$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SAMQHPS71ffgKuM42Mmazfe2CGU.cer File: SAMQHPS71ffgKuM42Mmazfe2CGU.cer (raw, json) Hash identifier: 7VIay3vresAPDbS43uQ05+kd4SRaKE/na/RpbveBdMA= Subject key identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: DD8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 17 Sep 2025 19:33:55 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 2401:5c60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 04:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56717 (0xdd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 17 19:33:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4803101CF4BBD5F7E02AE338D8C99ACDF7B60865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:5c:c3:2d:53:30:01:ef:3a:50:01:98:6a: cc:3b:92:18:78:7c:fe:3c:f9:a0:46:86:1e:4c:ef: 0d:d4:ca:53:b1:32:fd:89:7c:f3:7c:63:0a:38:40: f0:1f:04:dd:b8:ec:41:91:3a:f8:2d:c5:6e:f2:9d: 21:12:0a:65:a4:79:eb:3e:77:21:90:d5:26:da:13: 68:6a:19:0d:8f:7d:d9:e8:6f:e1:33:4f:8c:85:46: 1a:68:41:b9:16:e2:56:de:8f:9f:87:0d:c8:c9:67: b2:81:ab:fa:1b:3d:c2:15:b6:10:22:4c:32:0e:b2: 40:b0:47:8a:16:9c:18:37:b7:9a:d2:89:06:2d:f9: fd:2c:bc:e6:3b:d5:b0:f4:8e:ad:6d:4b:4e:82:43: 4d:1a:e3:e6:62:8e:1c:9a:3c:6e:9e:83:66:8b:42: de:72:1c:c2:f3:9c:0f:d7:8b:24:ab:e8:47:2a:bc: 45:ff:23:3b:3c:8d:02:5a:d9:9b:42:e1:22:c4:77: f6:25:d7:12:25:e2:31:3d:f9:c8:6c:0e:cb:82:af: a6:d9:65:67:97:74:f8:93:62:35:75:ae:09:2f:53: 15:76:02:7a:c1:f5:7b:60:45:e7:f3:f2:d7:2c:39: eb:6c:77:7e:45:f4:dd:6e:68:57:01:b9:de:7b:45: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5c60::/32 Signature Algorithm: sha256WithRSAEncryption 5a:e4:7a:ff:cc:93:1b:c3:6f:fa:cd:7c:e3:7c:30:d9:a0:f0: 78:e3:5c:5c:83:8d:00:33:0f:1c:37:07:98:68:b6:f7:f4:7b: 08:76:32:1e:1e:2e:4d:f9:4b:e9:fb:e1:75:bd:6f:4d:40:f6: 2c:56:7d:a8:cd:75:1f:02:62:f7:a3:d9:54:bd:ab:f1:35:28: 7b:19:30:a0:ff:e3:75:93:83:d9:9b:6c:4e:16:72:60:b0:2a: a1:31:56:b2:47:be:3e:21:b1:cd:d7:d1:45:39:73:e0:09:a2: c2:72:cc:d4:41:05:92:44:ac:b1:cc:8b:6d:0f:30:39:a0:f6: ab:48:fa:63:41:b9:81:70:5b:a5:02:8a:8a:75:70:b8:1e:ad: 96:66:50:fa:b3:8a:6b:f4:63:8f:75:7e:5d:83:04:35:f3:f4: 29:4e:e7:46:24:d1:e1:c6:a4:74:54:45:e3:36:02:db:69:53: ba:51:b3:98:54:1b:20:ad:64:88:ab:c5:a0:c9:b5:24:ed:43: 7e:80:e8:44:d3:61:74:f0:7a:4c:00:08:a2:89:4f:38:96:64: d8:0d:2f:c0:d6:b1:8d:65:f2:6a:c6:b9:6c:da:99:31:a8:4d: b2:94:66:30:76:ef:ab:e1:92:87:0f:d2:4f:c3:f8:90:95:9e: 54:d6:02:50 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAN2NMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA5MTcxOTMzNTVaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDQ4MDMxMDFDRjRCQkQ1RjdFMDJBRTMzOEQ4Qzk5QUNERjdCNjA4 NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oFzDLVMwAe86UAGY asw7khh4fP48+aBGhh5M7w3UylOxMv2JfPN8Ywo4QPAfBN247EGROvgtxW7ynSES CmWkees+dyGQ1SbaE2hqGQ2Pfdnob+EzT4yFRhpoQbkW4lbej5+HDcjJZ7KBq/ob PcIVthAiTDIOskCwR4oWnBg3t5rSiQYt+f0svOY71bD0jq1tS06CQ00a4+Zijhya PG6eg2aLQt5yHMLznA/XiySr6EcqvEX/Izs8jQJa2ZtC4SLEd/Yl1xIl4jE9+chs DsuCr6bZZWeXdPiTYjV1rgkvUxV2AnrB9XtgRefz8tcsOetsd35F9N1uaFcBud57 RbCZAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUSAMQHPS71ffgKuM42Mmazfe2CGUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0OS9TQU1RSFBTNzFmZmdLdU00Mk1tYXpmZTJDR1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAFcYDANBgkqhkiG9w0BAQsF AAOCAQEAWuR6/8yTG8Nv+s1843ww2aDweONcXIONADMPHDcHmGi29/R7CHYyHh4u TflL6fvhdb1vTUD2LFZ9qM11HwJi96PZVL2r8TUoexkwoP/jdZOD2ZtsThZyYLAq oTFWske+PiGxzdfRRTlz4AmiwnLM1EEFkkSsscyLbQ8wOaD2q0j6Y0G5gXBbpQKK inVwuB6tlmZQ+rOKa/Rjj3V+XYMENfP0KU7nRiTR4cakdFRF4zYC22lTulGzmFQb IK1kiKvFoMm1JO1DfoDoRNNhdPB6TAAIoolPOJZk2A0vwNaxjWXyasa5bNqZMahN spRmMHbvq+GShw/ST8P4kJWeVNYCUA== -----END CERTIFICATE-----Generated at Mon Oct 20 01:29:34 2025 by rpki-client