$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sIxEzvbWUf77qxG4j5_aFKUCzp8.cer File: sIxEzvbWUf77qxG4j5_aFKUCzp8.cer (raw, json) Hash identifier: 7kpocXMoivS9CMK8LHV4n1DEPRG3C9OGfKR8xfmMFwM= Subject key identifier: B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E2D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:12:41 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 151274 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58073 (0xe2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:12:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B08C44CEF6D651FEFBAB11B88F9FDA14A502CE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:c9:20:d2:1d:71:8c:50:5a:dd:f0:a5:f0: 4a:47:91:0e:c9:81:6e:f2:97:83:d5:25:99:22:f9: 56:9a:98:18:bc:d8:6b:17:d7:c1:fc:7c:c5:82:59: 0d:d2:93:af:7c:e9:85:72:d1:26:45:71:11:e1:d3: e6:79:b7:17:ea:2c:81:c1:f6:71:d4:fa:3e:7d:96: 7c:f3:7c:bc:fe:81:a9:cf:d9:a9:1e:65:67:60:09: de:92:55:ea:ad:18:ec:67:43:f0:b6:ed:37:07:16: 9b:1f:76:af:14:d7:e5:f5:6d:47:78:52:96:51:ce: b0:63:61:a9:92:ef:a4:5d:ef:17:29:e6:77:5d:1b: 6e:37:d0:da:8c:db:05:71:cb:f6:5f:d6:9f:33:fd: c4:ba:28:7e:31:e3:54:4e:a3:fd:2e:fd:63:9b:d9: f0:4f:83:6a:c7:20:ad:02:ad:47:4a:03:f3:02:d7: d3:f0:64:27:7f:ec:e4:47:39:6d:b1:89:e2:eb:ea: a3:5b:21:1f:0e:70:09:d9:7b:84:75:4f:3b:69:a4: 31:92:9b:dc:23:34:8c:f9:b5:f0:e5:e0:a7:a7:2d: c0:69:25:c0:c3:fb:49:36:34:fd:d0:c6:a2:59:b7: 6a:21:1a:18:39:21:64:96:ee:e5:ac:d6:98:9d:e0: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151274 Signature Algorithm: sha256WithRSAEncryption 50:c7:2b:74:dc:ee:58:47:43:45:f3:6b:5e:ea:32:9d:6d:22: f4:49:78:3f:62:2c:f2:b6:92:ab:d3:e1:7e:04:01:d1:a8:00: 55:26:49:23:3b:62:d4:4d:d8:1b:21:08:89:a0:09:f0:a6:fa: 6c:b9:64:57:bd:cd:23:bf:38:f0:b2:ff:d8:a4:a9:02:23:a1: 7f:14:49:45:62:3d:87:ff:70:20:2e:81:11:6d:42:61:46:81: f2:e4:c7:8a:21:77:3b:92:34:13:3b:44:ff:c8:3c:b3:76:a6: 75:48:e3:6b:22:3d:59:ad:e2:27:b3:11:14:a7:5d:26:e3:cb: 32:90:f6:80:d8:30:e6:fb:0a:57:98:4f:b7:d6:c8:cb:f6:25: d5:38:d2:22:12:d1:c4:b2:52:c9:b2:58:65:55:6d:01:c3:9f: b2:0f:08:b8:ee:17:d8:6e:88:9d:d2:f4:de:a7:69:c8:76:1e: 6e:49:0f:80:71:62:aa:b4:35:44:5a:3d:f0:28:a8:b7:5c:9f: d3:1a:86:71:1e:5f:b2:05:f2:98:13:3d:27:bd:3d:f4:2e:c6: eb:a1:5d:20:be:44:eb:de:f8:55:18:a3:27:34:90:df:4a:5b: fd:4d:cc:8e:d1:21:c6:47:11:43:91:b9:e1:25:e7:d5:59:56: af:f3:a9:93 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAOLZMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEyNDFaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEIwOEM0NENFRjZENjUxRkVGQkFCMTFCODhGOUZEQTE0QTUwMkNF OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqnckg0h1xjFBa3fCl 8EpHkQ7JgW7yl4PVJZki+VaamBi82GsX18H8fMWCWQ3Sk6986YVy0SZFcRHh0+Z5 txfqLIHB9nHU+j59lnzzfLz+ganP2akeZWdgCd6SVeqtGOxnQ/C27TcHFpsfdq8U 1+X1bUd4UpZRzrBjYamS76Rd7xcp5nddG2430NqM2wVxy/Zf1p8z/cS6KH4x41RO o/0u/WOb2fBPg2rHIK0CrUdKA/MC19PwZCd/7ORHOW2xieLr6qNbIR8OcAnZe4R1 TztppDGSm9wjNIz5tfDl4KenLcBpJcDD+0k2NP3QxqJZt2ohGhg5IWSW7uWs1pid 4OeRAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUsIxEzvbWUf77qxG4j5/aFKUCzp8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MzMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMzMy9zSXhFenZiV1VmNzdxeEc0ajVfYUZLVUN6cDgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO6jANBgkqhkiG9w0BAQsFAAOCAQEA UMcrdNzuWEdDRfNrXuoynW0i9El4P2Is8raSq9PhfgQB0agAVSZJIzti1E3YGyEI iaAJ8Kb6bLlkV73NI7848LL/2KSpAiOhfxRJRWI9h/9wIC6BEW1CYUaB8uTHiiF3 O5I0EztE/8g8s3amdUjjayI9Wa3iJ7MRFKddJuPLMpD2gNgw5vsKV5hPt9bIy/Yl 1TjSIhLRxLJSybJYZVVtAcOfsg8IuO4X2G6IndL03qdpyHYebkkPgHFiqrQ1RFo9 8Ciot1yf0xqGcR5fsgXymBM9J7099C7G66FdIL5E6974VRijJzSQ30pb/U3MjtEh xkcRQ5G54SXn1VlWr/Opkw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:31 2025 by rpki-client