$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer File: fG2F62AxocqYwos7xhqYL63H-Eo.cer (raw, json) Hash identifier: G4ClNmtKfZPnZw9C0gO+ybAbZVh3JYo48m1wlgrqqGQ= Subject key identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 42B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 30 Oct 2025 07:19:10 +0000 Certificate not after: Fri 30 Oct 2026 01:21:48 +0000 Subordinate resources: IP: 138.252.118.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17077 (0x42b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 30 07:19:10 2025 GMT Not After : Oct 30 01:21:48 2026 GMT Subject: CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:88:f1:96:a0:ab:94:fc:17:23:cd:dd:76: c4:e9:4b:aa:ad:da:06:9b:1b:f5:31:74:f5:2b:76: f2:e2:d0:b9:fc:0d:1e:34:43:f3:a0:d1:6f:d0:52: 24:9b:61:41:44:f6:84:99:dd:c5:5d:97:8b:1a:15: 62:58:6a:de:f7:44:bb:3b:19:fa:ff:e7:e2:38:bc: 2b:16:04:be:e3:e6:6a:4b:ca:ca:d9:d0:3d:71:f8: aa:45:dd:4a:1d:c8:34:64:91:c2:32:40:cb:cc:91: a7:64:8d:0f:e0:df:42:b5:14:65:24:20:fd:48:78: 22:fe:48:2b:7e:f2:57:67:f2:40:83:47:77:23:d5: 62:d2:bf:2f:3f:f7:8d:09:8f:ec:25:b5:de:4e:e5: 40:bd:3f:69:11:93:a8:62:5e:4d:cf:84:e0:e1:19: a1:ce:74:ed:96:42:3d:a1:23:45:92:64:96:39:ab: 54:aa:37:df:85:19:d9:06:7b:bd:8f:42:bc:11:dc: 8a:42:54:76:3c:63:d4:a6:0b:49:85:e3:ef:2c:42: 1b:ff:29:4f:5f:07:84:56:b6:59:77:3f:c7:24:b6: 91:c6:10:85:7b:21:8b:96:4a:28:ed:9e:b0:6b:7f: 40:b1:50:13:ad:f1:29:90:fb:00:90:93:ac:9f:42: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.118.0/23 Signature Algorithm: sha256WithRSAEncryption 17:6a:a4:11:b5:f0:f7:fb:70:50:da:d5:ad:79:f2:25:23:24: de:7a:7b:f5:ac:ac:aa:e3:1d:05:57:5d:7a:cf:81:76:b3:88: 44:7f:90:25:58:dc:e7:03:b0:31:21:08:21:ba:12:f0:39:39: 37:7a:0c:27:05:9e:db:69:72:90:66:04:18:73:58:98:7a:ac: 5c:ae:53:3d:f5:83:53:e9:0b:7f:e7:c9:5b:de:1b:84:a7:38: 05:6f:ca:82:2f:9f:73:0d:01:e0:80:86:14:6e:66:e5:72:fb: 12:9d:4e:04:00:e7:c2:af:48:ef:38:30:eb:f4:70:64:32:cf: fb:4b:a7:51:75:3f:6e:ed:fc:3a:85:07:a9:f1:20:b2:9c:f9: 2c:35:64:0e:d1:3e:95:24:86:17:1a:46:97:4f:d3:ae:7c:d4: 9b:07:78:49:13:e5:60:33:3d:cf:fa:76:22:c5:1c:36:5a:cc: 46:2f:cd:55:dd:a5:0d:33:c3:fe:9f:1e:fd:1b:70:ea:d9:5d: 62:3c:44:c1:c9:a5:a7:9f:34:0f:61:4d:f4:e5:e9:aa:b7:1b: 90:12:a0:22:15:97:32:80:5b:42:0f:ad:8c:79:42:41:fa:f6: fd:e7:fc:39:af:df:1f:ca:ba:78:8e:46:b2:9f:87:c6:58:7d: 4a:74:f3:61 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQrUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAzMDA3MTkxMFoXDTI2MTAzMDAxMjE0OFowMzEx MC8GA1UEAxMoN0M2RDg1RUI2MDMxQTFDQTk4QzI4QjNCQzYxQTk4MkZBREM3Rjg0 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDSiPGWoKuU/Bcjzd12 xOlLqq3aBpsb9TF09St28uLQufwNHjRD86DRb9BSJJthQUT2hJndxV2XixoVYlhq 3vdEuzsZ+v/n4ji8KxYEvuPmakvKytnQPXH4qkXdSh3INGSRwjJAy8yRp2SND+Df QrUUZSQg/Uh4Iv5IK37yV2fyQINHdyPVYtK/Lz/3jQmP7CW13k7lQL0/aRGTqGJe Tc+E4OEZoc507ZZCPaEjRZJkljmrVKo334UZ2QZ7vY9CvBHcikJUdjxj1KYLSYXj 7yxCG/8pT18HhFa2WXc/xyS2kcYQhXshi5ZKKO2esGt/QLFQE63xKZD7AJCTrJ9C mUkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR8bYXrYDGhypjCizvGGpgvrcf4SjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDA4L2ZHMkY2MkF4b2NxWXdvczd4aHFZTDYzSC1Fby5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/HYwDQYJKoZIhvcNAQELBQAD ggEBABdqpBG18Pf7cFDa1a158iUjJN56e/WsrKrjHQVXXXrPgXaziER/kCVY3OcD sDEhCCG6EvA5OTd6DCcFnttpcpBmBBhzWJh6rFyuUz31g1PpC3/nyVveG4SnOAVv yoIvn3MNAeCAhhRuZuVy+xKdTgQA58KvSO84MOv0cGQyz/tLp1F1P27t/DqFB6nx ILKc+Sw1ZA7RPpUkhhcaRpdP06581JsHeEkT5WAzPc/6diLFHDZazEYvzVXdpQ0z w/6fHv0bcOrZXWI8RMHJpaefNA9hTfTl6aq3G5ASoCIVlzKAW0IPrYx5QkH69v3n /Dmv3x/KuniORrKfh8ZYfUp082E= -----END CERTIFICATE-----Generated at Wed Nov 5 16:05:12 2025 by rpki-client