$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Z7bHlviRA1kP8cyQcd_kwN84_U0.cer File: Z7bHlviRA1kP8cyQcd_kwN84_U0.cer (raw, json) Hash identifier: RWa/3s/Q4Rb3zIJAw9EchGEjjlkNKyQkwR6E9ZkHpuA= Subject key identifier: 67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4147 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 26 Sep 2025 09:59:00 +0000 Certificate not after: Sat 26 Sep 2026 09:42:00 +0000 Subordinate resources: IP: 140.210.0.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16711 (0x4147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 26 09:59:00 2025 GMT Not After : Sep 26 09:42:00 2026 GMT Subject: CN=67B6C796F89103590FF1CC9071DFE4C0DF38FD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:48:40:68:7c:8a:0b:97:31:b1:ee:51:a9: 12:90:f9:d1:6e:b7:4f:8e:2e:af:54:09:a2:cf:1d: da:17:5c:4e:a5:b6:d4:8a:13:16:47:84:40:13:dc: bd:b0:11:8d:4f:d1:ee:09:8d:84:b9:62:16:ec:8e: 3a:47:10:3b:5e:b0:37:f0:f2:12:3c:55:96:8c:4f: 05:fe:f9:d5:e8:d1:aa:94:a5:c0:3e:ca:db:06:40: 1c:65:88:04:d0:50:fb:b1:ae:0d:2d:f2:b7:43:b1: bd:9a:6e:a1:8d:86:d0:ad:b4:f3:bb:58:d8:43:54: 67:5d:29:1d:bb:8a:62:c1:b1:fa:32:ad:c6:4b:ce: bf:c5:19:8c:be:01:5c:d4:aa:bc:a9:18:9f:71:6b: 61:2c:dc:99:d0:44:03:10:83:31:61:32:a8:28:ec: 41:d9:ea:0f:d8:be:e9:39:25:28:6b:82:02:39:20: 51:65:0a:3d:fa:83:29:2d:35:98:62:67:74:d0:18: 6c:bd:19:a0:98:32:cb:a8:e0:e4:34:85:76:a3:55: a9:76:db:9b:30:34:42:85:23:b3:4d:8d:93:44:75: 6f:de:be:67:5f:93:dd:4f:16:92:28:f2:f2:e7:e6: 29:04:76:0c:f1:25:1e:d7:59:39:52:e3:9f:1a:03: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B6:C7:96:F8:91:03:59:0F:F1:CC:90:71:DF:E4:C0:DF:38:FD:4D X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/Z7bHlviRA1kP8cyQcd_kwN84_U0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.210.0.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:89:7a:e1:a4:a8:62:6c:c9:89:ae:90:41:6a:55:bb:5a:24: 24:fb:79:13:79:b0:b3:c8:40:38:06:47:c3:ff:19:4e:cd:ee: 8b:0b:57:fc:a3:d9:e5:5f:3b:8c:1b:8f:de:35:f3:5f:5e:32: f2:87:43:63:38:04:08:74:79:b0:78:8e:1d:96:4a:2c:5e:e3: a9:cf:fd:61:68:6d:7f:b9:3a:9f:d8:7c:bd:9c:02:31:53:a8: c6:86:f5:aa:1b:77:fd:5d:9d:ff:e0:64:3f:33:65:ad:0f:7a: 7d:ac:be:c7:4a:47:1a:19:55:81:3b:3a:90:40:a5:d8:3f:be: 76:fb:54:9b:b0:e7:82:e9:0d:9d:8e:b0:d2:e3:f4:e4:c9:84: 4c:22:02:78:f5:cc:c8:0c:08:a9:36:f7:0a:67:9d:1d:03:00: 21:c5:3c:92:89:63:7d:9e:29:05:ab:34:3b:7e:9b:77:ff:a5: 2a:e3:4b:3f:92:31:a1:ce:82:2e:ee:b3:6b:f1:40:5f:7a:f6: 97:8f:d9:60:a2:75:33:fa:59:f5:6f:15:1f:53:ea:82:b6:d5: a6:cd:97:e8:34:8f:db:3a:1a:ae:2c:6d:d8:97:1f:3e:7a:cc: fe:f3:a7:17:f3:bf:a6:ba:88:a8:76:61:2a:9b:80:3d:97:cf: fe:45:09:97 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQUcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDkyNjA5NTkwMFoXDTI2MDkyNjA5NDIwMFowMzEx MC8GA1UEAxMoNjdCNkM3OTZGODkxMDM1OTBGRjFDQzkwNzFERkU0QzBERjM4RkQ0 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMm/SEBofIoLlzGx7lGp EpD50W63T44ur1QJos8d2hdcTqW21IoTFkeEQBPcvbARjU/R7gmNhLliFuyOOkcQ O16wN/DyEjxVloxPBf751ejRqpSlwD7K2wZAHGWIBNBQ+7GuDS3yt0OxvZpuoY2G 0K2087tY2ENUZ10pHbuKYsGx+jKtxkvOv8UZjL4BXNSqvKkYn3FrYSzcmdBEAxCD MWEyqCjsQdnqD9i+6TklKGuCAjkgUWUKPfqDKS01mGJndNAYbL0ZoJgyy6jg5DSF dqNVqXbbmzA0QoUjs02Nk0R1b96+Z1+T3U8Wkijy8ufmKQR2DPElHtdZOVLjnxoD f9ECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRntseW+JEDWQ/xzJBx3+TA3zj9TTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzk2L1o3YkhsdmlSQTFrUDhjeVFjZF9rd044NF9VMC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKM0gAwDQYJKoZIhvcNAQELBQAD ggEBAG2JeuGkqGJsyYmukEFqVbtaJCT7eRN5sLPIQDgGR8P/GU7N7osLV/yj2eVf O4wbj941819eMvKHQ2M4BAh0ebB4jh2WSixe46nP/WFobX+5Op/YfL2cAjFTqMaG 9aobd/1dnf/gZD8zZa0Pen2svsdKRxoZVYE7OpBApdg/vnb7VJuw54LpDZ2OsNLj 9OTJhEwiAnj1zMgMCKk29wpnnR0DACHFPJKJY32eKQWrNDt+m3f/pSrjSz+SMaHO gi7us2vxQF969peP2WCidTP6WfVvFR9T6oK21abNl+g0j9s6Gq4sbdiXHz56zP7z pxfzv6a6iKh2YSqbgD2Xz/5FCZc= -----END CERTIFICATE-----Generated at Tue Oct 21 03:25:23 2025 by rpki-client