$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sIxEzvbWUf77qxG4j5_aFKUCzp8.cer File: sIxEzvbWUf77qxG4j5_aFKUCzp8.cer (raw, json) Hash identifier: Z3Wm8HO2+uZY/BABxTtcymtOOXeN3DN4SdaSPnbqrwA= Subject key identifier: B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: DD10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 09 Sep 2025 19:34:26 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 151274 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 23:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56592 (0xdd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 9 19:34:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B08C44CEF6D651FEFBAB11B88F9FDA14A502CE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:c9:20:d2:1d:71:8c:50:5a:dd:f0:a5:f0: 4a:47:91:0e:c9:81:6e:f2:97:83:d5:25:99:22:f9: 56:9a:98:18:bc:d8:6b:17:d7:c1:fc:7c:c5:82:59: 0d:d2:93:af:7c:e9:85:72:d1:26:45:71:11:e1:d3: e6:79:b7:17:ea:2c:81:c1:f6:71:d4:fa:3e:7d:96: 7c:f3:7c:bc:fe:81:a9:cf:d9:a9:1e:65:67:60:09: de:92:55:ea:ad:18:ec:67:43:f0:b6:ed:37:07:16: 9b:1f:76:af:14:d7:e5:f5:6d:47:78:52:96:51:ce: b0:63:61:a9:92:ef:a4:5d:ef:17:29:e6:77:5d:1b: 6e:37:d0:da:8c:db:05:71:cb:f6:5f:d6:9f:33:fd: c4:ba:28:7e:31:e3:54:4e:a3:fd:2e:fd:63:9b:d9: f0:4f:83:6a:c7:20:ad:02:ad:47:4a:03:f3:02:d7: d3:f0:64:27:7f:ec:e4:47:39:6d:b1:89:e2:eb:ea: a3:5b:21:1f:0e:70:09:d9:7b:84:75:4f:3b:69:a4: 31:92:9b:dc:23:34:8c:f9:b5:f0:e5:e0:a7:a7:2d: c0:69:25:c0:c3:fb:49:36:34:fd:d0:c6:a2:59:b7: 6a:21:1a:18:39:21:64:96:ee:e5:ac:d6:98:9d:e0: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151274 Signature Algorithm: sha256WithRSAEncryption 63:1d:4e:00:c2:66:ec:23:37:c2:10:ec:e0:bd:27:1b:73:5a: c1:a7:81:2d:29:0b:58:88:ee:79:3d:32:a1:30:62:33:24:47: 88:14:92:16:ee:14:92:b5:7c:e8:c8:89:20:9d:a2:ae:1d:a3: 67:a0:c6:61:f0:49:71:4c:b8:03:5a:ef:ab:3e:4d:c2:c1:ef: 0c:12:0e:77:4a:25:da:d0:d4:5c:34:72:62:5b:0b:02:3d:78: 97:04:57:de:13:f2:4d:da:47:c3:b0:9b:db:b5:3c:59:ae:e3: 40:60:8d:e2:e6:01:d3:79:7f:b3:58:e5:6f:f9:98:a0:7e:58: 58:93:d5:62:cd:20:c5:da:9a:1b:21:ce:16:59:ed:b4:b5:b8: f7:a2:66:3b:bd:48:28:f0:1e:13:98:eb:81:40:9e:6c:0e:20: 32:8f:63:4d:77:5d:6f:a3:22:cf:c7:d4:9b:5a:1a:e1:48:98: 44:a5:ef:d5:f1:47:77:df:07:36:2b:c6:bf:97:f6:07:e2:72: 18:cf:41:e2:7d:32:77:ef:7b:c1:37:1a:d0:71:7b:b1:5c:3f: 4f:cc:73:dc:e3:9b:93:8f:c2:ce:8e:f9:d2:03:57:fb:94:8c: de:a4:f1:6e:b5:a9:f3:a7:c0:4f:90:3c:37:6a:92:b0:74:5f: 88:95:69:71 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAN0QMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA5MDkxOTM0MjZaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEIwOEM0NENFRjZENjUxRkVGQkFCMTFCODhGOUZEQTE0QTUwMkNF OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqnckg0h1xjFBa3fCl 8EpHkQ7JgW7yl4PVJZki+VaamBi82GsX18H8fMWCWQ3Sk6986YVy0SZFcRHh0+Z5 txfqLIHB9nHU+j59lnzzfLz+ganP2akeZWdgCd6SVeqtGOxnQ/C27TcHFpsfdq8U 1+X1bUd4UpZRzrBjYamS76Rd7xcp5nddG2430NqM2wVxy/Zf1p8z/cS6KH4x41RO o/0u/WOb2fBPg2rHIK0CrUdKA/MC19PwZCd/7ORHOW2xieLr6qNbIR8OcAnZe4R1 TztppDGSm9wjNIz5tfDl4KenLcBpJcDD+0k2NP3QxqJZt2ohGhg5IWSW7uWs1pid 4OeRAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUsIxEzvbWUf77qxG4j5/aFKUCzp8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MzMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMzMy9zSXhFenZiV1VmNzdxeEc0ajVfYUZLVUN6cDgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO6jANBgkqhkiG9w0BAQsFAAOCAQEA Yx1OAMJm7CM3whDs4L0nG3NawaeBLSkLWIjueT0yoTBiMyRHiBSSFu4UkrV86MiJ IJ2irh2jZ6DGYfBJcUy4A1rvqz5NwsHvDBIOd0ol2tDUXDRyYlsLAj14lwRX3hPy TdpHw7Cb27U8Wa7jQGCN4uYB03l/s1jlb/mYoH5YWJPVYs0gxdqaGyHOFlnttLW4 96JmO71IKPAeE5jrgUCebA4gMo9jTXddb6Miz8fUm1oa4UiYRKXv1fFHd98HNivG v5f2B+JyGM9B4n0yd+97wTca0HF7sVw/T8xz3OObk4/Czo750gNX+5SM3qTxbrWp 86fAT5A8N2qSsHRfiJVpcQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:43:55 2025 by rpki-client