$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer File: cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer (raw, json) Hash identifier: t9+lqVNh8kBVDbcDtRoFeWPkWWaiAV2aqwCrfqHdjaY= Subject key identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E1D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:08:46 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 131482 IP: 103.72.120.0/22 IP: 2406:dd80::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57811 (0xe1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:08:46 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=715B46D9F995777FA3143263D54A6E676A906EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:62:a6:e3:e0:25:d5:65:f3:ea:7d:28:56: 91:1a:0a:a8:25:d5:d3:85:25:98:be:10:82:82:07: 83:28:e2:6b:f0:23:fb:9c:99:ab:ad:ec:87:2b:69: 48:4b:6c:ad:8d:6d:d8:a1:4f:89:9f:f8:29:3e:39: 4b:f8:be:c8:af:59:b3:96:78:7f:79:5f:12:b3:c1: 8b:f8:8f:d3:5c:a4:a9:1a:67:6f:35:c0:d0:02:8c: 41:18:7e:3e:1f:1d:08:c2:3d:df:1d:bb:9c:7e:0a: 4f:85:e1:bf:c5:a7:b5:4f:26:67:e6:e5:a7:9e:ae: 59:22:f1:39:46:1e:0a:71:78:5c:00:d0:eb:1d:17: de:b7:80:b0:8a:b5:fc:9b:a4:e4:c3:60:9d:9c:8f: f3:9b:cd:a2:32:bd:89:cc:9c:7a:45:b6:d6:bf:ac: 18:38:46:35:11:b0:32:84:9d:c0:17:5f:78:0e:17: 31:54:63:94:99:66:2f:dc:29:13:3d:2d:16:d6:aa: 92:aa:89:0c:5d:26:c7:98:61:ad:d7:e7:07:73:e6: 6e:5b:ca:eb:c3:43:23:01:ce:3c:24:b8:bf:5c:c6: af:fb:2d:3b:f5:6a:7b:30:d5:cd:43:b1:28:9f:be: a6:2d:93:4d:3c:77:12:b6:83:aa:ed:0f:69:60:6d: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131482 sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 IPv6: 2406:dd80::/32 Signature Algorithm: sha256WithRSAEncryption 3b:c2:7f:1f:6a:aa:30:67:46:8b:77:c9:47:4e:f5:3d:d9:ac: 58:34:92:80:8a:b8:f2:cc:91:14:bb:9a:18:dd:4e:e9:2a:37: 90:81:b0:20:8e:cc:bb:ac:0d:a5:05:1a:a8:c3:cc:66:56:82: 8a:50:47:f5:15:4c:62:0c:d8:6e:9f:4b:0f:bb:02:39:67:6f: 0f:76:77:0c:4e:05:e8:61:54:96:d3:8e:80:fc:c6:ec:e9:b5: f5:5d:b3:72:cc:d6:99:9e:36:e2:c4:2e:f4:86:ac:8b:46:b3: 65:b4:3e:95:6a:8d:d9:4c:2d:9f:ad:01:0e:cc:38:7d:f0:6b: 89:85:8f:2b:99:16:c0:06:43:2b:9f:44:d2:5b:bd:47:6c:2f: 6e:9b:19:46:3c:c5:c3:dd:c6:da:5f:a3:91:6c:0c:5c:2c:7e: 45:36:8e:86:28:f0:c9:c4:42:5e:af:37:88:35:ed:64:21:1a: bd:c0:bb:b2:af:53:9b:91:5f:3e:4d:40:f0:35:84:08:55:d6: f0:f3:21:62:b6:a7:20:29:1c:33:05:f0:d0:6e:30:f8:d6:9c: 88:59:a4:05:32:16:c7:28:45:0f:65:c7:d6:d6:ff:09:d0:45: 14:73:7b:00:9b:30:57:20:21:45:23:b6:47:ce:8c:7f:0b:50: 66:22:ee:af -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOHTMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA4NDZaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDcxNUI0NkQ5Rjk5NTc3N0ZBMzE0MzI2M0Q1NEE2RTY3NkE5MDZF QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdGKm4+Al1WXz6n0o VpEaCqgl1dOFJZi+EIKCB4Mo4mvwI/ucmaut7IcraUhLbK2NbdihT4mf+Ck+OUv4 vsivWbOWeH95XxKzwYv4j9NcpKkaZ281wNACjEEYfj4fHQjCPd8du5x+Ck+F4b/F p7VPJmfm5aeerlki8TlGHgpxeFwA0OsdF963gLCKtfybpOTDYJ2cj/ObzaIyvYnM nHpFtta/rBg4RjURsDKEncAXX3gOFzFUY5SZZi/cKRM9LRbWqpKqiQxdJseYYa3X 5wdz5m5byuvDQyMBzjwkuL9cxq/7LTv1answ1c1DsSifvqYtk008dxK2g6rtD2lg bX8HAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUcVtG2fmVd3+jFDJj1UpuZ2qQbqsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3NS9jVnRHMmZtVmQzLWpGREpqMVVwdVoycVFicXMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIBmjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdIeDANBAIAAjAHAwUAJAbdgDANBgkqhkiG9w0BAQsFAAOCAQEA O8J/H2qqMGdGi3fJR071PdmsWDSSgIq48syRFLuaGN1O6So3kIGwII7Mu6wNpQUa qMPMZlaCilBH9RVMYgzYbp9LD7sCOWdvD3Z3DE4F6GFUltOOgPzG7Om19V2zcszW mZ424sQu9Iasi0azZbQ+lWqN2Uwtn60BDsw4ffBriYWPK5kWwAZDK59E0lu9R2wv bpsZRjzFw93G2l+jkWwMXCx+RTaOhijwycRCXq83iDXtZCEavcC7sq9Tm5FfPk1A 8DWECFXW8PMhYranICkcMwXw0G4w+NaciFmkBTIWxyhFD2XH1tb/CdBFFHN7AJsw VyAhRSO2R86MfwtQZiLurw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:32 2025 by rpki-client