Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
File:                     ewmQZr0q8jQpPIeRezOxq4YZcO8.cer (raw, json)
Hash identifier:          FVPFnYdmPSSpbJOSDuVmcldolR2VzEGmJcqdkRUoDzA=
Subject key identifier:   7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       3FB1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sun 03 Aug 2025 09:14:07 +0000
Certificate not after:    Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources:    IP: 139.159.96.0 -- 139.159.115.255
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 09:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16305 (0x3fb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Aug  3 09:14:07 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=7B099066BD2AF234293C87917B33B1AB861970EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:7d:17:dc:c5:f0:a0:7d:79:83:13:92:19:
                    93:73:13:35:ed:fc:61:3a:8a:62:8c:c2:76:f5:f5:
                    34:43:9c:36:93:1c:b1:83:d5:b6:0c:b9:89:11:a8:
                    9c:1a:ed:32:c4:25:30:62:21:b7:89:58:7a:39:a3:
                    81:00:d1:34:d0:92:85:e8:aa:84:2d:e5:33:72:fe:
                    5c:a0:f2:c6:31:be:f8:81:c4:0d:89:f7:29:f8:9c:
                    cf:83:27:a2:fc:d3:4a:1d:81:37:ea:e5:48:2d:61:
                    4d:c9:42:7b:91:57:7a:4e:46:b1:70:31:2d:aa:74:
                    58:7c:d6:73:93:c9:bb:21:cc:ae:33:ae:15:f5:ac:
                    19:a3:b8:85:fe:b8:b6:4c:3d:95:38:b3:86:24:62:
                    c1:96:2e:69:ac:73:49:a9:d2:72:d0:ae:34:f8:8b:
                    eb:4e:40:35:01:80:27:62:9b:53:37:74:a9:e3:41:
                    63:43:27:4f:14:07:e4:54:c9:fc:8d:5c:08:ff:a6:
                    46:bc:cb:17:1c:90:41:78:0c:b0:0d:2f:3f:08:55:
                    48:85:97:de:f3:b4:34:16:3a:2a:ef:96:5d:1d:33:
                    55:51:61:09:0c:9c:66:ce:74:3b:a6:0f:d9:0f:08:
                    36:39:09:3a:5a:7b:fa:70:d6:8f:5e:af:95:c8:73:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.96.0-139.159.115.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:40:0c:12:ef:00:da:3a:4a:90:0f:bf:ed:10:24:58:67:5a:
         93:22:0b:85:38:de:08:79:51:8c:bc:a1:3a:fc:c8:61:30:9c:
         03:dc:df:41:91:fd:b1:7a:10:ff:e2:f3:53:72:3e:dc:aa:fb:
         b6:b7:08:1a:c4:85:13:29:3b:f9:c6:d2:67:5c:ad:bd:4f:2b:
         6a:88:74:17:dd:ba:bc:f2:7f:8b:4c:34:62:a5:21:a3:f0:ca:
         d4:56:29:81:77:a2:d3:b3:a1:8d:b8:95:8c:6c:cd:36:ab:c8:
         c5:02:0f:62:5e:17:54:a3:98:e1:69:d7:bb:50:a3:f7:52:51:
         6e:14:f4:85:00:be:0e:4e:ec:68:d8:bf:f4:20:21:b5:2f:93:
         6b:67:69:0a:42:ee:6a:ca:d6:5a:98:1c:18:0b:f1:6c:4f:fc:
         59:bc:20:c1:36:44:a0:99:5c:9b:de:ab:be:c8:eb:05:b4:20:
         33:af:f9:69:ef:37:1c:c1:4b:a0:0b:71:bc:31:51:4c:3e:59:
         a8:ac:95:d2:99:cb:b0:56:de:55:8e:ad:52:55:2f:38:37:1a:
         06:54:04:01:e7:7d:f1:e1:c1:a9:a9:6e:b3:00:c6:16:e2:52:
         c3:67:62:e0:e6:88:e3:e0:98:98:76:14:3e:60:23:a8:84:56:
         5c:05:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:07:42 2025 by rpki-client