$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer (raw, json) Hash identifier: dvka6iLVzYyeUrlLXvzue5wLJz1x4Iw45nfmJXRXDVY= Subject key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 400F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:18:11 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.187.223.0/24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16399 (0x400f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:18:11 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:ee:63:a1:78:e3:a3:c7:43:c5:17:6b:b0: f7:c7:9f:b2:aa:9e:5f:ea:63:0b:c3:9d:82:04:05: c2:0c:e7:d2:fa:6d:72:3d:e5:13:e7:65:ce:8a:10: 8b:59:63:53:ea:7f:9e:56:61:2a:90:04:1d:91:ce: 8e:58:c8:6b:5b:77:f5:f4:32:54:78:07:68:8c:56: 14:43:ed:c3:e7:b4:4d:3d:c3:ac:72:03:17:27:7f: 8a:da:36:87:22:2d:ce:59:63:d8:d5:33:5f:11:66: ad:dc:86:d6:f3:a4:11:ca:10:cc:59:3c:2c:bb:fd: 85:3b:2d:f6:a4:9e:be:16:28:cb:b8:71:c8:59:aa: 06:3f:40:f2:20:fc:0a:12:26:1c:7f:0b:14:07:9f: 22:f8:2d:00:21:bd:ea:c9:59:85:98:28:b7:16:fb: 18:81:64:7e:e3:5d:da:cb:1a:63:92:9b:ad:0d:a5: 0b:b1:09:ea:f8:ad:d7:c6:71:69:6f:ed:67:31:d3: 4b:86:91:4d:56:91:27:5c:e3:31:98:58:f2:9a:cd: 73:eb:bb:55:66:fe:bb:ce:91:5f:3b:f2:24:88:01: 95:a8:d0:c0:9e:e4:cc:c1:18:cd:be:39:71:03:29: 2c:94:78:67:cb:f9:99:06:ec:84:0e:0c:77:8b:a3: 44:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.223.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ac:2d:91:cb:84:57:11:9f:7f:c8:77:7b:d2:4a:b3:1e:ba: 17:dd:46:ba:23:01:83:2e:5b:8e:37:91:cc:a6:6e:d2:01:03: e3:6b:04:d3:5c:73:e6:84:b2:6d:12:63:94:96:de:a1:d3:ff: 88:88:03:ec:09:81:f1:41:90:0e:db:11:17:45:18:12:ba:c3: 69:e9:bd:0a:7f:eb:f3:28:fa:41:12:5c:43:44:19:48:ce:04: 0c:12:ed:77:87:ad:ea:15:a8:ab:f3:2b:e9:fa:67:96:d1:ad: 6d:74:68:8e:78:71:b6:2b:43:88:3f:c3:44:a2:8c:a7:d6:f1: 13:a1:a1:83:c1:7d:f9:b1:1c:b1:33:72:ac:bd:13:a5:36:98: 84:b0:0b:70:23:bb:fa:a7:da:96:14:ae:df:50:a1:c4:74:e9: a0:12:d7:c9:ed:95:02:ce:3f:79:ef:f2:fd:ad:91:57:ca:af: e0:6a:b4:b6:1b:de:f9:3a:50:f7:c8:84:ad:11:94:70:73:df: eb:ce:08:55:32:bd:d9:94:8b:15:f3:06:06:5f:0d:bf:e6:3f: 21:4e:fc:6c:e2:d8:7d:eb:a4:03:fe:69:c3:ea:80:ef:4e:8f: a5:2c:af:30:e3:60:02:b4:4b:32:bc:5b:05:af:5c:e7:72:ae: 09:b3:c1:f8 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQA8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTgxMVoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoQTM4RDVGM0VBNjU0QUQ4QzZENjU0REE1QkU5MDhBNjU4RjI2NkU2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSE7mOheOOjx0PFF2uw 98efsqqeX+pjC8OdggQFwgzn0vptcj3lE+dlzooQi1ljU+p/nlZhKpAEHZHOjljI a1t39fQyVHgHaIxWFEPtw+e0TT3DrHIDFyd/ito2hyItzllj2NUzXxFmrdyG1vOk EcoQzFk8LLv9hTst9qSevhYoy7hxyFmqBj9A8iD8ChImHH8LFAefIvgtACG96slZ hZgotxb7GIFkfuNd2ssaY5KbrQ2lC7EJ6vit18ZxaW/tZzHTS4aRTVaRJ1zjMZhY 8prNc+u7VWb+u86RXzvyJIgBlajQwJ7kzMEYzb45cQMpLJR4Z8v5mQbshA4Md4uj RMECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSjjV8+plStjG1lTaW+kIpljyZuZDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzE5L280MWZQcVpVcll4dFpVMmx2cENLWlk4bWJtUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu98wDQYJKoZIhvcNAQELBQAD ggEBAFSsLZHLhFcRn3/Id3vSSrMeuhfdRrojAYMuW443kcymbtIBA+NrBNNcc+aE sm0SY5SW3qHT/4iIA+wJgfFBkA7bERdFGBK6w2npvQp/6/Mo+kESXENEGUjOBAwS 7XeHreoVqKvzK+n6Z5bRrW10aI54cbYrQ4g/w0SijKfW8ROhoYPBffmxHLEzcqy9 E6U2mISwC3Aju/qn2pYUrt9QocR06aAS18ntlQLOP3nv8v2tkVfKr+BqtLYb3vk6 UPfIhK0RlHBz3+vOCFUyvdmUixXzBgZfDb/mPyFO/Gzi2H3rpAP+acPqgO9Oj6Us rzDjYAK0SzK8WwWvXOdyrgmzwfg= -----END CERTIFICATE-----Generated at Mon Aug 11 07:36:21 2025 by rpki-client