$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer File: -ta0PAnQSQoN9_iR359jtSDPIQ8.cer (raw, json) Hash identifier: t5HW6A4SxNIzUJTLFYIxrGgQHHFLQ6Rk1mbev3AN0ak= Subject key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:02 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 103.116.148.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57907 (0xe233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:10:02 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:9b:9a:af:12:09:c7:40:01:a4:41:6a:33: 14:1b:39:9c:a8:e8:b9:62:ef:bf:10:c4:ad:5a:9d: 1d:a7:71:96:88:21:12:a9:b7:e7:82:7e:94:ca:cd: c6:d4:47:66:43:d2:19:5b:29:87:03:f4:95:f8:72: 32:8a:7e:4e:f8:5b:ab:17:1d:61:1d:b1:42:1f:3c: 1f:2e:f8:94:da:fa:48:9c:23:93:22:ce:04:82:d4: 0e:8f:bf:5c:2f:36:cd:97:74:52:39:c0:05:22:f7: 68:2c:7b:e0:d8:1f:20:d9:6d:cc:15:e1:39:84:ea: 3c:66:38:cc:96:23:35:62:6f:80:83:51:6f:3e:7b: e2:96:04:57:38:dc:b1:4d:5e:66:44:37:e1:4f:9f: 07:7e:1f:c8:e9:b5:8b:1c:fa:ad:67:9d:a1:89:da: a3:e3:27:2b:c9:05:ce:7a:22:81:4a:ae:d0:05:55: d1:76:68:6d:07:62:32:de:b5:ad:0b:46:61:17:63: 34:03:80:b7:52:54:4c:b9:48:41:57:32:9e:77:28: d3:1a:bb:c2:15:5c:13:fd:d2:59:6e:93:fa:66:86: d1:d7:db:08:7e:c7:47:ea:58:15:20:c2:80:1e:a9: c3:d2:ca:7a:cc:c3:82:b8:e0:10:f1:ee:f5:91:2e: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.148.0/22 Signature Algorithm: sha256WithRSAEncryption 23:e9:91:ad:a8:9f:13:c5:e2:78:5c:c3:eb:a4:e7:cd:28:0c: fc:0f:3b:f8:77:36:f1:29:f6:48:4a:9a:f7:ec:dc:58:b0:cd: b5:d7:5e:1c:0a:e0:2b:13:01:7a:37:b6:14:03:b0:16:cc:ef: de:db:11:5b:fc:2c:6b:18:6c:d5:c6:92:c7:f9:91:7b:47:16: 69:ad:bc:df:95:0d:b2:ee:da:16:f2:6c:76:56:4f:1d:b6:ed: 7a:fd:56:6d:75:35:62:44:81:03:ca:e1:45:49:09:c8:2a:10: 1f:6c:d0:b5:0e:29:d6:0d:b2:9d:df:4d:e1:a9:76:5c:9b:a0: 27:97:fe:cb:bc:dc:97:4d:2b:af:30:4e:2b:25:b8:6b:55:48: 24:d3:96:18:cb:bc:2e:49:f1:df:0b:8e:18:83:a6:6b:2c:6f: a1:0b:7a:02:5f:24:48:43:b9:a7:82:c5:73:4d:04:db:c1:c5: 47:5a:f8:cd:b2:1d:b8:c3:e1:1b:9f:89:31:6e:02:67:1a:ba: 22:a3:04:98:cb:5f:af:30:71:ef:67:36:8c:cc:2c:93:ac:0e: 05:9d:30:d2:6b:ca:ef:18:8b:cc:a0:75:17:57:55:28:00:0c: 7b:78:9b:4c:cb:a7:b7:16:b9:6e:33:99:d6:c7:ac:25:a9:a5: 9b:f8:73:5f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOIzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEwMDJaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEZBRDZCNDNDMDlEMDQ5MEEwREY3Rjg5MURGOUY2M0I1MjBDRjIx MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6puarxIJx0ABpEFq MxQbOZyo6Lli778QxK1anR2ncZaIIRKpt+eCfpTKzcbUR2ZD0hlbKYcD9JX4cjKK fk74W6sXHWEdsUIfPB8u+JTa+kicI5MizgSC1A6Pv1wvNs2XdFI5wAUi92gse+DY HyDZbcwV4TmE6jxmOMyWIzVib4CDUW8+e+KWBFc43LFNXmZEN+FPnwd+H8jptYsc +q1nnaGJ2qPjJyvJBc56IoFKrtAFVdF2aG0HYjLeta0LRmEXYzQDgLdSVEy5SEFX Mp53KNMau8IVXBP90lluk/pmhtHX2wh+x0fqWBUgwoAeqcPSynrMw4K44BDx7vWR LomPAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU+ta0PAnQSQoN9/iR359jtSDPIQ8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 NDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjc0MS8tdGEwUEFuUVNRb045X2lSMzU5anRTRFBJUTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3SUMA0GCSqGSIb3DQEBCwUA A4IBAQAj6ZGtqJ8TxeJ4XMPrpOfNKAz8Dzv4dzbxKfZISpr37NxYsM21114cCuAr EwF6N7YUA7AWzO/e2xFb/CxrGGzVxpLH+ZF7RxZprbzflQ2y7toW8mx2Vk8dtu16 /VZtdTViRIEDyuFFSQnIKhAfbNC1DinWDbKd303hqXZcm6Anl/7LvNyXTSuvME4r JbhrVUgk05YYy7wuSfHfC44Yg6ZrLG+hC3oCXyRIQ7mngsVzTQTbwcVHWvjNsh24 w+Ebn4kxbgJnGroiowSYy1+vMHHvZzaMzCyTrA4FnTDSa8rvGIvMoHUXV1UoAAx7 eJtMy6e3FrluM5nWx6wlqaWb+HNf -----END CERTIFICATE-----Generated at Tue Oct 28 02:24:41 2025 by rpki-client