$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/a5mV9HjPG2vSjnyeKoOeyeBpgKg.cer File: a5mV9HjPG2vSjnyeKoOeyeBpgKg.cer (raw, json) Hash identifier: fWaJ8VsiUReTm9/jzdTZurWF5KSkEPR303eIrxieTiE= Subject key identifier: 6B:99:95:F4:78:CF:1B:6B:D2:8E:7C:9E:2A:83:9E:C9:E0:69:80:A8 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4005 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/a5mV9HjPG2vSjnyeKoOeyeBpgKg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:17:49 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 161.248.42.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16389 (0x4005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:17:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6B9995F478CF1B6BD28E7C9E2A839EC9E06980A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:7f:e3:6c:a5:39:03:95:3d:82:0a:06:e4: 7e:c3:5e:a0:a0:be:e5:4a:73:46:7b:41:d2:92:37: 4b:ba:3c:d6:3e:bb:c6:76:f7:9e:ce:d5:56:66:ca: 08:da:0f:f2:bd:50:8a:b0:b5:1b:30:d9:a2:a6:41: a8:eb:31:76:91:30:fb:72:79:f3:fe:07:15:1a:d4: 89:41:c1:d4:08:e3:ee:5b:4d:c1:d8:aa:0c:c9:5e: c7:d6:c6:24:d0:e6:e7:ac:93:24:97:ff:bf:d0:3f: 9a:cb:0c:4b:85:76:e3:2a:57:67:05:ea:5a:94:a3: b4:f2:69:18:53:59:71:04:02:f5:8e:09:e2:30:9a: fa:9b:25:95:90:96:34:7e:ee:f5:7e:a8:ee:75:98: 82:cb:dc:9f:cb:5d:cb:6d:41:ca:03:0e:1c:3e:29: 40:6f:d2:41:58:2f:f6:4c:94:ce:27:3d:5a:32:76: 2f:a0:2a:f1:4f:ce:37:ad:8f:f6:30:06:bc:64:f1: cf:a1:fe:cd:5f:7c:39:1c:39:e9:c7:7c:71:be:1d: ca:5a:19:67:99:61:02:65:3a:d6:01:70:4c:7a:b4: cb:de:6f:f2:c8:5b:8c:04:ee:49:ec:86:c4:77:0a: d2:58:bc:05:6f:15:a3:b0:2d:3d:40:eb:ce:94:68: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:99:95:F4:78:CF:1B:6B:D2:8E:7C:9E:2A:83:9E:C9:E0:69:80:A8 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/a5mV9HjPG2vSjnyeKoOeyeBpgKg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.42.0/23 Signature Algorithm: sha256WithRSAEncryption 81:4c:79:43:66:90:20:ba:f2:8e:45:9f:37:82:7b:0b:d5:99: f1:7a:fb:21:1e:62:85:08:9e:d6:84:55:5e:04:cf:85:f7:47: 83:d7:a1:6c:01:64:7f:9f:74:ec:02:59:34:1d:c9:78:01:4f: e2:a5:ba:92:b4:e0:69:b2:75:75:3d:a2:7c:31:2d:98:0a:3f: ba:af:88:37:b5:af:e6:1d:c2:2a:4b:b8:9b:5b:cb:44:30:d1: 11:12:5c:a4:fa:a3:82:2e:2c:37:6f:66:68:50:fa:02:7a:71: b1:43:2b:27:e6:59:40:5f:34:47:b8:f3:e9:ce:f7:63:26:5d: 49:bc:41:ac:0e:cd:94:90:17:ea:df:00:41:e1:d9:4b:60:07: 53:21:bc:ab:7f:49:f8:9e:37:36:eb:4c:cd:29:4e:73:6e:f9: 8d:b9:42:11:78:b2:8b:20:fa:2f:ef:1d:6f:f1:be:a0:20:54: ea:fc:09:98:0a:1e:d6:25:a8:84:a8:6d:5d:44:b4:08:d2:bf: 09:da:b7:e2:5e:f0:de:0f:c2:9f:77:c9:40:ff:b6:b0:78:7a: 9b:22:a0:1e:79:da:96:10:98:a8:87:c0:23:a6:51:1c:f6:60: f6:4a:ee:ea:79:76:ad:80:09:89:b7:54:35:de:c0:9e:ab:ad: 58:a5:b4:8b -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQAUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTc0OVoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoNkI5OTk1RjQ3OENGMUI2QkQyOEU3QzlFMkE4MzlFQzlFMDY5ODBB ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFBf+NspTkDlT2CCgbk fsNeoKC+5UpzRntB0pI3S7o81j67xnb3ns7VVmbKCNoP8r1QirC1GzDZoqZBqOsx dpEw+3J58/4HFRrUiUHB1Ajj7ltNwdiqDMlex9bGJNDm56yTJJf/v9A/mssMS4V2 4ypXZwXqWpSjtPJpGFNZcQQC9Y4J4jCa+psllZCWNH7u9X6o7nWYgsvcn8tdy21B ygMOHD4pQG/SQVgv9kyUzic9WjJ2L6Aq8U/ON62P9jAGvGTxz6H+zV98ORw56cd8 cb4dyloZZ5lhAmU61gFwTHq0y95v8shbjATuSeyGxHcK0li8BW8Vo7AtPUDrzpRo pkcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRrmZX0eM8ba9KOfJ4qg57J4GmAqDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzQ0L2E1bVY5SGpQRzJ2U2pueWVLb09leWVCcGdLZy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGh+CowDQYJKoZIhvcNAQELBQAD ggEBAIFMeUNmkCC68o5FnzeCewvVmfF6+yEeYoUIntaEVV4Ez4X3R4PXoWwBZH+f dOwCWTQdyXgBT+KlupK04GmydXU9onwxLZgKP7qviDe1r+YdwipLuJtby0Qw0RES XKT6o4IuLDdvZmhQ+gJ6cbFDKyfmWUBfNEe48+nO92MmXUm8QawOzZSQF+rfAEHh 2UtgB1MhvKt/SfieNzbrTM0pTnNu+Y25QhF4sosg+i/vHW/xvqAgVOr8CZgKHtYl qISobV1EtAjSvwnat+Je8N4Pwp93yUD/trB4epsioB552pYQmKiHwCOmURz2YPZK 7up5dq2ACYm3VDXewJ6rrViltIs= -----END CERTIFICATE-----Generated at Mon Aug 11 07:41:44 2025 by rpki-client