$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer File: OCdChXYoqbKyIFmuiEdvIwYL6tA.cer (raw, json) Hash identifier: pyRZH7qdSUojzvpLq6Kkuj5Ctc6/fAsa+GkCnv8F7b0= Subject key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3FF3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:16:34 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.250.16.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16371 (0x3ff3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:16:34 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=382742857628A9B2B22059AE88476F23060BEAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:59:6b:e1:83:53:be:01:5f:a6:53:11:c4: b8:19:96:5d:50:19:2f:f7:4f:7b:61:dc:c7:6d:5c: 1d:40:4e:da:57:07:6b:64:a1:e2:d9:7f:29:ec:20: 2d:cf:02:00:8b:10:ea:1e:1c:3e:0f:70:5b:b7:ae: 50:37:32:cf:27:b1:16:42:46:a4:69:06:9c:fa:68: 70:69:e3:30:06:6c:d9:b9:d1:27:73:54:b9:9a:01: d6:07:09:87:ec:11:f7:66:8b:98:c6:eb:d2:ee:90: 73:c3:c7:ed:2d:c8:61:00:f3:d6:54:7a:1a:4d:26: 51:d1:59:cc:58:48:e9:4c:50:aa:63:29:21:74:cf: 04:7c:16:17:19:39:02:5b:e6:50:34:26:ae:67:cc: e0:42:55:fa:95:ce:bf:f6:5d:b8:c9:ab:2c:21:8f: 5f:86:2b:36:66:27:69:e8:2d:4f:3e:49:0c:ed:c5: 2d:16:d8:0f:bb:d6:b5:b6:72:cf:b0:9d:0c:e4:45: d5:d5:13:3c:47:57:9c:f7:ec:ed:ea:08:18:d4:63: 60:49:90:73:4b:52:a0:e5:21:32:fe:90:71:b4:f5: 32:37:7a:c7:87:33:aa:61:6b:98:b4:74:0b:9d:24: 2d:bf:71:66:9e:56:94:37:9a:ec:90:c8:ec:ce:44: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.16.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:c3:62:9d:5a:6f:0b:4a:f1:e0:cc:a5:63:a0:51:a0:b4:4c: 98:ab:9c:aa:8d:75:b5:37:a8:87:df:24:91:b9:aa:1b:06:9d: a0:62:99:bb:1d:ea:e5:36:d2:d0:62:af:2d:c4:32:f7:d7:17: c5:49:cc:c5:7c:cd:89:9e:0d:39:47:47:20:d1:4b:c4:f8:14: fa:8e:e5:0f:f3:01:5d:1c:ed:31:23:40:8c:cb:26:09:53:57: f8:b0:c1:30:60:3d:95:7c:ec:f3:84:26:0d:00:0b:cb:8b:28: 60:44:df:9e:f0:5b:17:78:8f:67:42:57:98:38:e1:2f:31:eb: 22:12:f5:46:84:e2:35:8b:87:9b:b8:c4:a7:7a:56:73:b3:37: e5:15:ae:f7:ee:a5:b2:b8:db:82:a1:77:19:2e:7f:a1:fd:8a: 5b:51:37:52:85:c9:9c:c5:29:9d:32:4f:04:47:82:51:9c:41: 8d:9c:fe:33:1f:cb:3b:e5:6e:d5:01:2d:a0:fe:ee:df:c9:da: 4e:00:e9:d1:26:17:0d:fd:0a:e1:35:c6:28:ba:af:9a:05:fc: 36:a1:36:43:5d:ca:5c:98:9a:06:81:5f:7e:3c:a8:87:a3:54: eb:93:6d:c2:8d:35:37:ca:69:9d:73:67:31:9c:a6:98:94:16: 48:28:c1:7a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICP/MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTYzNFoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoMzgyNzQyODU3NjI4QTlCMkIyMjA1OUFFODg0NzZGMjMwNjBCRUFE MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhmWWvhg1O+AV+mUxHE uBmWXVAZL/dPe2Hcx21cHUBO2lcHa2Sh4tl/KewgLc8CAIsQ6h4cPg9wW7euUDcy zyexFkJGpGkGnPpocGnjMAZs2bnRJ3NUuZoB1gcJh+wR92aLmMbr0u6Qc8PH7S3I YQDz1lR6Gk0mUdFZzFhI6UxQqmMpIXTPBHwWFxk5AlvmUDQmrmfM4EJV+pXOv/Zd uMmrLCGPX4YrNmYnaegtTz5JDO3FLRbYD7vWtbZyz7CdDORF1dUTPEdXnPfs7eoI GNRjYEmQc0tSoOUhMv6QcbT1Mjd6x4czqmFrmLR0C50kLb9xZp5WlDea7JDI7M5E S0ECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ4J0KFdiipsrIgWa6IR28jBgvq0DAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzI4L09DZENoWFlvcWJLeUlGbXVpRWR2SXdZTDZ0QS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+hAwDQYJKoZIhvcNAQELBQAD ggEBAJvDYp1abwtK8eDMpWOgUaC0TJirnKqNdbU3qIffJJG5qhsGnaBimbsd6uU2 0tBiry3EMvfXF8VJzMV8zYmeDTlHRyDRS8T4FPqO5Q/zAV0c7TEjQIzLJglTV/iw wTBgPZV87POEJg0AC8uLKGBE357wWxd4j2dCV5g44S8x6yIS9UaE4jWLh5u4xKd6 VnOzN+UVrvfupbK424Khdxkuf6H9iltRN1KFyZzFKZ0yTwRHglGcQY2c/jMfyzvl btUBLaD+7t/J2k4A6dEmFw39CuE1xii6r5oF/DahNkNdylyYmgaBX348qIejVOuT bcKNNTfKaZ1zZzGcppiUFkgowXo= -----END CERTIFICATE-----Generated at Mon Aug 11 10:30:27 2025 by rpki-client