$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer File: fgidRjtgd0CTGkB3zrNM010DlrM.cer (raw, json) Hash identifier: v5cT/u/Lqau/7Yi0w14qHRqJfkMxNiDTmxSFlzhtuGc= Subject key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:15 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2401:3c20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57925 (0xe245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:10:15 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7E089D463B607740931A4077CEB34CD35D0396B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:91:cf:e9:bf:d3:2e:e4:9f:00:d8:bc:3f: d5:d3:33:0a:43:7c:53:d4:f4:fc:72:b8:ae:ac:3d: b7:ce:ff:94:1a:63:27:e0:c0:e7:8e:e5:b5:d3:e4: 41:b2:bd:22:5c:bc:ce:48:a2:b1:a4:96:09:33:c0: 34:05:52:b7:e7:19:0d:7c:d1:d1:4d:1a:86:2e:89: 13:4c:48:ee:12:08:5e:ea:d3:b5:3a:9a:88:eb:a5: d0:fa:db:ff:10:2d:ce:59:8e:de:27:31:85:0d:1b: a9:bc:53:3a:dc:be:fb:31:3e:21:fb:81:3a:47:36: 0a:87:62:6c:3e:34:7e:41:2c:ca:22:a0:69:a2:71: 86:da:69:dd:6e:1c:8a:4e:83:9d:a4:e4:11:67:03: d9:9c:54:d7:32:53:1e:fa:1e:9c:a6:dc:3a:8c:0c: 74:91:74:ce:68:4c:a6:8d:0c:3a:ce:c5:dc:55:ae: 3a:dc:c8:78:29:45:89:d4:21:4a:1a:cf:4f:2c:48: d2:18:87:3f:ad:c3:99:25:78:20:1f:c0:da:cf:38: 2a:8e:51:97:99:f4:3b:7e:55:d0:6e:09:d0:bf:dc: 2f:cc:d0:9f:7a:a8:d1:d2:bd:74:c7:3b:66:98:32: 1a:95:ce:d0:be:2f:37:80:6c:28:58:e6:85:3f:d9: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3c20::/32 Signature Algorithm: sha256WithRSAEncryption 76:95:e5:02:49:f1:d1:d1:7e:bb:46:27:74:ad:d3:9c:74:2d: 82:82:a7:91:b7:5d:87:3d:54:87:c5:42:8a:7e:d4:09:96:93: 0a:7a:d9:19:35:15:c7:26:8b:56:04:0b:80:ad:f2:40:e1:f8: 1f:00:5f:80:0c:d7:df:ae:f1:45:ec:af:46:99:be:77:57:c1: a8:8e:ea:75:fe:42:e9:19:a6:c0:87:70:b0:22:26:ee:3c:3f: 6c:3d:18:de:c8:4d:89:79:5f:1d:e9:c8:f6:90:fb:f7:81:32: 7c:76:2b:8c:58:23:9d:f0:b3:a1:09:d9:f2:79:fa:2c:92:f6: e4:4e:45:23:6c:35:d7:f8:bf:01:9b:7c:27:0d:22:cf:61:46: 07:23:14:c4:5e:9c:59:e2:88:21:4a:66:46:00:9d:e2:6b:df: 9a:fe:ba:62:d5:08:02:e5:e5:b4:99:d1:a1:7c:b8:3f:bb:0c: 89:b6:93:4e:b5:6e:fd:e8:87:90:e2:7c:f1:fb:84:a0:5f:fa: d2:1c:93:e2:c4:fb:de:f4:9c:be:31:a9:7c:5c:b6:2e:85:12: 57:51:3c:a9:e7:17:aa:40:07:e3:90:c2:d7:48:e6:14:c9:3c: d0:ee:98:e0:cc:74:07:81:71:83:12:ee:fb:8e:2d:9a:3b:f8: 00:8c:23:6c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOJFMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEwMTVaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDdFMDg5RDQ2M0I2MDc3NDA5MzFBNDA3N0NFQjM0Q0QzNUQwMzk2 QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlpHP6b/TLuSfANi8 P9XTMwpDfFPU9PxyuK6sPbfO/5QaYyfgwOeO5bXT5EGyvSJcvM5IorGklgkzwDQF UrfnGQ180dFNGoYuiRNMSO4SCF7q07U6mojrpdD62/8QLc5Zjt4nMYUNG6m8Uzrc vvsxPiH7gTpHNgqHYmw+NH5BLMoioGmicYbaad1uHIpOg52k5BFnA9mcVNcyUx76 Hpym3DqMDHSRdM5oTKaNDDrOxdxVrjrcyHgpRYnUIUoaz08sSNIYhz+tw5kleCAf wNrPOCqOUZeZ9Dt+VdBuCdC/3C/M0J96qNHSvXTHO2aYMhqVztC+LzeAbChY5oU/ 2Ry9AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUfgidRjtgd0CTGkB3zrNM010DlrMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAE8IDANBgkqhkiG9w0BAQsF AAOCAQEAdpXlAknx0dF+u0YndK3TnHQtgoKnkbddhz1Uh8VCin7UCZaTCnrZGTUV xyaLVgQLgK3yQOH4HwBfgAzX367xReyvRpm+d1fBqI7qdf5C6RmmwIdwsCIm7jw/ bD0Y3shNiXlfHenI9pD794EyfHYrjFgjnfCzoQnZ8nn6LJL25E5FI2w11/i/AZt8 Jw0iz2FGByMUxF6cWeKIIUpmRgCd4mvfmv66YtUIAuXltJnRoXy4P7sMibaTTrVu /eiHkOJ88fuEoF/60hyT4sT73vScvjGpfFy2LoUSV1E8qecXqkAH45DC10jmFMk8 0O6Y4Mx0B4FxgxLu+44tmjv4AIwjbA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:53:06 2025 by rpki-client