxpCh2VOx6QLmnHqBsEiL/JFkeVxA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:48 2025 by rpki-client