$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer File: vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer (raw, json) Hash identifier: W56yX2S7bdSZh6G82g+Qd777sC4MxTH/7dL5mU2gnM8= Subject key identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D86E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:12:55 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 103.67.172.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55406 (0xd86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:12:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BCF4017A6E2915F26147D419E5F7A7D164D04984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:62:fb:4f:f0:7b:64:a8:4b:02:5a:5d:25: 5c:6d:08:f9:5c:91:98:b7:58:4c:c9:46:d9:6f:95: 51:5a:75:50:cd:88:28:aa:32:a4:88:b3:a5:be:fc: 66:dd:eb:d2:b8:7c:57:c7:60:52:46:15:56:eb:84: ce:b9:22:3e:28:0c:5c:8e:ec:08:f8:07:80:8f:82: 1a:c5:6d:91:d9:ea:bf:d0:71:f3:f4:47:35:8f:bb: b5:1a:b4:2a:4c:53:30:6c:0e:18:94:dd:00:ff:8d: af:2a:b1:92:b5:6c:b0:3c:07:44:24:a6:ae:52:33: 9d:a9:c3:a8:cf:e5:60:dd:b0:51:d5:ac:75:3c:69: dc:53:3b:0f:4e:f2:b6:b4:0d:12:36:d9:fb:32:c2: 89:1e:7c:4e:1f:7c:31:c5:e2:c2:af:59:ca:6d:d9: 6b:f4:0a:78:52:74:5f:c8:53:71:75:df:6e:3a:21: 0f:bf:d7:4f:ff:1b:ae:2e:04:98:e9:02:39:24:77: 29:bd:0b:fa:1c:01:a5:85:f0:13:f5:a7:85:b2:cf: fb:2c:c9:0a:f3:5b:04:d1:52:af:42:4c:08:cf:5a: 0b:7a:f8:71:54:5c:b5:e5:89:28:99:42:76:5d:2d: ec:04:dd:2c:75:23:19:76:8e:1b:e2:27:8e:9c:31: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.172.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:e9:4d:65:74:4c:8f:1d:37:d5:80:a0:6f:ed:6e:bb:19:6a: d5:db:1d:07:1b:96:e7:21:10:0a:32:2b:d6:9a:d2:a9:db:89: 74:83:e5:cc:07:2c:f9:29:fb:3d:63:5f:e6:95:ba:f5:fd:e6: aa:17:ba:58:27:03:3a:25:c7:4d:ce:ef:1e:51:f0:7f:5a:c7: ca:d0:36:39:a0:b4:6e:0a:8b:1b:36:78:d9:17:56:33:a5:68: f7:e2:f7:b1:4f:1d:9e:7e:a3:29:e7:af:e9:ce:ea:78:25:8a: 6a:73:33:52:8b:20:7d:df:10:9f:95:82:6a:40:fd:17:69:7d: 14:fe:3a:8a:3c:7a:79:9a:0c:70:3b:4b:b3:58:4f:0f:da:b2: 8e:c3:34:97:e6:87:bc:35:6f:6e:a4:c7:2a:9c:3f:78:4d:f3: a2:b3:68:15:53:84:af:23:6f:8c:f0:20:9e:8e:05:72:b1:ad: c2:14:f0:b8:4e:68:4c:6c:c4:b6:6b:d4:a3:1d:38:54:aa:b9: de:3d:f9:8c:d3:8e:f7:0f:be:ef:a6:79:a1:53:d0:41:df:2d: 5e:f7:f4:99:64:91:7d:40:b5:52:96:98:df:1b:76:fe:a5:5f: 82:84:6e:6d:ef:ca:22:8d:91:bc:b5:90:ed:91:4b:5c:fb:26: fc:0e:91:e9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDANhuMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEyNTVaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEJDRjQwMTdBNkUyOTE1RjI2MTQ3RDQxOUU1RjdBN0QxNjREMDQ5 ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FmL7T/B7ZKhLAlpd JVxtCPlckZi3WEzJRtlvlVFadVDNiCiqMqSIs6W+/Gbd69K4fFfHYFJGFVbrhM65 Ij4oDFyO7Aj4B4CPghrFbZHZ6r/QcfP0RzWPu7UatCpMUzBsDhiU3QD/ja8qsZK1 bLA8B0Qkpq5SM52pw6jP5WDdsFHVrHU8adxTOw9O8ra0DRI22fsywokefE4ffDHF 4sKvWcpt2Wv0CnhSdF/IU3F13246IQ+/10//G64uBJjpAjkkdym9C/ocAaWF8BP1 p4Wyz/ssyQrzWwTRUq9CTAjPWgt6+HFUXLXliSiZQnZdLewE3Sx1Ixl2jhviJ46c MZghAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUvPQBem4pFfJhR9QZ5fen0WTQSYQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3Mi92UFFCZW00cEZmSmhSOVFaNWZlbjBXVFFTWVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0OsMA0GCSqGSIb3DQEBCwUA A4IBAQAO6U1ldEyPHTfVgKBv7W67GWrV2x0HG5bnIRAKMivWmtKp24l0g+XMByz5 Kfs9Y1/mlbr1/eaqF7pYJwM6JcdNzu8eUfB/WsfK0DY5oLRuCosbNnjZF1YzpWj3 4vexTx2efqMp56/pzup4JYpqczNSiyB93xCflYJqQP0XaX0U/jqKPHp5mgxwO0uz WE8P2rKOwzSX5oe8NW9upMcqnD94TfOis2gVU4SvI2+M8CCejgVysa3CFPC4TmhM bMS2a9SjHThUqrnePfmM0473D77vpnmhU9BB3y1e9/SZZJF9QLVSlpjfG3b+pV+C hG5t78oijZG8tZDtkUtc+yb8DpHp -----END CERTIFICATE-----Generated at Wed Aug 13 06:01:00 2025 by rpki-client