$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Fwt8oG9XNbekD5f_H1O64TNIqT4.cer File: Fwt8oG9XNbekD5f_H1O64TNIqT4.cer (raw, json) Hash identifier: zyP2eKH0ExWQ4WdvFMrOwhvbyKCuoChDQt5gOWAEzJw= Subject key identifier: 17:0B:7C:A0:6F:57:35:B7:A4:0F:97:FF:1F:53:BA:E1:33:48:A9:3E Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3F9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:12:54 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 157.15.94.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16283 (0x3f9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:12:54 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=170B7CA06F5735B7A40F97FF1F53BAE13348A93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:e1:c8:5f:1e:af:a7:b0:a5:20:48:15:0d: 67:ca:c1:6c:0b:bd:92:dc:90:9d:a8:12:b0:af:8c: c6:c1:c3:b3:82:81:10:aa:50:5a:dc:70:70:5b:b9: b4:9f:ad:f1:c6:18:e1:ed:60:ce:8b:ff:22:4e:ab: 57:88:ae:cc:3a:ff:fc:5e:96:ef:0f:3d:0c:3f:8d: 96:fa:66:50:8c:e0:73:14:e3:af:dd:be:2a:28:5e: cb:d3:1c:21:71:b4:4e:fd:0d:dc:91:bd:6b:45:04: 25:5f:39:16:44:04:77:ab:36:39:02:fa:98:3a:a5: d4:70:76:7b:c2:6f:c1:7d:d5:cf:c5:c9:af:90:94: 32:24:1e:f2:c6:d3:ea:21:d4:56:c8:9c:19:c8:21: 7a:af:73:48:a3:69:85:11:66:91:1e:d9:53:19:bc: b9:bb:d1:99:99:72:10:26:d5:36:80:78:72:a9:05: 47:41:f6:e7:44:a9:5f:d3:69:89:3f:81:44:d4:2c: 85:2d:5a:d1:9f:77:23:77:ae:42:19:47:32:3e:7f: 38:b3:a6:63:ee:b0:35:f0:ea:de:5b:c6:8b:be:cd: e9:37:cf:bc:07:5d:db:74:a9:98:1d:b4:8d:5f:fd: 36:92:dc:aa:64:73:20:71:27:14:d7:dc:eb:80:5b: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:7C:A0:6F:57:35:B7:A4:0F:97:FF:1F:53:BA:E1:33:48:A9:3E X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.15.94.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:b4:f3:18:b5:0b:e5:a6:15:59:7f:15:a0:91:ba:11:0f:0c: 43:14:5a:aa:82:49:d7:45:27:56:e4:21:d7:1a:d1:ff:9e:37: 0c:d3:25:1d:db:5a:19:e3:25:c9:67:57:87:fa:0d:15:ec:af: 54:b0:63:e5:47:71:94:4d:96:1d:85:49:13:36:2b:ee:5f:9f: c7:6e:40:34:43:bd:37:e0:3e:1f:09:87:a6:b8:34:58:67:a0: db:cf:ac:aa:3e:77:cd:74:b4:ed:82:93:de:13:dc:29:90:37: 5e:aa:4c:11:24:a9:31:cd:88:06:49:6b:2b:d5:7f:47:c4:8f: c8:af:50:72:fe:18:fd:16:77:39:9b:06:50:14:b3:6b:c7:9d: 3f:d4:19:eb:45:97:98:b2:cc:61:99:83:d4:f4:a0:d5:c0:12: 91:34:83:15:2d:00:2e:b1:5b:71:e3:66:8d:de:60:27:31:df: 12:07:a2:1d:71:c1:9c:4b:4a:b0:ce:f4:88:42:80:10:9e:6c: 08:87:6c:d3:fc:a1:86:d4:c7:e2:ee:ca:7b:d4:b9:46:6b:a3: 77:13:7a:06:b3:a3:16:8b:1f:1c:f8:a1:d1:1e:c2:10:08:ac: 2c:5a:a5:ff:9c:c4:ff:90:49:90:76:fc:4b:92:35:16:fa:97: e0:9b:0a:35 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICP5swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTI1NFoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoMTcwQjdDQTA2RjU3MzVCN0E0MEY5N0ZGMUY1M0JBRTEzMzQ4QTkz RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcM4chfHq+nsKUgSBUN Z8rBbAu9ktyQnagSsK+MxsHDs4KBEKpQWtxwcFu5tJ+t8cYY4e1gzov/Ik6rV4iu zDr//F6W7w89DD+NlvpmUIzgcxTjr92+Kihey9McIXG0Tv0N3JG9a0UEJV85FkQE d6s2OQL6mDql1HB2e8JvwX3Vz8XJr5CUMiQe8sbT6iHUVsicGcgheq9zSKNphRFm kR7ZUxm8ubvRmZlyECbVNoB4cqkFR0H250SpX9NpiT+BRNQshS1a0Z93I3euQhlH Mj5/OLOmY+6wNfDq3lvGi77N6TfPvAdd23SpmB20jV/9NpLcqmRzIHEnFNfc64Bb essCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQXC3ygb1c1t6QPl/8fU7rhM0ipPjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjYyL0Z3dDhvRzlYTmJla0Q1Zl9IMU82NFROSXFUNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdD14wDQYJKoZIhvcNAQELBQAD ggEBAA608xi1C+WmFVl/FaCRuhEPDEMUWqqCSddFJ1bkIdca0f+eNwzTJR3bWhnj JclnV4f6DRXsr1SwY+VHcZRNlh2FSRM2K+5fn8duQDRDvTfgPh8Jh6a4NFhnoNvP rKo+d810tO2Ck94T3CmQN16qTBEkqTHNiAZJayvVf0fEj8ivUHL+GP0WdzmbBlAU s2vHnT/UGetFl5iyzGGZg9T0oNXAEpE0gxUtAC6xW3HjZo3eYCcx3xIHoh1xwZxL SrDO9IhCgBCebAiHbNP8oYbUx+LuynvUuUZro3cTegazoxaLHxz4odEewhAIrCxa pf+cxP+QSZB2/EuSNRb6l+CbCjU= -----END CERTIFICATE-----Generated at Mon Aug 11 10:32:04 2025 by rpki-client