$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer File: fgidRjtgd0CTGkB3zrNM010DlrM.cer (raw, json) Hash identifier: q2L2u8RDIDciid1j1pF58uWjlBhNrkpGeHgY1G4m6j0= Subject key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D992 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:16:12 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 2401:3c20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 12:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55698 (0xd992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:16:12 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7E089D463B607740931A4077CEB34CD35D0396B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:91:cf:e9:bf:d3:2e:e4:9f:00:d8:bc:3f: d5:d3:33:0a:43:7c:53:d4:f4:fc:72:b8:ae:ac:3d: b7:ce:ff:94:1a:63:27:e0:c0:e7:8e:e5:b5:d3:e4: 41:b2:bd:22:5c:bc:ce:48:a2:b1:a4:96:09:33:c0: 34:05:52:b7:e7:19:0d:7c:d1:d1:4d:1a:86:2e:89: 13:4c:48:ee:12:08:5e:ea:d3:b5:3a:9a:88:eb:a5: d0:fa:db:ff:10:2d:ce:59:8e:de:27:31:85:0d:1b: a9:bc:53:3a:dc:be:fb:31:3e:21:fb:81:3a:47:36: 0a:87:62:6c:3e:34:7e:41:2c:ca:22:a0:69:a2:71: 86:da:69:dd:6e:1c:8a:4e:83:9d:a4:e4:11:67:03: d9:9c:54:d7:32:53:1e:fa:1e:9c:a6:dc:3a:8c:0c: 74:91:74:ce:68:4c:a6:8d:0c:3a:ce:c5:dc:55:ae: 3a:dc:c8:78:29:45:89:d4:21:4a:1a:cf:4f:2c:48: d2:18:87:3f:ad:c3:99:25:78:20:1f:c0:da:cf:38: 2a:8e:51:97:99:f4:3b:7e:55:d0:6e:09:d0:bf:dc: 2f:cc:d0:9f:7a:a8:d1:d2:bd:74:c7:3b:66:98:32: 1a:95:ce:d0:be:2f:37:80:6c:28:58:e6:85:3f:d9: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3c20::/32 Signature Algorithm: sha256WithRSAEncryption 4c:97:0a:1f:78:5c:52:0a:b2:6e:d9:8d:2f:09:ed:48:78:28: 9d:df:18:5c:21:64:b0:8b:73:c8:ea:5e:b8:03:a9:96:3e:43: 34:6a:2f:a1:11:c7:f2:c5:77:a0:40:50:c4:79:fd:ef:ba:30: 02:ad:2c:31:b5:7e:6a:50:b8:7a:3f:3b:75:b1:73:a8:ab:fb: 2e:5b:c5:c7:5e:e0:c3:5a:49:07:c8:1b:5c:86:24:60:b3:66: aa:89:9e:dc:60:2f:2c:48:a4:d5:ef:95:1c:f9:fe:af:1f:fc: 06:0e:44:c8:e3:1e:51:d3:13:3c:06:1c:45:d2:bf:73:44:e1: 8a:85:9c:12:9e:33:41:a3:0d:1c:33:34:d5:28:35:2a:80:af: 39:e0:06:d3:87:25:41:44:a2:02:f2:4e:cb:f6:a7:3f:c6:db: 68:75:59:89:5a:98:d8:f4:45:98:62:5f:fa:c4:5e:aa:4f:1f: 04:ec:22:20:d8:3a:37:a1:7d:72:af:56:d9:8d:d6:1f:f8:cf: 58:b1:1a:b7:9b:cd:7c:b6:5d:3e:67:a5:4a:2b:ab:57:0d:d4: cd:18:66:6f:67:c8:28:e7:62:01:09:0d:c1:d3:b3:29:7d:7c: 70:f1:1e:bf:88:c7:4c:0e:73:cd:e6:49:11:38:12:11:75:93: 32:c3:e3:2a -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANmSMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE2MTJaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDdFMDg5RDQ2M0I2MDc3NDA5MzFBNDA3N0NFQjM0Q0QzNUQwMzk2 QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlpHP6b/TLuSfANi8 P9XTMwpDfFPU9PxyuK6sPbfO/5QaYyfgwOeO5bXT5EGyvSJcvM5IorGklgkzwDQF UrfnGQ180dFNGoYuiRNMSO4SCF7q07U6mojrpdD62/8QLc5Zjt4nMYUNG6m8Uzrc vvsxPiH7gTpHNgqHYmw+NH5BLMoioGmicYbaad1uHIpOg52k5BFnA9mcVNcyUx76 Hpym3DqMDHSRdM5oTKaNDDrOxdxVrjrcyHgpRYnUIUoaz08sSNIYhz+tw5kleCAf wNrPOCqOUZeZ9Dt+VdBuCdC/3C/M0J96qNHSvXTHO2aYMhqVztC+LzeAbChY5oU/ 2Ry9AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUfgidRjtgd0CTGkB3zrNM010DlrMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAE8IDANBgkqhkiG9w0BAQsF AAOCAQEATJcKH3hcUgqybtmNLwntSHgond8YXCFksItzyOpeuAOplj5DNGovoRHH 8sV3oEBQxHn977owAq0sMbV+alC4ej87dbFzqKv7LlvFx17gw1pJB8gbXIYkYLNm qome3GAvLEik1e+VHPn+rx/8Bg5EyOMeUdMTPAYcRdK/c0ThioWcEp4zQaMNHDM0 1Sg1KoCvOeAG04clQUSiAvJOy/anP8bbaHVZiVqY2PRFmGJf+sReqk8fBOwiINg6 N6F9cq9W2Y3WH/jPWLEat5vNfLZdPmelSiurVw3UzRhmb2fIKOdiAQkNwdOzKX18 cPEev4jHTA5zzeZJETgSEXWTMsPjKg== -----END CERTIFICATE-----Generated at Wed Aug 13 08:06:15 2025 by rpki-client