$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer File: v53ECbEbmTO6Vq39mHrqjUQseeY.cer (raw, json) Hash identifier: 3TnTb4mzakLGryZRJnCat0xKKtkHhT0NjmPrM4Y/YF8= Subject key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D87C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:13:03 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 137760 IP: 163.223.28.0/23 IP: 2401:f3e0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55420 (0xd87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:13:03 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:55:e8:9c:cc:05:75:c8:d0:81:01:88:57: 30:f1:e4:9a:32:5b:3c:56:23:1c:c0:29:d5:69:d1: 7c:39:df:7a:9c:c9:97:9b:f8:39:71:93:38:8b:40: 74:fb:a8:57:4e:07:4d:7a:e5:f1:a9:f3:bd:d0:fb: 9a:d4:d7:05:e8:45:9c:ef:00:00:40:4e:77:97:df: bf:30:fb:4e:6a:3e:ec:ce:00:c4:3a:8b:c9:06:8d: b4:fd:10:cb:e7:6a:3b:4c:14:d4:8d:6b:62:16:e0: 1b:c1:a6:4a:2e:e4:2b:fb:41:c4:b1:bd:60:d3:5b: d1:e0:c8:4c:b8:d9:14:97:26:48:f7:fa:a1:ed:f8: 61:15:c1:18:bd:0f:62:35:f5:1c:ad:af:b7:d7:d8: 5b:1a:2f:4b:78:82:f9:46:87:79:f7:d4:5a:69:d4: f6:f4:b5:3b:c5:45:40:d5:39:4d:f8:af:18:33:5f: 77:d9:55:b5:96:ca:65:c0:89:e4:56:88:22:32:8a: 11:99:ed:93:cf:fc:0a:05:75:78:f6:0b:b7:87:74: 28:5c:5a:f6:61:1c:1e:83:44:9f:25:f2:11:a4:e0: 6b:01:1b:b2:a7:1f:ce:ad:1a:97:84:90:e3:22:5d: a0:9c:91:ab:54:df:8c:30:b9:c0:32:6a:98:65:7c: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137760 sbgp-ipAddrBlock: critical IPv4: 163.223.28.0/23 IPv6: 2401:f3e0::/32 Signature Algorithm: sha256WithRSAEncryption 60:12:78:4a:f8:5d:39:5e:da:bc:58:ec:07:71:a8:ae:e0:8d: ad:1e:5f:b2:50:28:81:0c:1b:53:ad:0f:62:8f:ef:7d:7b:96: c9:22:14:46:3e:fd:ea:99:ad:f2:08:5f:a8:37:7b:4b:c2:6b: f0:79:14:fd:31:50:31:7b:cc:a5:37:6f:a2:0f:1d:da:1a:ea: 69:6b:bd:90:9f:35:15:f1:6f:d9:38:30:b9:0c:e3:50:c8:c4: aa:b8:12:68:88:13:22:7c:4c:d5:2e:b9:9c:b0:57:b9:6a:d4: 83:db:a0:59:0b:cc:9f:f6:f4:41:ae:14:bf:5b:f1:af:19:7e: 75:aa:36:de:70:ba:5a:8d:bf:c3:87:08:c0:ee:55:a5:31:5d: 0e:c9:b1:69:09:2a:18:dd:c0:83:33:c1:bd:ea:65:13:02:00: 64:43:b3:2c:ab:4b:71:02:e3:58:23:59:54:6d:0b:b0:85:59: 61:6a:a0:5a:f4:73:e8:ce:2e:d0:f7:e3:f7:5f:97:55:42:8e: 96:bf:76:c8:35:1e:0f:87:49:b0:2b:24:0a:9d:cd:81:e7:37: 0e:cf:0d:84:8f:53:84:6d:9d:c5:0d:13:53:2d:94:f3:1c:3b: 2d:c4:22:24:96:14:a8:11:5c:c9:33:11:e7:40:7b:c7:4b:94: f5:65:3e:c9 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDANh8MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzMDNaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEJGOURDNDA5QjExQjk5MzNCQTU2QURGRDk4N0FFQThENDQyQzc5 RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf1XonMwFdcjQgQGI VzDx5JoyWzxWIxzAKdVp0Xw533qcyZeb+DlxkziLQHT7qFdOB0165fGp873Q+5rU 1wXoRZzvAABATneX378w+05qPuzOAMQ6i8kGjbT9EMvnajtMFNSNa2IW4BvBpkou 5Cv7QcSxvWDTW9HgyEy42RSXJkj3+qHt+GEVwRi9D2I19Rytr7fX2FsaL0t4gvlG h3n31Fpp1Pb0tTvFRUDVOU34rxgzX3fZVbWWymXAieRWiCIyihGZ7ZPP/AoFdXj2 C7eHdChcWvZhHB6DRJ8l8hGk4GsBG7KnH86tGpeEkOMiXaCckatU34wwucAyaphl fHEJAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUv53ECbEbmTO6Vq39mHrqjUQseeYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaIDAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAaPfHDANBAIAAjAHAwUAJAHz4DANBgkqhkiG9w0BAQsFAAOCAQEA YBJ4SvhdOV7avFjsB3GoruCNrR5fslAogQwbU60PYo/vfXuWySIURj796pmt8ghf qDd7S8Jr8HkU/TFQMXvMpTdvog8d2hrqaWu9kJ81FfFv2TgwuQzjUMjEqrgSaIgT InxM1S65nLBXuWrUg9ugWQvMn/b0Qa4Uv1vxrxl+dao23nC6Wo2/w4cIwO5VpTFd DsmxaQkqGN3AgzPBveplEwIAZEOzLKtLcQLjWCNZVG0LsIVZYWqgWvRz6M4u0Pfj 91+XVUKOlr92yDUeD4dJsCskCp3Ngec3Ds8NhI9ThG2dxQ0TUy2U8xw7LcQiJJYU qBFcyTMR50B7x0uU9WU+yQ== -----END CERTIFICATE-----Generated at Wed Aug 13 06:01:07 2025 by rpki-client