$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/w_lVr2j6-y_dR6ydZ5DlAsCMphM.cer File: w_lVr2j6-y_dR6ydZ5DlAsCMphM.cer (raw, json) Hash identifier: f9hQM1mDtn4gW6WMff3Sane317e1d+kRvTgdOp9wo9Q= Subject key identifier: C3:F9:55:AF:68:FA:FB:2F:DD:47:AC:9D:67:90:E5:02:C0:8C:A6:13 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: DA4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/w_lVr2j6-y_dR6ydZ5DlAsCMphM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:18:52 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 56001 IP: 2401:8600::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55882 (0xda4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:18:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C3F955AF68FAFB2FDD47AC9D6790E502C08CA613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:6b:64:a5:82:fa:59:cc:f0:6e:fd:c2:dd: 28:d5:36:2c:e1:b9:a4:2b:b4:84:d3:2e:8c:82:5b: 3e:ef:53:9a:85:0a:f6:0a:f9:21:4e:0e:0e:93:0a: e1:14:9b:44:d5:1e:f6:9c:d8:58:09:9e:03:e9:3e: 58:2b:85:e0:0f:6a:ab:ee:cf:4f:3d:80:e7:38:df: 87:42:fc:0a:80:2f:13:e3:72:ce:95:80:b7:eb:22: c8:fc:2b:e5:13:b5:4d:12:80:31:79:a2:53:b2:dd: 6e:b9:7c:49:67:7c:ed:98:58:38:bc:b7:2d:be:2a: c4:4b:9a:2b:00:53:3b:e6:60:43:48:0d:d7:a6:28: 2d:6c:97:5b:b6:4a:07:ca:d5:57:c9:c6:7e:db:c4: 93:f3:d1:f0:45:cd:03:b1:30:28:22:5b:fb:5a:7a: ff:76:f7:7f:18:52:9d:ea:35:e9:fa:78:5f:a3:ef: d6:bb:79:78:18:cc:81:26:5d:5b:b8:b6:5e:e9:9f: d1:f0:c3:9e:0d:70:92:6e:51:21:39:e3:da:b9:68: 18:90:cf:42:9b:17:22:89:a0:a0:e1:62:a4:4d:07: b4:ec:51:af:3b:ca:e1:5c:be:c0:cc:28:fd:e8:e8: f1:0f:02:e0:16:18:a0:0b:a6:63:95:7d:d8:cb:e3: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F9:55:AF:68:FA:FB:2F:DD:47:AC:9D:67:90:E5:02:C0:8C:A6:13 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/w_lVr2j6-y_dR6ydZ5DlAsCMphM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 56001 sbgp-ipAddrBlock: critical IPv6: 2401:8600::/32 Signature Algorithm: sha256WithRSAEncryption 77:c1:0e:4a:cf:53:1a:c3:8d:a6:86:af:6b:f7:59:01:97:6e: 98:5d:45:ec:f4:74:03:73:d2:a9:9a:aa:13:f5:5f:2a:7b:79: 53:a4:5a:2a:a1:71:71:a3:69:57:b2:21:68:ef:c1:dd:9b:d3: d4:c3:72:c6:3c:14:b3:97:51:bd:a5:e4:8f:96:0b:46:98:a6: 09:99:27:ed:63:9f:d6:1d:6f:e7:78:12:a9:90:b4:9a:fa:f1: e7:e6:da:43:28:16:ed:b0:76:99:e3:da:7a:e9:87:35:13:e4: 4d:71:c4:a4:1d:79:0c:c5:49:7c:38:bd:df:51:49:c0:80:19: a0:2a:7a:15:c9:9b:bd:5d:14:a2:15:04:98:bc:10:54:a3:90: 51:f7:7d:5d:ab:50:05:2d:19:e2:19:a1:2c:dc:ed:2f:48:db: 56:d8:76:57:3a:9b:d6:0a:a5:a5:71:20:e2:02:c9:4e:f7:db: f8:ec:8d:fc:4e:02:0b:be:ba:78:04:2e:82:7f:05:be:b7:f7: 54:b3:ff:71:a8:6c:55:1d:c9:7e:5f:af:cd:f3:2a:7b:36:cd: 14:9e:3f:8f:c6:f3:c0:f0:b3:c8:37:88:87:ac:25:c9:57:30: d1:ae:e6:e0:9a:48:fd:8d:db:03:ce:ed:63:f2:c4:a6:da:af: ba:85:34:87 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIDANpKMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE4NTJaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEMzRjk1NUFGNjhGQUZCMkZERDQ3QUM5RDY3OTBFNTAyQzA4Q0E2 MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpF2tkpYL6Wczwbv3C 3SjVNizhuaQrtITTLoyCWz7vU5qFCvYK+SFODg6TCuEUm0TVHvac2FgJngPpPlgr heAPaqvuz089gOc434dC/AqALxPjcs6VgLfrIsj8K+UTtU0SgDF5olOy3W65fEln fO2YWDi8ty2+KsRLmisAUzvmYENIDdemKC1sl1u2SgfK1VfJxn7bxJPz0fBFzQOx MCgiW/taev92938YUp3qNen6eF+j79a7eXgYzIEmXVu4tl7pn9Hww54NcJJuUSE5 49q5aBiQz0KbFyKJoKDhYqRNB7TsUa87yuFcvsDMKP3o6PEPAuAWGKALpmOVfdjL 46S9AgMBAAGjggJwMIICbDAdBgNVHQ4EFgQUw/lVr2j6+y/dR6ydZ5DlAsCMphMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM2 OS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNjkvd19sVnIyajYteV9kUjZ5ZFo1RGxBc0NNcGhNLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA2sEwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAYYAMA0GCSqGSIb3DQEBCwUAA4IBAQB3wQ5Kz1Maw42mhq9r91kB l26YXUXs9HQDc9KpmqoT9V8qe3lTpFoqoXFxo2lXsiFo78Hdm9PUw3LGPBSzl1G9 peSPlgtGmKYJmSftY5/WHW/neBKpkLSa+vHn5tpDKBbtsHaZ49p66Yc1E+RNccSk HXkMxUl8OL3fUUnAgBmgKnoVyZu9XRSiFQSYvBBUo5BR931dq1AFLRniGaEs3O0v SNtW2HZXOpvWCqWlcSDiAslO99v47I38TgILvrp4BC6CfwW+t/dUs/9xqGxVHcl+ X6/N8yp7Ns0Unj+PxvPA8LPIN4iHrCXJVzDRrubgmkj9jdsDzu1j8sSm2q+6hTSH -----END CERTIFICATE-----Generated at Wed Aug 13 04:30:10 2025 by rpki-client