Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer
File:                     xqqhwc8lwisJdbVYvDWjpnYmQiY.cer (raw, json)
Hash identifier:          D/WryABFXpy6A12s8NA1oXYPqOFYnuyJjIL/NXXJWRM=
Subject key identifier:   C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       DE7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 29 Sep 2025 06:53:57 +0000
Certificate not after:    Tue 29 Sep 2026 06:44:54 +0000
Subordinate resources:    IP: 123.253.52.0/23
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Oct 2025 23:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56957 (0xde7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Sep 29 06:53:57 2025 GMT
            Not After : Sep 29 06:44:54 2026 GMT
        Subject: CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:86:b9:b1:a9:90:16:85:62:07:14:f1:db:
                    f2:1b:83:36:94:f8:eb:d7:ef:69:75:d5:de:cf:51:
                    26:ef:e7:bb:9d:d8:6b:a9:e0:4a:11:6b:c3:a2:a7:
                    e5:f8:62:55:57:d0:43:6c:fb:ad:b6:bc:57:5f:9b:
                    6d:79:ad:ab:d1:93:70:61:4d:65:75:09:99:78:e6:
                    a4:68:8d:3d:27:ca:2f:3f:36:2c:c6:9c:73:76:f8:
                    b6:f8:ef:0f:4d:0e:35:0d:3f:78:f6:e4:d0:eb:32:
                    08:7e:ca:f4:e3:0f:be:59:5c:48:af:6c:92:11:4e:
                    de:8b:ed:fb:b3:cb:d7:9b:45:d3:3b:4b:f0:b1:84:
                    04:58:cd:82:33:62:0b:d3:92:34:9f:7e:ab:00:a2:
                    d2:33:03:9c:28:25:0f:95:d9:89:fc:26:71:1f:7b:
                    2d:51:49:b0:37:ef:94:63:53:f8:76:07:41:77:74:
                    93:5e:e4:4a:af:7f:29:6d:3f:a6:57:21:b7:15:0c:
                    94:2b:0e:8e:31:48:11:20:e6:af:ee:77:d4:35:17:
                    e8:cc:2d:a8:1b:9e:eb:37:4c:a1:17:cc:4c:67:e6:
                    b9:5d:b9:f5:40:d6:63:64:80:5e:93:4a:15:84:90:
                    83:89:c9:9c:76:ae:1b:cf:c0:51:92:cd:13:5b:ac:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:61:33:ab:f6:4a:8d:b4:b6:88:71:c7:79:e7:1d:33:87:33:
         35:f7:ab:5f:a9:e7:51:09:8a:64:d3:a3:36:f3:f0:80:af:ab:
         fc:d5:de:47:e3:a1:a3:3f:f5:23:5b:ab:ff:2a:6a:55:1a:bb:
         d3:3b:d6:9a:4e:09:a4:59:af:e5:f4:2d:e9:a4:e3:c5:8d:b2:
         82:10:af:20:89:d6:20:d4:85:55:fa:c0:01:a7:77:8f:a2:9c:
         17:1e:fe:08:66:9c:b7:b2:10:9c:74:23:c6:b6:d3:db:d0:b2:
         a4:e7:cd:79:9e:bb:78:af:92:ff:25:15:39:2c:78:03:4a:9a:
         5c:37:70:19:fa:6a:8b:2b:ec:43:ec:20:44:c4:af:63:eb:10:
         5c:9f:fc:fe:2c:51:06:f0:35:64:a2:bd:48:86:df:f2:c4:54:
         6c:ff:a3:6b:01:62:79:41:f3:f2:3f:2d:ae:cc:94:72:39:61:
         01:e6:c7:4c:25:02:c0:08:f4:e9:e5:fe:e6:dd:40:a0:69:7c:
         66:87:89:70:7b:a9:d7:6d:6b:87:1f:53:f6:29:8f:bc:70:af:
         86:1e:e4:bf:3f:71:93:4e:07:78:6b:2b:0d:d4:1b:f4:6f:55:
         d4:8a:67:ef:5d:3f:a3:2d:cc:1e:52:10:3a:be:df:01:e2:a2:
         51:ff:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:05 2025 by rpki-client