$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer File: v53ECbEbmTO6Vq39mHrqjUQseeY.cer (raw, json) Hash identifier: 4O5KjM81IkX5QAhcrlxDxQq8j2gboWxZIfHAcsOEYKI= Subject key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E0F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:06:09 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 137760 IP: 163.223.28.0/23 IP: 2401:f3e0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57593 (0xe0f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:06:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:55:e8:9c:cc:05:75:c8:d0:81:01:88:57: 30:f1:e4:9a:32:5b:3c:56:23:1c:c0:29:d5:69:d1: 7c:39:df:7a:9c:c9:97:9b:f8:39:71:93:38:8b:40: 74:fb:a8:57:4e:07:4d:7a:e5:f1:a9:f3:bd:d0:fb: 9a:d4:d7:05:e8:45:9c:ef:00:00:40:4e:77:97:df: bf:30:fb:4e:6a:3e:ec:ce:00:c4:3a:8b:c9:06:8d: b4:fd:10:cb:e7:6a:3b:4c:14:d4:8d:6b:62:16:e0: 1b:c1:a6:4a:2e:e4:2b:fb:41:c4:b1:bd:60:d3:5b: d1:e0:c8:4c:b8:d9:14:97:26:48:f7:fa:a1:ed:f8: 61:15:c1:18:bd:0f:62:35:f5:1c:ad:af:b7:d7:d8: 5b:1a:2f:4b:78:82:f9:46:87:79:f7:d4:5a:69:d4: f6:f4:b5:3b:c5:45:40:d5:39:4d:f8:af:18:33:5f: 77:d9:55:b5:96:ca:65:c0:89:e4:56:88:22:32:8a: 11:99:ed:93:cf:fc:0a:05:75:78:f6:0b:b7:87:74: 28:5c:5a:f6:61:1c:1e:83:44:9f:25:f2:11:a4:e0: 6b:01:1b:b2:a7:1f:ce:ad:1a:97:84:90:e3:22:5d: a0:9c:91:ab:54:df:8c:30:b9:c0:32:6a:98:65:7c: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137760 sbgp-ipAddrBlock: critical IPv4: 163.223.28.0/23 IPv6: 2401:f3e0::/32 Signature Algorithm: sha256WithRSAEncryption 79:ad:ee:b4:19:ed:76:57:de:f5:23:53:3c:89:60:4b:6a:d2: 88:7d:87:de:8f:32:c0:e4:98:03:a2:67:af:81:81:cd:ac:94: 2f:45:c4:a4:16:e5:62:85:49:4f:7f:2c:f8:2a:ee:ff:72:20: 55:c8:5d:0f:24:88:67:05:f0:ed:ed:10:f0:65:31:dc:05:61: 6e:2e:39:9f:21:19:b7:ac:35:a6:48:b4:f2:db:11:77:13:55: 47:4a:62:5b:98:c8:7b:28:1a:04:e2:1b:e3:c6:d3:23:5a:87: 33:c2:0c:55:da:c3:30:d5:1a:83:5d:30:6b:74:8c:43:fa:c6: a3:31:73:07:ba:94:46:1c:d5:aa:eb:30:a9:64:52:e0:2e:f9: 86:da:60:94:9c:99:bd:bc:5b:63:19:e9:ea:20:c8:a0:02:ea: 59:55:de:cd:09:09:51:65:27:ff:a8:b9:ac:3b:a7:36:c3:d3: 01:1b:63:07:41:78:64:ca:ca:f7:6b:c6:12:c4:9d:c8:66:63: 66:b5:ca:33:84:0a:0e:04:b2:46:7c:1a:42:fc:e2:f8:4a:9f: 48:25:35:e3:19:84:6b:6f:3b:ee:ce:40:4c:e4:5e:a6:c2:47: 70:e5:99:76:50:1e:9e:e8:ac:ad:31:63:4a:98:21:f8:2c:fa: 80:c5:6f:22 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOD5MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA2MDlaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEJGOURDNDA5QjExQjk5MzNCQTU2QURGRDk4N0FFQThENDQyQzc5 RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf1XonMwFdcjQgQGI VzDx5JoyWzxWIxzAKdVp0Xw533qcyZeb+DlxkziLQHT7qFdOB0165fGp873Q+5rU 1wXoRZzvAABATneX378w+05qPuzOAMQ6i8kGjbT9EMvnajtMFNSNa2IW4BvBpkou 5Cv7QcSxvWDTW9HgyEy42RSXJkj3+qHt+GEVwRi9D2I19Rytr7fX2FsaL0t4gvlG h3n31Fpp1Pb0tTvFRUDVOU34rxgzX3fZVbWWymXAieRWiCIyihGZ7ZPP/AoFdXj2 C7eHdChcWvZhHB6DRJ8l8hGk4GsBG7KnH86tGpeEkOMiXaCckatU34wwucAyaphl fHEJAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUv53ECbEbmTO6Vq39mHrqjUQseeYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaIDAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAaPfHDANBAIAAjAHAwUAJAHz4DANBgkqhkiG9w0BAQsFAAOCAQEA ea3utBntdlfe9SNTPIlgS2rSiH2H3o8ywOSYA6Jnr4GBzayUL0XEpBblYoVJT38s +Cru/3IgVchdDySIZwXw7e0Q8GUx3AVhbi45nyEZt6w1pki08tsRdxNVR0piW5jI eygaBOIb48bTI1qHM8IMVdrDMNUag10wa3SMQ/rGozFzB7qURhzVquswqWRS4C75 htpglJyZvbxbYxnp6iDIoALqWVXezQkJUWUn/6i5rDunNsPTARtjB0F4ZMrK92vG EsSdyGZjZrXKM4QKDgSyRnwaQvzi+EqfSCU14xmEa2877s5ATORepsJHcOWZdlAe nuisrTFjSpgh+Cz6gMVvIg== -----END CERTIFICATE-----Generated at Wed Nov 5 20:13:02 2025 by rpki-client