$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer File: tsENcoo4JDG6wfFJMND8HgdZU6Y.cer (raw, json) Hash identifier: CCPkDM1RFujvD5y0MtQADoG5mYamffvgSwKKkcM9BKc= Subject key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E0ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:05:59 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 151232 IP: 103.213.144.0/23 IP: 202.58.122.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57581 (0xe0ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:05:59 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:35:c9:56:a8:ce:63:33:a6:9e:e8:a7:fb:3b: 18:a4:dd:cf:62:a2:bc:06:9b:43:5b:28:00:65:84: 1c:10:f7:bb:fe:01:18:74:4d:1e:51:e9:f2:ec:de: e9:3f:fe:82:4c:8c:6b:cd:ae:71:08:d3:ba:e4:cc: 21:5f:fc:f4:91:f9:2b:66:ba:41:f0:28:f1:c3:a1: 93:6a:30:07:df:28:bf:58:95:b0:92:48:9f:89:69: 8f:8b:81:e6:df:de:cf:3c:b0:01:71:c5:f3:b6:4a: b0:29:b9:38:08:d0:28:25:a7:6e:ef:46:6a:fd:2b: ed:ff:7c:2d:56:0f:b7:a0:dc:ef:9c:8e:63:65:cd: a9:e9:8d:93:43:6d:5f:be:3d:23:fb:08:6e:8f:d4: 7c:3c:4e:74:6f:4b:00:11:9c:51:1b:b3:7d:b6:d5: d2:da:70:3c:82:76:b7:f9:c7:52:36:5e:c5:8f:cf: 62:8a:8b:1a:83:7d:9c:7d:de:82:7e:1e:8d:99:3c: 10:d6:a1:99:b6:20:33:bd:62:14:ab:a6:99:68:0e: e4:96:2f:e8:ea:96:08:67:06:aa:07:f6:57:b1:88: b4:70:0c:3e:ea:b3:ea:f7:f1:74:64:9f:f9:23:24: f1:29:73:3c:21:6e:e6:ab:8e:eb:02:7d:ce:5e:c1: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151232 sbgp-ipAddrBlock: critical IPv4: 103.213.144.0/23 202.58.122.0/23 Signature Algorithm: sha256WithRSAEncryption 58:d6:a1:b6:49:30:96:79:0a:6b:97:7f:fe:76:9e:3c:52:d7: dc:7d:b4:c2:e9:74:ba:b1:73:7b:d7:2b:67:ad:2f:05:4d:1d: d0:11:2f:c5:62:5c:63:ee:fb:a8:32:b0:7c:cd:16:72:0b:ba: aa:79:f6:a1:60:e9:4f:55:5e:8d:0f:6b:90:e6:75:fa:c1:e2: 1e:d6:5d:2e:01:cc:e7:5d:d6:08:ca:56:ed:3c:42:5b:da:ae: c3:94:56:63:29:b2:3e:0b:01:a4:f1:75:e6:33:9b:e9:92:c0: 8b:c4:8e:e9:33:0e:f7:ff:58:fd:23:3c:67:21:84:fb:51:2d: c2:98:83:bc:43:7b:95:7a:42:56:05:2e:7a:7e:50:46:94:97: 9f:83:70:27:25:ad:a5:44:d5:9a:1c:37:c9:d7:97:da:bb:62: a6:47:47:a0:64:58:3d:de:54:cc:35:b8:ce:24:de:6b:6a:e0: e8:50:97:5f:c1:88:db:dd:da:80:94:40:d8:f9:ac:b1:5e:37: eb:07:09:7a:cb:41:5f:d5:89:e3:16:87:d6:de:94:e6:f4:71: eb:f6:ff:04:3c:7f:4a:06:7a:d4:6b:a4:2a:d2:14:b6:97:37: 1e:65:19:af:99:3e:1b:07:68:a1:cd:cd:a9:f7:d5:61:91:5e: 86:33:e9:93 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAODtMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA1NTlaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEI2QzEwRDcyOEEzODI0MzFCQUMxRjE0OTMwRDBGQzFFMDc1OTUz QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwNclWqM5jM6ae6Kf7 Oxik3c9iorwGm0NbKABlhBwQ97v+ARh0TR5R6fLs3uk//oJMjGvNrnEI07rkzCFf /PSR+StmukHwKPHDoZNqMAffKL9YlbCSSJ+JaY+Lgebf3s88sAFxxfO2SrApuTgI 0Cglp27vRmr9K+3/fC1WD7eg3O+cjmNlzanpjZNDbV++PSP7CG6P1Hw8TnRvSwAR nFEbs3221dLacDyCdrf5x1I2XsWPz2KKixqDfZx93oJ+Ho2ZPBDWoZm2IDO9YhSr pploDuSWL+jqlghnBqoH9lexiLRwDD7qs+r38XRkn/kjJPEpczwhbuarjusCfc5e wbStAgMBAAGjggJ3MIICczAdBgNVHQ4EFgQUtsENcoo4JDG6wfFJMND8HgdZU6Yw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz OTYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM5Ni90c0VOY29vNEpERzZ3ZkZKTU5EOEhnZFpVNlkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOwDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWfVkAMEAco6ejANBgkqhkiG9w0BAQsFAAOCAQEAWNahtkkwlnkK a5d//naePFLX3H20wul0urFze9crZ60vBU0d0BEvxWJcY+77qDKwfM0Wcgu6qnn2 oWDpT1VejQ9rkOZ1+sHiHtZdLgHM513WCMpW7TxCW9quw5RWYymyPgsBpPF15jOb 6ZLAi8SO6TMO9/9Y/SM8ZyGE+1EtwpiDvEN7lXpCVgUuen5QRpSXn4NwJyWtpUTV mhw3ydeX2rtipkdHoGRYPd5UzDW4ziTea2rg6FCXX8GI293agJRA2PmssV436wcJ estBX9WJ4xaH1t6U5vRx6/b/BDx/SgZ61GukKtIUtpc3HmUZr5k+Gwdooc3NqffV YZFehjPpkw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:23:11 2025 by rpki-client