$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/cgA7ZqRsigeu_fvVZhYXSr8XXyA.cer File: cgA7ZqRsigeu_fvVZhYXSr8XXyA.cer (raw, json) Hash identifier: CsnT6JEgQDI/83wcleBsFOe4A9yckJZC2jAF8XJTVcA= Subject key identifier: 72:00:3B:66:A4:6C:8A:07:AE:FD:FB:D5:66:16:17:4A:BF:17:5F:20 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 40F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 11 Sep 2025 19:34:30 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.250.102.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16633 (0x40f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 11 19:34:30 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=72003B66A46C8A07AEFDFBD56616174ABF175F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:4c:2b:bf:05:5d:ce:35:78:02:d4:65:b2: 0e:d8:a2:99:64:dc:05:34:4e:b7:c8:4f:b3:0a:37: 5a:0d:24:6f:3e:62:80:d3:a5:bb:b9:97:5d:c7:6a: 05:7c:33:8c:ff:61:af:4d:47:5b:61:a3:08:62:b2: 44:c3:76:b8:5b:50:f5:43:2d:42:a5:af:e6:23:a9: 85:5b:69:d8:e4:6a:78:07:ce:65:42:a2:a3:21:72: 46:5e:5d:13:f2:4c:30:69:fb:9a:5c:88:0d:a3:8b: 29:5e:50:dd:20:00:44:04:40:1a:0d:fa:fc:59:65: 17:76:27:82:2a:31:5e:58:55:95:d0:83:d7:a0:d1: c6:e3:53:4e:10:42:20:ac:1a:c1:6f:31:c2:61:50: cb:38:0d:3d:2f:c6:15:35:ce:d8:f4:17:cc:cf:fa: 89:90:8c:42:be:d8:79:84:e4:fe:d7:3a:5a:52:07: f6:8f:ae:99:3f:25:9a:e8:95:7a:ff:3d:57:45:1a: 80:aa:ae:6c:c2:f4:89:56:69:da:d6:aa:09:fd:2a: 54:53:d6:f3:01:c0:af:c1:75:79:92:3a:9d:1a:ba: 62:38:cd:9e:8c:f0:90:aa:b2:fa:75:87:8b:4a:c1: 0c:d7:e4:a7:20:b4:be:5f:61:aa:ab:3a:c4:2f:56: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:00:3B:66:A4:6C:8A:07:AE:FD:FB:D5:66:16:17:4A:BF:17:5F:20 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.102.0/23 Signature Algorithm: sha256WithRSAEncryption 30:a8:2e:25:55:45:49:d7:00:b4:c2:3a:08:2f:6e:a5:f1:9a: 59:3f:04:36:d2:91:98:76:54:9e:99:50:ff:7a:16:ad:e9:be: 97:30:10:fe:e6:de:17:4a:13:fb:a7:97:34:1b:36:c5:22:d8: cf:6c:ac:d9:fc:10:ac:d6:1a:57:91:56:04:f6:1e:e4:17:78: 01:21:74:c8:89:05:13:4e:eb:9e:b3:c7:ec:25:9a:6f:83:53: ee:36:70:7f:87:db:0b:e9:9b:e5:bb:ee:c6:5f:f1:11:23:54: 4a:14:03:fb:e1:48:97:65:42:7e:ee:83:3c:4b:d9:b5:c0:07: 69:fb:d3:92:bc:6f:8c:17:44:88:82:02:2e:7b:f4:ef:47:19: 45:7d:68:a9:c4:d9:74:16:7d:7c:de:49:97:96:6e:46:3d:12: de:84:5b:69:6e:81:af:11:3a:eb:90:d3:51:06:a0:fe:76:a4: 25:6c:50:95:be:7b:6c:23:c4:b8:42:40:b6:2f:ab:dd:32:b9: 3c:07:72:9a:20:d8:65:86:04:e6:90:ee:6d:5e:56:d3:e6:c0: cd:80:2d:17:61:e5:a1:88:fe:ca:af:b7:21:b4:44:1c:d6:bf: df:0a:94:e6:ea:21:35:cf:85:6d:87:65:15:4b:47:64:15:6e: b0:34:16:31 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQPkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDkxMTE5MzQzMFoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoNzIwMDNCNjZBNDZDOEEwN0FFRkRGQkQ1NjYxNjE3NEFCRjE3NUYy MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALVTTCu/BV3ONXgC1GWy DtiimWTcBTROt8hPswo3Wg0kbz5igNOlu7mXXcdqBXwzjP9hr01HW2GjCGKyRMN2 uFtQ9UMtQqWv5iOphVtp2ORqeAfOZUKioyFyRl5dE/JMMGn7mlyIDaOLKV5Q3SAA RARAGg36/FllF3YngioxXlhVldCD16DRxuNTThBCIKwawW8xwmFQyzgNPS/GFTXO 2PQXzM/6iZCMQr7YeYTk/tc6WlIH9o+umT8lmuiVev89V0UagKqubML0iVZp2taq Cf0qVFPW8wHAr8F1eZI6nRq6YjjNnozwkKqy+nWHi0rBDNfkpyC0vl9hqqs6xC9W R6UCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRyADtmpGyKB679+9VmFhdKvxdfIDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzMwL2NnQTdacVJzaWdldV9mdlZaaFlYU3I4WFh5QS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+mYwDQYJKoZIhvcNAQELBQAD ggEBADCoLiVVRUnXALTCOggvbqXxmlk/BDbSkZh2VJ6ZUP96Fq3pvpcwEP7m3hdK E/unlzQbNsUi2M9srNn8EKzWGleRVgT2HuQXeAEhdMiJBRNO656zx+wlmm+DU+42 cH+H2wvpm+W77sZf8REjVEoUA/vhSJdlQn7ugzxL2bXAB2n705K8b4wXRIiCAi57 9O9HGUV9aKnE2XQWfXzeSZeWbkY9Et6EW2luga8ROuuQ01EGoP52pCVsUJW+e2wj xLhCQLYvq90yuTwHcpog2GWGBOaQ7m1eVtPmwM2ALRdh5aGI/sqvtyG0RBzWv98K lObqITXPhW2HZRVLR2QVbrA0FjE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:38:08 2025 by rpki-client