$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer File: xqqhwc8lwisJdbVYvDWjpnYmQiY.cer (raw, json) Hash identifier: D/WryABFXpy6A12s8NA1oXYPqOFYnuyJjIL/NXXJWRM= Subject key identifier: C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: DE7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 29 Sep 2025 06:53:57 +0000 Certificate not after: Tue 29 Sep 2026 06:44:54 +0000 Subordinate resources: IP: 123.253.52.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 23:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56957 (0xde7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 29 06:53:57 2025 GMT Not After : Sep 29 06:44:54 2026 GMT Subject: CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:54:86:b9:b1:a9:90:16:85:62:07:14:f1:db: f2:1b:83:36:94:f8:eb:d7:ef:69:75:d5:de:cf:51: 26:ef:e7:bb:9d:d8:6b:a9:e0:4a:11:6b:c3:a2:a7: e5:f8:62:55:57:d0:43:6c:fb:ad:b6:bc:57:5f:9b: 6d:79:ad:ab:d1:93:70:61:4d:65:75:09:99:78:e6: a4:68:8d:3d:27:ca:2f:3f:36:2c:c6:9c:73:76:f8: b6:f8:ef:0f:4d:0e:35:0d:3f:78:f6:e4:d0:eb:32: 08:7e:ca:f4:e3:0f:be:59:5c:48:af:6c:92:11:4e: de:8b:ed:fb:b3:cb:d7:9b:45:d3:3b:4b:f0:b1:84: 04:58:cd:82:33:62:0b:d3:92:34:9f:7e:ab:00:a2: d2:33:03:9c:28:25:0f:95:d9:89:fc:26:71:1f:7b: 2d:51:49:b0:37:ef:94:63:53:f8:76:07:41:77:74: 93:5e:e4:4a:af:7f:29:6d:3f:a6:57:21:b7:15:0c: 94:2b:0e:8e:31:48:11:20:e6:af:ee:77:d4:35:17: e8:cc:2d:a8:1b:9e:eb:37:4c:a1:17:cc:4c:67:e6: b9:5d:b9:f5:40:d6:63:64:80:5e:93:4a:15:84:90: 83:89:c9:9c:76:ae:1b:cf:c0:51:92:cd:13:5b:ac: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.253.52.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:61:33:ab:f6:4a:8d:b4:b6:88:71:c7:79:e7:1d:33:87:33: 35:f7:ab:5f:a9:e7:51:09:8a:64:d3:a3:36:f3:f0:80:af:ab: fc:d5:de:47:e3:a1:a3:3f:f5:23:5b:ab:ff:2a:6a:55:1a:bb: d3:3b:d6:9a:4e:09:a4:59:af:e5:f4:2d:e9:a4:e3:c5:8d:b2: 82:10:af:20:89:d6:20:d4:85:55:fa:c0:01:a7:77:8f:a2:9c: 17:1e:fe:08:66:9c:b7:b2:10:9c:74:23:c6:b6:d3:db:d0:b2: a4:e7:cd:79:9e:bb:78:af:92:ff:25:15:39:2c:78:03:4a:9a: 5c:37:70:19:fa:6a:8b:2b:ec:43:ec:20:44:c4:af:63:eb:10: 5c:9f:fc:fe:2c:51:06:f0:35:64:a2:bd:48:86:df:f2:c4:54: 6c:ff:a3:6b:01:62:79:41:f3:f2:3f:2d:ae:cc:94:72:39:61: 01:e6:c7:4c:25:02:c0:08:f4:e9:e5:fe:e6:dd:40:a0:69:7c: 66:87:89:70:7b:a9:d7:6d:6b:87:1f:53:f6:29:8f:bc:70:af: 86:1e:e4:bf:3f:71:93:4e:07:78:6b:2b:0d:d4:1b:f4:6f:55: d4:8a:67:ef:5d:3f:a3:2d:cc:1e:52:10:3a:be:df:01:e2:a2: 51:ff:1e:6e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAN59MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA5MjkwNjUzNTdaFw0yNjA5MjkwNjQ0NTRaMDMx MTAvBgNVBAMTKEM2QUFBMUMxQ0YyNUMyMkIwOTc1QjU1OEJDMzVBM0E2NzYyNjQy MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVIa5samQFoViBxTx 2/IbgzaU+OvX72l11d7PUSbv57ud2Gup4EoRa8Oip+X4YlVX0ENs+622vFdfm215 ravRk3BhTWV1CZl45qRojT0nyi8/NizGnHN2+Lb47w9NDjUNP3j25NDrMgh+yvTj D75ZXEivbJIRTt6L7fuzy9ebRdM7S/CxhARYzYIzYgvTkjSffqsAotIzA5woJQ+V 2Yn8JnEfey1RSbA375RjU/h2B0F3dJNe5EqvfyltP6ZXIbcVDJQrDo4xSBEg5q/u d9Q1F+jMLagbnus3TKEXzExn5rldufVA1mNkgF6TShWEkIOJyZx2rhvPwFGSzRNb rKddAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUxqqhwc8lwisJdbVYvDWjpnYmQiYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz OTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM5Ny94cXFod2M4bHdpc0pkYlZZdkRXanBuWW1RaVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBe/00MA0GCSqGSIb3DQEBCwUA A4IBAQA6YTOr9kqNtLaIccd55x0zhzM196tfqedRCYpk06M28/CAr6v81d5H46Gj P/UjW6v/KmpVGrvTO9aaTgmkWa/l9C3ppOPFjbKCEK8gidYg1IVV+sABp3ePopwX Hv4IZpy3shCcdCPGttPb0LKk5815nrt4r5L/JRU5LHgDSppcN3AZ+mqLK+xD7CBE xK9j6xBcn/z+LFEG8DVkor1Iht/yxFRs/6NrAWJ5QfPyPy2uzJRyOWEB5sdMJQLA CPTp5f7m3UCgaXxmh4lwe6nXbWuHH1P2KY+8cK+GHuS/P3GTTgd4aysN1Bv0b1XU imfvXT+jLcweUhA6vt8B4qJR/x5u -----END CERTIFICATE-----Generated at Sun Oct 19 20:11:05 2025 by rpki-client