$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer (raw, json) Hash identifier: k/d7Q1BlImORA1MQEg0JZvCnkkaPsQ8Hmvh+y2t6xmE= Subject key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 401F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:19:05 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.250.90.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16415 (0x401f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:19:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:72:7c:ec:90:0e:db:fa:17:b7:76:b6:08: ab:1d:26:cb:65:8f:f7:a1:33:ea:54:9e:55:41:f4: 75:87:4d:5a:ad:61:41:4b:a7:20:98:8e:12:6d:c1: 0e:b1:89:2d:3b:56:59:e0:91:74:d3:23:98:bd:72: 41:73:17:66:9c:09:fd:b0:25:64:49:b2:05:72:e9: fe:e2:42:43:b4:36:c9:cb:3e:a6:8f:ae:b4:95:3e: ca:c2:55:b7:a2:74:14:24:1f:5f:1e:72:40:72:64: f5:13:b6:91:ec:8f:8b:cd:70:ee:3b:b3:40:be:38: fa:2b:4d:bf:31:95:ed:e3:ad:05:88:57:06:68:36: 89:86:3d:90:5f:8c:04:22:90:54:3d:49:30:6a:33: 2a:f7:e9:ba:82:f0:2a:51:6b:0e:0a:72:18:52:cc: f9:69:32:aa:10:cf:6e:98:7e:10:de:e5:e2:35:45: e5:b9:fe:68:1e:2a:bf:2d:ee:70:dc:7e:56:fb:02: 6a:09:f1:46:ac:6b:f7:d5:36:c2:7e:0f:69:a0:33: f5:c3:c6:17:e6:05:91:a4:64:c3:e2:c5:c2:2a:4b: 10:0d:46:cf:a3:18:e5:93:1e:d2:b9:a1:7c:08:78: 0b:bd:6b:13:4f:4d:8c:dc:2c:32:37:0a:fc:63:cf: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.90.0/23 Signature Algorithm: sha256WithRSAEncryption 48:a7:d9:f8:e9:c0:49:ec:ff:d9:80:ad:3a:dc:e4:35:5e:52: 33:54:d9:84:f1:96:2a:bd:86:30:ea:bb:64:eb:9c:1f:97:f1: fe:ea:ef:c6:49:69:d6:d2:3a:0f:6e:b7:5d:f9:76:06:87:ac: 42:7c:92:f5:bc:2a:be:70:14:7d:87:35:9f:ee:50:f7:0c:52: 5b:0b:b4:cb:c4:69:54:33:53:26:88:28:3e:c0:2a:21:c8:39: 44:b8:5e:07:91:e0:51:3f:e6:41:1a:e9:98:0a:f3:65:2e:de: 2a:82:05:82:c9:95:4d:a6:aa:61:8a:e9:d9:19:46:43:de:6f: 38:44:13:a4:b6:bc:e3:28:8b:e8:6d:c9:6d:f8:11:1d:36:f9: 07:a3:6b:6e:a1:3a:d5:dd:aa:9b:28:3d:ae:97:93:c8:ff:ec: 09:f3:ec:ab:38:29:db:3f:78:ca:2c:a4:f7:ed:45:47:f9:8c: 1d:2d:48:48:73:ec:a4:68:7a:d9:d3:78:bf:27:7b:03:78:b5: 38:89:54:1e:85:44:22:2a:63:33:7f:9a:91:58:95:6e:54:f6: 10:d2:49:46:33:48:72:4d:99:55:8b:ff:2a:e8:56:42:5f:7a: be:09:7f:ef:1a:17:ff:90:30:73:e1:76:44:ea:0e:08:0c:1e: 92:b0:cd:89 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQB8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTkwNVoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoN0U0MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZC NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/pcnzskA7b+he3drYI qx0my2WP96Ez6lSeVUH0dYdNWq1hQUunIJiOEm3BDrGJLTtWWeCRdNMjmL1yQXMX ZpwJ/bAlZEmyBXLp/uJCQ7Q2ycs+po+utJU+ysJVt6J0FCQfXx5yQHJk9RO2keyP i81w7juzQL44+itNvzGV7eOtBYhXBmg2iYY9kF+MBCKQVD1JMGozKvfpuoLwKlFr DgpyGFLM+WkyqhDPbph+EN7l4jVF5bn+aB4qvy3ucNx+VvsCagnxRqxr99U2wn4P aaAz9cPGF+YFkaRkw+LFwipLEA1Gz6MY5ZMe0rmhfAh4C71rE09NjNwsMjcK/GPP x8cCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR+QDuVILQkZEPT64f/GsxpngTftjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzMyL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+lowDQYJKoZIhvcNAQELBQAD ggEBAEin2fjpwEns/9mArTrc5DVeUjNU2YTxliq9hjDqu2TrnB+X8f7q78ZJadbS Og9ut135dgaHrEJ8kvW8Kr5wFH2HNZ/uUPcMUlsLtMvEaVQzUyaIKD7AKiHIOUS4 XgeR4FE/5kEa6ZgK82Uu3iqCBYLJlU2mqmGK6dkZRkPebzhEE6S2vOMoi+htyW34 ER02+Qeja26hOtXdqpsoPa6Xk8j/7Anz7Ks4Kds/eMospPftRUf5jB0tSEhz7KRo etnTeL8newN4tTiJVB6FRCIqYzN/mpFYlW5U9hDSSUYzSHJNmVWL/yroVkJfer4J f+8aF/+QMHPhdkTqDggMHpKwzYk= -----END CERTIFICATE-----Generated at Mon Aug 11 13:05:40 2025 by rpki-client