$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer File: GubvWysCBd1fK0KBGsYIANaP1KA.cer (raw, json) Hash identifier: tdprBQhk1gUIvdUNmQObebictdhTYSjyh/b62M7lP/M= Subject key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D57A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 25 Jun 2025 05:58:59 +0000 Certificate not after: Thu 25 Jun 2026 05:55:52 +0000 Subordinate resources: AS: 139187 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 01:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54650 (0xd57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jun 25 05:58:59 2025 GMT Not After : Jun 25 05:55:52 2026 GMT Subject: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:1a:a5:ba:13:6a:53:d5:96:96:31:9c:90: 13:68:51:5b:16:76:98:aa:cf:c9:6e:6a:4f:67:76: 2a:f9:0a:ae:9c:67:b0:83:8e:ee:c7:c7:66:e4:6f: 31:71:c8:38:9d:9d:7b:e7:7a:c1:35:2a:ee:89:13: 34:f1:79:95:ce:d9:c6:7a:53:11:e0:58:98:ab:aa: 1c:d0:d1:18:39:e3:04:43:cb:41:14:63:b0:c1:31: 90:a4:a8:2e:e8:a0:a0:a6:9c:c0:97:da:6e:27:a1: 71:35:e5:89:f6:4c:2c:17:df:3f:ce:e2:b9:a2:f9: 0e:79:23:79:1f:cb:51:d1:af:49:4d:53:97:96:b1: 99:76:f0:63:cd:4a:aa:2a:09:68:fc:1f:16:1b:01: a6:ba:24:b4:0b:8d:65:80:e6:f7:81:19:61:4c:38: cc:81:83:71:08:d4:db:9a:ba:01:0f:57:ef:bd:67: fa:f6:fc:c9:fa:33:03:80:d7:99:29:ed:3a:d5:04: 8e:d9:31:1d:5c:33:36:a2:e7:6a:98:ac:bd:23:21: 73:7f:42:1c:92:3e:44:f2:48:28:a9:36:e6:bf:c4: 37:89:fb:78:a7:8b:78:98:ea:21:df:00:88:93:2c: 73:7d:f1:35:e1:84:2f:73:3f:f7:29:b3:21:f8:1c: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139187 Signature Algorithm: sha256WithRSAEncryption 91:bf:c8:dd:87:25:5f:95:ff:47:86:86:e0:4a:62:61:31:a8: 50:65:8c:ca:09:27:c8:81:cd:b8:23:90:f4:5e:c7:72:12:ea: c1:e9:6e:90:6c:c4:04:03:9e:2c:4c:4c:cd:99:9b:3a:e6:1e: 55:9c:d1:b2:cf:e0:20:c2:b0:b2:1e:15:02:72:54:c1:19:3b: 98:4b:c9:8b:cb:fe:d0:fc:00:87:97:1c:58:14:6a:ba:24:a1: d2:44:8a:4a:22:40:13:a3:ec:08:b2:ad:e4:41:16:c5:dd:ed: d2:97:19:32:6d:86:05:8a:4e:7e:a4:75:08:54:ef:b0:5a:55: 2d:42:ee:75:c6:a3:11:22:fa:9d:56:0b:c4:62:e9:34:54:31: b8:8c:94:b2:51:ee:4a:6b:14:76:d8:61:92:70:45:3f:6e:19: f3:69:b8:c5:13:d4:cb:80:77:d0:ee:1c:59:29:25:8f:07:9c: 3d:ee:d5:80:70:60:c7:95:d5:70:cf:7c:09:20:16:18:d5:d2: 8e:cf:b7:c4:dc:62:9a:8f:91:58:9a:9e:d4:b7:25:89:d2:be: cc:93:bf:a5:b6:15:f8:bb:02:ed:b7:d8:21:bb:be:e7:97:ac: 8f:d5:fd:b6:f0:3e:b1:0d:a7:b3:64:90:77:18:04:5f:8d:ea: a9:90:f2:12 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANV6MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA2MjUwNTU4NTlaFw0yNjA2MjUwNTU1NTJaMDMx MTAvBgNVBAMTKDFBRTZFRjVCMkIwMjA1REQ1RjJCNDI4MTFBQzYwODAwRDY4RkQ0 QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUBqluhNqU9WWljGc kBNoUVsWdpiqz8luak9ndir5Cq6cZ7CDju7Hx2bkbzFxyDidnXvnesE1Ku6JEzTx eZXO2cZ6UxHgWJirqhzQ0Rg54wRDy0EUY7DBMZCkqC7ooKCmnMCX2m4noXE15Yn2 TCwX3z/O4rmi+Q55I3kfy1HRr0lNU5eWsZl28GPNSqoqCWj8HxYbAaa6JLQLjWWA 5veBGWFMOMyBg3EI1NuaugEPV++9Z/r2/Mn6MwOA15kp7TrVBI7ZMR1cMzai52qY rL0jIXN/QhySPkTySCipNua/xDeJ+3ini3iY6iHfAIiTLHN98TXhhC9zP/cpsyH4 HIexAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUGubvWysCBd1fK0KBGsYIANaP1KAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3OS9HdWJ2V3lzQ0JkMWZLMEtCR3NZSUFOYVAxS0EubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfszANBgkqhkiG9w0BAQsFAAOCAQEA kb/I3YclX5X/R4aG4EpiYTGoUGWMygknyIHNuCOQ9F7HchLqwelukGzEBAOeLExM zZmbOuYeVZzRss/gIMKwsh4VAnJUwRk7mEvJi8v+0PwAh5ccWBRquiSh0kSKSiJA E6PsCLKt5EEWxd3t0pcZMm2GBYpOfqR1CFTvsFpVLULudcajESL6nVYLxGLpNFQx uIyUslHuSmsUdthhknBFP24Z82m4xRPUy4B30O4cWSkljwecPe7VgHBgx5XVcM98 CSAWGNXSjs+3xNximo+RWJqe1LclidK+zJO/pbYV+LsC7bfYIbu+55esj9X9tvA+ sQ2ns2SQdxgEX43qqZDyEg== -----END CERTIFICATE-----Generated at Fri Jul 4 00:21:22 2025 by rpki-client