$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer File: 1JQPURo42VRNSLTFxsObBYH4kf4.cer (raw, json) Hash identifier: RZsIZ1fwPKpsivOEZu4/dioNwEFcrspki7cLGFbFL7s= Subject key identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: DC56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 02 Sep 2025 00:43:36 +0000 Certificate not after: Wed 02 Sep 2026 00:41:26 +0000 Subordinate resources: AS: 59012 IP: 103.110.136.0/22 IP: 2402:8bc0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56406 (0xdc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 2 00:43:36 2025 GMT Not After : Sep 2 00:41:26 2026 GMT Subject: CN=D4940F511A38D9544D48B4C5C6C39B0581F891FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:65:8e:cd:3f:b1:83:e7:6d:62:52:51:78: 00:dd:9b:2f:68:3f:02:40:d6:b0:a6:b8:3d:4c:ed: 60:d4:c1:25:d3:84:bd:ff:28:6f:17:74:d0:b8:5d: 66:4e:1e:7b:30:40:a7:1d:e9:53:d7:74:dc:10:bb: f7:c5:08:32:5f:45:c2:92:14:68:ae:14:cd:dd:ad: c6:ae:97:24:fb:09:cf:38:eb:0f:fa:aa:d5:4f:bd: 59:28:1a:9c:69:1d:30:9c:72:38:b7:9b:72:93:e5: 2c:b0:80:ef:85:80:18:9c:f0:e9:92:69:1d:9e:58: 35:05:d0:bd:ad:52:76:b4:6c:14:49:8c:7e:e5:d8: fb:cb:71:79:db:4b:01:12:ea:ec:de:0e:b6:29:7c: 79:a2:17:7a:3a:95:26:8d:cd:33:8f:12:2b:90:6d: f3:34:e8:f6:a7:20:39:c4:c0:c7:2f:3b:36:6a:d0: c3:15:0a:14:5c:5a:4a:aa:ef:3d:99:bc:80:4d:ab: 0e:80:36:21:01:77:9a:24:17:df:94:16:4e:f7:d9: 74:bf:8a:4d:fc:24:a5:87:8b:1b:27:d0:dd:30:e4: ab:29:75:3a:8d:9e:f5:af:b2:d6:f2:36:e9:b5:c2: 27:bb:5f:59:8d:13:e4:18:48:80:3a:98:b6:ad:3e: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59012 sbgp-ipAddrBlock: critical IPv4: 103.110.136.0/22 IPv6: 2402:8bc0::/32 Signature Algorithm: sha256WithRSAEncryption 09:88:b6:e0:6b:18:00:07:b0:38:8b:a2:61:74:17:8b:b1:5e: 2b:03:69:c5:bf:69:fe:1d:41:08:7f:82:98:fe:1b:db:c6:df: 0e:39:cc:27:2b:d5:82:d8:5d:73:ba:85:30:48:a3:5d:1f:16: 9c:f6:31:17:e2:c2:0e:23:9c:24:97:bb:79:d7:17:79:8a:7b: dd:32:57:10:31:57:02:ec:47:9e:4b:38:62:47:52:eb:ef:c2: 46:ab:54:41:3e:4e:77:1e:13:10:a4:cf:41:34:c6:75:4f:c2: e5:9b:5b:fd:10:b7:92:bc:97:aa:b2:7e:cf:19:76:62:69:98: ae:2a:21:e0:5d:87:ec:29:76:b4:b9:23:de:54:2e:06:f5:d3: 7c:21:e0:c0:e2:68:4e:4a:0a:d1:96:45:ba:7c:fa:c9:38:51: 6b:a2:ea:b9:66:6e:41:95:14:a1:1a:01:f6:e1:0b:54:f8:77: b8:71:7b:24:70:94:b4:7f:ce:ed:57:85:9e:f4:fb:bb:bb:e4: 1a:50:a5:f1:7c:d6:15:c3:e1:f8:67:1c:ed:53:1d:bf:96:f2: 1e:8c:16:66:32:ef:c5:5c:92:34:23:e1:a4:48:fb:e9:cd:42: ec:59:ab:73:20:40:1d:c2:0a:77:4f:72:52:45:8b:cc:23:b6: 36:8a:28:47 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDANxWMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA5MDIwMDQzMzZaFw0yNjA5MDIwMDQxMjZaMDMx MTAvBgNVBAMTKEQ0OTQwRjUxMUEzOEQ5NTQ0RDQ4QjRDNUM2QzM5QjA1ODFGODkx RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v2WOzT+xg+dtYlJR eADdmy9oPwJA1rCmuD1M7WDUwSXThL3/KG8XdNC4XWZOHnswQKcd6VPXdNwQu/fF CDJfRcKSFGiuFM3drcaulyT7Cc846w/6qtVPvVkoGpxpHTCccji3m3KT5SywgO+F gBic8OmSaR2eWDUF0L2tUna0bBRJjH7l2PvLcXnbSwES6uzeDrYpfHmiF3o6lSaN zTOPEiuQbfM06PanIDnEwMcvOzZq0MMVChRcWkqq7z2ZvIBNqw6ANiEBd5okF9+U Fk732XS/ik38JKWHixsn0N0w5KspdTqNnvWvstbyNum1wie7X1mNE+QYSIA6mLat PpSJAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQU1JQPURo42VRNSLTFxsObBYH4kf4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 ODgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjY4OC8xSlFQVVJvNDJWUk5TTFRGeHNPYkJZSDRrZjQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmhDAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmduiDANBAIAAjAHAwUAJAKLwDANBgkqhkiG9w0BAQsFAAOCAQEA CYi24GsYAAewOIuiYXQXi7FeKwNpxb9p/h1BCH+CmP4b28bfDjnMJyvVgthdc7qF MEijXR8WnPYxF+LCDiOcJJe7edcXeYp73TJXEDFXAuxHnks4YkdS6+/CRqtUQT5O dx4TEKTPQTTGdU/C5Ztb/RC3kryXqrJ+zxl2YmmYrioh4F2H7Cl2tLkj3lQuBvXT fCHgwOJoTkoK0ZZFunz6yThRa6LquWZuQZUUoRoB9uELVPh3uHF7JHCUtH/O7VeF nvT7u7vkGlCl8XzWFcPh+Gcc7VMdv5byHowWZjLvxVySNCPhpEj76c1C7FmrcyBA HcIKd09yUkWLzCO2NoooRw== -----END CERTIFICATE-----Generated at Sun Sep 7 10:57:41 2025 by rpki-client