$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer File: xqqhwc8lwisJdbVYvDWjpnYmQiY.cer (raw, json) Hash identifier: EXAsKmpA523bqD/ZIEvbaLqr180EPofFHhKutm5ynD8= Subject key identifier: C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E0A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:05:12 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 123.253.52.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57513 (0xe0a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:05:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:54:86:b9:b1:a9:90:16:85:62:07:14:f1:db: f2:1b:83:36:94:f8:eb:d7:ef:69:75:d5:de:cf:51: 26:ef:e7:bb:9d:d8:6b:a9:e0:4a:11:6b:c3:a2:a7: e5:f8:62:55:57:d0:43:6c:fb:ad:b6:bc:57:5f:9b: 6d:79:ad:ab:d1:93:70:61:4d:65:75:09:99:78:e6: a4:68:8d:3d:27:ca:2f:3f:36:2c:c6:9c:73:76:f8: b6:f8:ef:0f:4d:0e:35:0d:3f:78:f6:e4:d0:eb:32: 08:7e:ca:f4:e3:0f:be:59:5c:48:af:6c:92:11:4e: de:8b:ed:fb:b3:cb:d7:9b:45:d3:3b:4b:f0:b1:84: 04:58:cd:82:33:62:0b:d3:92:34:9f:7e:ab:00:a2: d2:33:03:9c:28:25:0f:95:d9:89:fc:26:71:1f:7b: 2d:51:49:b0:37:ef:94:63:53:f8:76:07:41:77:74: 93:5e:e4:4a:af:7f:29:6d:3f:a6:57:21:b7:15:0c: 94:2b:0e:8e:31:48:11:20:e6:af:ee:77:d4:35:17: e8:cc:2d:a8:1b:9e:eb:37:4c:a1:17:cc:4c:67:e6: b9:5d:b9:f5:40:d6:63:64:80:5e:93:4a:15:84:90: 83:89:c9:9c:76:ae:1b:cf:c0:51:92:cd:13:5b:ac: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.253.52.0/23 Signature Algorithm: sha256WithRSAEncryption 47:98:45:86:f0:ca:f2:17:c5:92:54:33:a7:7e:d3:76:66:3c: bb:1e:6d:51:37:94:79:e0:06:4d:9f:a8:26:23:2d:85:14:4c: 44:ef:8d:a6:38:71:49:3a:52:23:e5:7e:5c:73:5b:e8:4c:f4: 52:7e:17:16:0b:16:d5:69:82:6c:5a:b0:6e:19:7b:aa:d2:5f: bd:a4:d2:14:39:09:7a:d3:71:89:9a:4b:02:9c:6a:95:66:89: 8c:18:e1:d4:23:66:7a:55:92:2a:b9:a2:cd:b4:d6:d2:b1:2c: b7:98:8e:b9:e0:68:15:6e:a1:20:ee:a6:b1:09:ba:e6:a2:4c: 61:fa:76:7d:55:72:52:73:2f:c1:ff:22:b9:0f:18:c5:ba:64: a0:4b:17:8e:e7:8d:d8:db:82:52:d9:1e:c6:07:a4:3b:12:9e: da:81:54:64:7b:61:f8:8a:31:d4:cd:0a:68:9f:c3:b1:71:1f: 93:19:13:91:61:2f:0d:f0:90:e4:d8:24:4e:46:84:2a:19:10: 85:78:5c:94:4a:09:59:8b:af:1c:fb:d9:a7:16:99:a0:74:e4: 67:9d:2c:03:b8:58:00:97:95:ed:a0:22:df:94:44:6f:02:6d: 57:07:58:88:e0:37:11:9d:c4:21:5d:ed:45:a8:03:63:4e:15: 49:98:41:5b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOCpMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA1MTJaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEM2QUFBMUMxQ0YyNUMyMkIwOTc1QjU1OEJDMzVBM0E2NzYyNjQy MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVIa5samQFoViBxTx 2/IbgzaU+OvX72l11d7PUSbv57ud2Gup4EoRa8Oip+X4YlVX0ENs+622vFdfm215 ravRk3BhTWV1CZl45qRojT0nyi8/NizGnHN2+Lb47w9NDjUNP3j25NDrMgh+yvTj D75ZXEivbJIRTt6L7fuzy9ebRdM7S/CxhARYzYIzYgvTkjSffqsAotIzA5woJQ+V 2Yn8JnEfey1RSbA375RjU/h2B0F3dJNe5EqvfyltP6ZXIbcVDJQrDo4xSBEg5q/u d9Q1F+jMLagbnus3TKEXzExn5rldufVA1mNkgF6TShWEkIOJyZx2rhvPwFGSzRNb rKddAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUxqqhwc8lwisJdbVYvDWjpnYmQiYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz OTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM5Ny94cXFod2M4bHdpc0pkYlZZdkRXanBuWW1RaVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBe/00MA0GCSqGSIb3DQEBCwUA A4IBAQBHmEWG8MryF8WSVDOnftN2Zjy7Hm1RN5R54AZNn6gmIy2FFExE742mOHFJ OlIj5X5cc1voTPRSfhcWCxbVaYJsWrBuGXuq0l+9pNIUOQl603GJmksCnGqVZomM GOHUI2Z6VZIquaLNtNbSsSy3mI654GgVbqEg7qaxCbrmokxh+nZ9VXJScy/B/yK5 DxjFumSgSxeO543Y24JS2R7GB6Q7Ep7agVRke2H4ijHUzQpon8OxcR+TGRORYS8N 8JDk2CRORoQqGRCFeFyUSglZi68c+9mnFpmgdORnnSwDuFgAl5XtoCLflERvAm1X B1iI4DcRncQhXe1FqANjThVJmEFb -----END CERTIFICATE-----Generated at Wed Nov 5 13:13:48 2025 by rpki-client