$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer File: R2fj9DSSQBFPCs03VtVATczdRXg.cer (raw, json) Hash identifier: mllnrhPrB4gAG2T0fSwKaFBmgJiLuDgw9pzTvAsCD3U= Subject key identifier: 47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: DC93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 02 Sep 2025 12:48:49 +0000 Certificate not after: Wed 02 Sep 2026 11:00:59 +0000 Subordinate resources: AS: 63588 IP: 202.136.80.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56467 (0xdc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 2 12:48:49 2025 GMT Not After : Sep 2 11:00:59 2026 GMT Subject: CN=4767E3F4349240114F0ACD3756D5404DCCDD4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:c2:69:c7:b3:4b:47:4a:03:1c:24:92:ba: 66:95:1d:15:89:a3:11:0f:5f:30:62:7b:56:1f:87: 5f:fb:91:d3:a5:e7:4a:52:ae:28:32:ef:f4:d6:7f: ae:a9:f1:22:53:c3:31:87:7a:a7:11:a4:97:c6:48: 8b:42:35:e5:b6:43:8a:58:aa:c8:a0:4d:5f:0d:6d: e9:20:69:d0:12:6c:46:7a:a5:4d:c3:b2:69:d5:e7: 84:36:65:4a:ea:e7:45:0b:36:10:61:6f:92:84:f1: 8c:4d:8b:ec:8e:fd:33:19:79:71:f5:5d:00:c4:e2: fc:30:f6:b1:0c:01:cc:30:67:b3:ff:92:b4:0f:a0: 07:f5:7d:c7:40:c7:50:92:07:87:de:d0:e0:c9:2b: ed:3d:b3:2c:7c:59:0b:4c:a9:4f:90:2b:cc:55:68: 00:4c:6a:bb:8b:63:cc:23:e7:4a:70:bc:70:02:c2: 93:2d:6e:06:1f:98:b5:1e:89:f4:86:a7:58:86:53: c5:7d:06:a0:93:01:bf:41:f5:09:39:66:c5:cb:6b: 7c:4f:98:fb:50:46:79:07:7b:f0:b4:4d:31:50:3d: 24:e9:98:1d:bc:de:fc:57:cc:99:c6:bf:a4:34:09: 03:47:3a:98:ae:c5:ef:18:01:de:b1:92:2d:5d:d2: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63588 sbgp-ipAddrBlock: critical IPv4: 202.136.80.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:1b:0c:3e:09:65:21:5d:02:29:7c:2a:ef:d4:ee:4d:d1:29: 42:43:56:bf:e5:7e:72:74:ee:7c:96:f8:3e:12:25:55:1a:83: ba:5d:a2:c7:81:ca:f0:66:9c:b4:95:e2:e2:08:91:24:46:35: e7:a9:07:68:bc:b4:cb:cf:57:fb:4c:b8:2b:76:32:7a:3c:8b: 79:0d:4c:1f:1a:a7:fa:5e:96:79:5d:24:9f:94:fd:b1:72:da: d6:49:e4:d0:48:50:c1:25:1f:e7:8e:57:ec:0c:08:5f:b4:cb: 0f:4a:95:b1:37:1b:ea:14:28:2d:ab:54:f8:b6:90:34:64:0e: e2:e5:c6:b4:3a:0c:05:97:f1:82:f2:80:e9:f4:e9:7e:30:81: 12:a4:41:99:b8:d6:05:b4:ff:51:c5:03:b2:74:5c:90:a5:be: 2d:ff:0d:0a:01:ff:e0:aa:b4:a7:b9:26:81:d5:20:51:23:29: 72:51:44:63:ef:e7:7b:ec:73:11:98:04:b4:99:fa:80:85:1d: 06:b2:36:a3:18:00:1b:bc:a0:1d:a4:f7:ed:60:88:46:52:38: 1c:0c:87:08:26:31:6b:2f:06:a7:cd:15:e8:e2:19:3c:bb:00: 7d:ee:37:1f:b6:05:40:55:bf:03:ba:9a:b0:3c:c9:5e:4c:92: b7:45:d1:04 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDANyTMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA5MDIxMjQ4NDlaFw0yNjA5MDIxMTAwNTlaMDMx MTAvBgNVBAMTKDQ3NjdFM0Y0MzQ5MjQwMTE0RjBBQ0QzNzU2RDU0MDREQ0NERDQ1 NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXMJpx7NLR0oDHCSS umaVHRWJoxEPXzBie1Yfh1/7kdOl50pSrigy7/TWf66p8SJTwzGHeqcRpJfGSItC NeW2Q4pYqsigTV8NbekgadASbEZ6pU3DsmnV54Q2ZUrq50ULNhBhb5KE8YxNi+yO /TMZeXH1XQDE4vww9rEMAcwwZ7P/krQPoAf1fcdAx1CSB4fe0ODJK+09syx8WQtM qU+QK8xVaABMaruLY8wj50pwvHACwpMtbgYfmLUeifSGp1iGU8V9BqCTAb9B9Qk5 ZsXLa3xPmPtQRnkHe/C0TTFQPSTpmB283vxXzJnGv6Q0CQNHOpiuxe8YAd6xki1d 0t1jAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUR2fj9DSSQBFPCs03VtVATczdRXgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz OTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM5MS9SMmZqOURTU1FCRlBDczAzVnRWQVRjemRSWGcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4ZDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcqIUDANBgkqhkiG9w0BAQsFAAOCAQEALxsMPgllIV0CKXwq79Tu TdEpQkNWv+V+cnTufJb4PhIlVRqDul2ix4HK8GactJXi4giRJEY156kHaLy0y89X +0y4K3YyejyLeQ1MHxqn+l6WeV0kn5T9sXLa1knk0EhQwSUf545X7AwIX7TLD0qV sTcb6hQoLatU+LaQNGQO4uXGtDoMBZfxgvKA6fTpfjCBEqRBmbjWBbT/UcUDsnRc kKW+Lf8NCgH/4Kq0p7kmgdUgUSMpclFEY+/ne+xzEZgEtJn6gIUdBrI2oxgAG7yg HaT37WCIRlI4HAyHCCYxay8Gp80V6OIZPLsAfe43H7YFQFW/A7qasDzJXkySt0XR BA== -----END CERTIFICATE-----Generated at Sun Sep 7 11:01:44 2025 by rpki-client