$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer (raw, json) Hash identifier: pmxN7BaYcTOXCevGdW4B9nNNO3yJGFUwSRbiH0cxIQk= Subject key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CEF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:16:01 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 160.250.90.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15599 (0x3cef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:16:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:72:7c:ec:90:0e:db:fa:17:b7:76:b6:08: ab:1d:26:cb:65:8f:f7:a1:33:ea:54:9e:55:41:f4: 75:87:4d:5a:ad:61:41:4b:a7:20:98:8e:12:6d:c1: 0e:b1:89:2d:3b:56:59:e0:91:74:d3:23:98:bd:72: 41:73:17:66:9c:09:fd:b0:25:64:49:b2:05:72:e9: fe:e2:42:43:b4:36:c9:cb:3e:a6:8f:ae:b4:95:3e: ca:c2:55:b7:a2:74:14:24:1f:5f:1e:72:40:72:64: f5:13:b6:91:ec:8f:8b:cd:70:ee:3b:b3:40:be:38: fa:2b:4d:bf:31:95:ed:e3:ad:05:88:57:06:68:36: 89:86:3d:90:5f:8c:04:22:90:54:3d:49:30:6a:33: 2a:f7:e9:ba:82:f0:2a:51:6b:0e:0a:72:18:52:cc: f9:69:32:aa:10:cf:6e:98:7e:10:de:e5:e2:35:45: e5:b9:fe:68:1e:2a:bf:2d:ee:70:dc:7e:56:fb:02: 6a:09:f1:46:ac:6b:f7:d5:36:c2:7e:0f:69:a0:33: f5:c3:c6:17:e6:05:91:a4:64:c3:e2:c5:c2:2a:4b: 10:0d:46:cf:a3:18:e5:93:1e:d2:b9:a1:7c:08:78: 0b:bd:6b:13:4f:4d:8c:dc:2c:32:37:0a:fc:63:cf: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.90.0/23 Signature Algorithm: sha256WithRSAEncryption 21:43:54:a9:be:ad:b6:72:49:0f:75:b0:6e:ec:6d:27:82:2f: c8:07:bc:0a:ad:27:2b:a7:64:f1:87:7e:74:12:58:f5:b6:21: 6c:67:3a:1c:7a:41:b2:5b:b0:0f:88:42:56:42:42:c2:5f:39: 56:12:9f:01:33:af:8a:2d:6c:86:8d:86:0f:4d:c9:2a:ee:56: fe:5f:5c:59:45:a5:c1:d3:9d:1c:05:b9:2c:62:98:1d:72:5b: 53:eb:ad:7f:2a:ee:fc:8e:c8:b9:5f:60:5a:6b:06:b7:24:d3: 77:40:27:15:6d:9e:5c:35:05:de:5d:b1:78:15:81:ca:e3:df: a3:56:e6:4d:d6:77:f7:ba:91:3a:ce:cc:94:23:1c:27:b7:4d: a1:a6:98:59:80:69:d1:d6:f0:65:0c:6b:97:da:4e:ee:02:67: b8:76:48:66:99:99:c9:97:76:1b:dc:b1:ba:57:03:31:e8:62: 6c:35:a5:40:57:06:6b:73:95:ad:55:6a:04:cc:08:70:a0:9c: 97:df:a7:1f:0b:75:b1:14:20:82:fc:3d:2b:2f:4c:f8:7c:2f: 46:47:2b:73:c0:34:1c:61:25:2f:ce:6d:98:94:43:07:57:9a: 7d:18:c6:99:f6:92:61:3a:ed:48:80:ac:34:86:64:6e:54:91: 3c:20:49:78 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPO8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTYwMVoXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoN0U0MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZC NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/pcnzskA7b+he3drYI qx0my2WP96Ez6lSeVUH0dYdNWq1hQUunIJiOEm3BDrGJLTtWWeCRdNMjmL1yQXMX ZpwJ/bAlZEmyBXLp/uJCQ7Q2ycs+po+utJU+ysJVt6J0FCQfXx5yQHJk9RO2keyP i81w7juzQL44+itNvzGV7eOtBYhXBmg2iYY9kF+MBCKQVD1JMGozKvfpuoLwKlFr DgpyGFLM+WkyqhDPbph+EN7l4jVF5bn+aB4qvy3ucNx+VvsCagnxRqxr99U2wn4P aaAz9cPGF+YFkaRkw+LFwipLEA1Gz6MY5ZMe0rmhfAh4C71rE09NjNwsMjcK/GPP x8cCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR+QDuVILQkZEPT64f/GsxpngTftjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzMyL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+lowDQYJKoZIhvcNAQELBQAD ggEBACFDVKm+rbZySQ91sG7sbSeCL8gHvAqtJyunZPGHfnQSWPW2IWxnOhx6QbJb sA+IQlZCQsJfOVYSnwEzr4otbIaNhg9NySruVv5fXFlFpcHTnRwFuSximB1yW1Pr rX8q7vyOyLlfYFprBrck03dAJxVtnlw1Bd5dsXgVgcrj36NW5k3Wd/e6kTrOzJQj HCe3TaGmmFmAadHW8GUMa5faTu4CZ7h2SGaZmcmXdhvcsbpXAzHoYmw1pUBXBmtz la1VagTMCHCgnJffpx8LdbEUIIL8PSsvTPh8L0ZHK3PANBxhJS/ObZiUQwdXmn0Y xpn2kmE67UiArDSGZG5UkTwgSXg= -----END CERTIFICATE-----Generated at Sat Apr 26 09:40:32 2025 by rpki-client