$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer File: UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer (raw, json) Hash identifier: sPeRr6QnliLF7/gbsre2meAku72FwzCst6mPYBNNoPc= Subject key identifier: 51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4203 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:07:25 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 160.187.254.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16899 (0x4203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:07:25 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=5155BE679611E624575D7938070076A333C5B9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:6c:33:d0:60:d1:f2:32:0b:a7:c6:9d:89: 62:3a:18:06:80:96:30:e2:33:ea:ad:e1:28:a1:30: b4:30:a5:f9:47:65:a4:6c:25:c9:a4:e8:33:a5:4c: e9:23:da:52:b2:40:92:85:13:c3:a3:56:18:ed:eb: 17:6e:64:b1:d9:05:9e:3e:d0:7c:b1:3c:6a:05:58: 35:55:41:5c:0e:dd:e7:ac:40:96:04:36:7c:bb:14: aa:e7:22:da:e2:f6:c8:7d:70:db:2f:df:1e:3c:e8: ee:65:49:38:c0:90:8e:2c:4d:20:ff:b0:06:30:db: 61:fd:6d:38:94:be:4a:f4:e5:88:5c:85:24:5a:89: ea:ab:aa:fd:d9:05:1d:18:18:e6:47:62:e7:e7:00: 53:30:2b:5d:6c:c2:f0:98:c9:60:22:27:7f:2e:a1: 44:69:c8:94:4f:7a:81:d7:e2:39:24:3f:ab:37:c1: 15:58:2e:cc:eb:1d:83:e7:1f:1c:e5:f3:0c:a6:31: d3:80:a3:23:6b:26:13:aa:48:d7:d7:0d:a1:b6:cf: ef:ce:50:90:7e:54:5b:47:18:e5:16:e0:ee:9d:2d: fa:62:e5:81:1d:e9:41:83:75:66:8a:8b:99:23:53: 26:60:ed:6f:f3:4f:bf:27:18:bf:05:b9:ac:4b:3e: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.254.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:40:d4:f8:5b:b9:8a:0f:46:45:9d:95:b9:7a:e3:0e:bb:b4: 0c:3a:a3:09:2a:da:3b:48:7a:94:82:4b:6e:9e:77:99:6b:47: fc:5d:03:07:18:2f:78:bf:2f:18:20:55:7e:e7:6a:2e:63:7a: 42:2b:89:26:9e:f2:c9:af:d6:ab:a7:d7:d6:4c:ae:9c:9a:7a: 0b:0e:13:33:be:06:9d:0c:e0:51:63:ac:f9:77:db:ea:c5:a3: 72:86:d5:75:1e:9c:21:ea:3d:42:cd:8b:c7:04:12:44:89:f8: 72:91:af:79:1d:aa:4c:38:c3:ce:62:ac:86:63:7b:44:ce:f6: 2f:8a:24:f2:d0:1a:47:f2:5f:36:cf:a5:16:6b:3f:32:80:89: c6:75:4d:5c:ab:f1:7e:19:bb:a5:2a:c1:22:a2:76:e9:7a:43: 12:2f:77:a2:df:98:a2:f6:4d:f2:e6:33:34:7f:96:a5:cf:5c: d2:b5:70:9a:55:c4:2d:86:71:13:eb:cc:4b:78:2b:2b:09:f3: ec:3c:c5:db:93:d1:5a:52:da:01:ae:7d:5f:d3:0a:86:a6:d0: f3:fe:41:5c:c3:27:57:07:48:e1:a6:4c:f2:ef:a6:6c:8e:bc: 4d:89:f7:c0:83:b0:14:a4:d2:aa:56:49:8e:b9:1b:1d:b1:fb: 3d:8b:b2:9a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQgMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMDcyNVoXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoNTE1NUJFNjc5NjExRTYyNDU3NUQ3OTM4MDcwMDc2QTMzM0M1QjlB RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKb/bDPQYNHyMgunxp2J YjoYBoCWMOIz6q3hKKEwtDCl+UdlpGwlyaToM6VM6SPaUrJAkoUTw6NWGO3rF25k sdkFnj7QfLE8agVYNVVBXA7d56xAlgQ2fLsUquci2uL2yH1w2y/fHjzo7mVJOMCQ jixNIP+wBjDbYf1tOJS+SvTliFyFJFqJ6quq/dkFHRgY5kdi5+cAUzArXWzC8JjJ YCInfy6hRGnIlE96gdfiOSQ/qzfBFVguzOsdg+cfHOXzDKYx04CjI2smE6pI19cN obbP785QkH5UW0cY5Rbg7p0t+mLlgR3pQYN1ZoqLmSNTJmDtb/NPvycYvwW5rEs+ RIsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRRVb5nlhHmJFddeTgHAHajM8W5rjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzIxL1VWVy1aNVlSNWlSWFhYazRCd0Iyb3pQRnVhNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu/4wDQYJKoZIhvcNAQELBQAD ggEBABpA1PhbuYoPRkWdlbl64w67tAw6owkq2jtIepSCS26ed5lrR/xdAwcYL3i/ LxggVX7nai5jekIriSae8smv1qun19ZMrpyaegsOEzO+Bp0M4FFjrPl32+rFo3KG 1XUenCHqPULNi8cEEkSJ+HKRr3kdqkw4w85irIZje0TO9i+KJPLQGkfyXzbPpRZr PzKAicZ1TVyr8X4Zu6UqwSKidul6QxIvd6LfmKL2TfLmMzR/lqXPXNK1cJpVxC2G cRPrzEt4KysJ8+w8xduT0VpS2gGufV/TCoam0PP+QVzDJ1cHSOGmTPLvpmyOvE2J 98CDsBSk0qpWSY65Gx2x+z2Lspo= -----END CERTIFICATE-----Generated at Fri Oct 24 08:56:14 2025 by rpki-client