$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/57-wC4BEeBqV6l72MeBDsLOl7Cg.cer File: 57-wC4BEeBqV6l72MeBDsLOl7Cg.cer (raw, json) Hash identifier: wcrB8eT9RTG1p9r4wXjxq+JX85rJwNzfzgljtrGyosA= Subject key identifier: E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3FFB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:17:23 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 157.66.88.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16379 (0x3ffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:17:23 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E7BFB00B8044781A95EA5EF631E043B0B3A5EC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:ae:af:b3:69:7b:f6:79:8e:1f:62:4e:53: 79:74:26:e9:7a:29:13:95:4b:a6:5e:31:ae:5a:e9: 95:3a:53:0e:44:60:82:5d:50:bd:c5:d3:f7:ef:ad: 46:49:32:9b:0e:97:b9:50:95:74:d1:68:f1:fd:40: d3:28:f5:a4:b5:b1:26:ff:2f:dc:da:a3:11:ae:e0: 23:51:07:af:0f:e9:9a:68:df:b1:3b:a6:40:9c:23: 66:f7:49:50:d8:ea:6d:d8:e9:96:52:6e:85:b3:12: 12:4a:ab:9a:09:ff:af:4b:a2:ed:56:6b:44:f1:07: 9d:f9:31:88:ed:f8:37:91:f6:7d:69:14:ed:ac:56: c8:ce:55:f2:8c:a9:59:82:87:e9:a4:3b:61:c1:31: 5a:e5:a7:38:58:c4:cd:52:bf:db:7b:ad:d9:7a:ea: b1:5c:4f:b1:15:28:76:36:d3:f7:e7:94:cf:fa:b9: de:60:1c:ff:1b:2c:1a:1c:6c:20:3f:92:c5:7a:0a: d4:0d:36:77:cd:90:49:6a:7f:2e:96:bb:94:2f:05: 51:39:21:a2:1e:13:f3:e6:f7:e7:0f:25:fe:cc:16: 07:4a:20:2a:7a:9b:0b:00:d3:62:f2:ec:01:a5:9f: 29:91:5b:21:c1:34:eb:4e:f5:68:bf:43:7c:cb:45: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.88.0/23 Signature Algorithm: sha256WithRSAEncryption 36:24:23:47:18:3c:92:7b:6c:98:f2:9b:7e:99:fe:fa:e1:49: 95:a7:02:97:90:60:ba:1a:9c:dc:cc:77:26:b7:85:99:bc:3e: 52:a8:81:fa:2a:da:30:f4:b4:d2:7d:ad:db:cf:08:3e:01:61: d6:34:05:5f:b7:18:cf:a4:50:38:22:f6:e6:a2:82:ed:b1:57: 82:1b:06:96:94:c3:7e:20:3c:62:cf:fb:a1:63:fe:3e:4e:f8: b1:63:71:80:22:6d:9a:93:57:16:70:f5:f7:36:9b:fd:8a:44: 83:91:51:7d:0b:5a:0c:ce:fd:64:c9:63:f5:37:14:42:7a:fd: 2f:ff:a4:c2:25:51:1b:db:2f:42:59:77:b8:d6:39:df:ad:e8: 83:76:90:e1:9c:bd:d0:ac:1c:5b:92:58:94:1c:f9:22:a8:f2: 80:77:e6:6c:75:49:8d:2a:15:34:17:a4:c6:5d:d9:13:2e:50: fe:28:4a:9c:04:e1:9f:fa:42:03:87:bf:72:fa:37:ce:e5:18: f3:d7:c1:70:ef:81:6d:f2:78:0a:cb:ad:f5:90:94:19:64:3a: 69:67:0e:bd:1e:f8:97:ec:af:45:aa:23:23:ab:a1:97:c1:76: c5:72:88:e5:cd:71:a5:71:75:d7:78:7e:78:0e:0b:06:c7:a4: fd:58:a1:20 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICP/swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTcyM1oXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoRTdCRkIwMEI4MDQ0NzgxQTk1RUE1RUY2MzFFMDQzQjBCM0E1RUMy ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJIrq+zaXv2eY4fYk5T eXQm6XopE5VLpl4xrlrplTpTDkRggl1QvcXT9++tRkkymw6XuVCVdNFo8f1A0yj1 pLWxJv8v3NqjEa7gI1EHrw/pmmjfsTumQJwjZvdJUNjqbdjpllJuhbMSEkqrmgn/ r0ui7VZrRPEHnfkxiO34N5H2fWkU7axWyM5V8oypWYKH6aQ7YcExWuWnOFjEzVK/ 23ut2XrqsVxPsRUodjbT9+eUz/q53mAc/xssGhxsID+SxXoK1A02d82QSWp/Lpa7 lC8FUTkhoh4T8+b35w8l/swWB0ogKnqbCwDTYvLsAaWfKZFbIcE06071aL9DfMtF 7McCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTnv7ALgER4GpXqXvYx4EOws6XsKDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjc2LzU3LXdDNEJFZUJxVjZsNzJNZUJEc0xPbDdDZy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQlgwDQYJKoZIhvcNAQELBQAD ggEBADYkI0cYPJJ7bJjym36Z/vrhSZWnApeQYLoanNzMdya3hZm8PlKogfoq2jD0 tNJ9rdvPCD4BYdY0BV+3GM+kUDgi9uaigu2xV4IbBpaUw34gPGLP+6Fj/j5O+LFj cYAibZqTVxZw9fc2m/2KRIORUX0LWgzO/WTJY/U3FEJ6/S//pMIlURvbL0JZd7jW Od+t6IN2kOGcvdCsHFuSWJQc+SKo8oB35mx1SY0qFTQXpMZd2RMuUP4oSpwE4Z/6 QgOHv3L6N87lGPPXwXDvgW3yeArLrfWQlBlkOmlnDr0e+Jfsr0WqIyOroZfBdsVy iOXNcaVxddd4fngOCwbHpP1YoSA= -----END CERTIFICATE-----Generated at Mon Aug 11 07:42:34 2025 by rpki-client