$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/57-wC4BEeBqV6l72MeBDsLOl7Cg.cer File: 57-wC4BEeBqV6l72MeBDsLOl7Cg.cer (raw, json) Hash identifier: 2pZGpqp2YMK4azZJYMYLjlq/5bvFum4ADQ/aYw7cegU= Subject key identifier: E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 425B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:12:07 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 157.66.88.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16987 (0x425b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:12:07 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E7BFB00B8044781A95EA5EF631E043B0B3A5EC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:ae:af:b3:69:7b:f6:79:8e:1f:62:4e:53: 79:74:26:e9:7a:29:13:95:4b:a6:5e:31:ae:5a:e9: 95:3a:53:0e:44:60:82:5d:50:bd:c5:d3:f7:ef:ad: 46:49:32:9b:0e:97:b9:50:95:74:d1:68:f1:fd:40: d3:28:f5:a4:b5:b1:26:ff:2f:dc:da:a3:11:ae:e0: 23:51:07:af:0f:e9:9a:68:df:b1:3b:a6:40:9c:23: 66:f7:49:50:d8:ea:6d:d8:e9:96:52:6e:85:b3:12: 12:4a:ab:9a:09:ff:af:4b:a2:ed:56:6b:44:f1:07: 9d:f9:31:88:ed:f8:37:91:f6:7d:69:14:ed:ac:56: c8:ce:55:f2:8c:a9:59:82:87:e9:a4:3b:61:c1:31: 5a:e5:a7:38:58:c4:cd:52:bf:db:7b:ad:d9:7a:ea: b1:5c:4f:b1:15:28:76:36:d3:f7:e7:94:cf:fa:b9: de:60:1c:ff:1b:2c:1a:1c:6c:20:3f:92:c5:7a:0a: d4:0d:36:77:cd:90:49:6a:7f:2e:96:bb:94:2f:05: 51:39:21:a2:1e:13:f3:e6:f7:e7:0f:25:fe:cc:16: 07:4a:20:2a:7a:9b:0b:00:d3:62:f2:ec:01:a5:9f: 29:91:5b:21:c1:34:eb:4e:f5:68:bf:43:7c:cb:45: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.88.0/23 Signature Algorithm: sha256WithRSAEncryption 61:5a:64:3d:42:7c:11:7d:25:5d:47:2e:75:7c:de:86:20:7a: d3:e3:b5:4a:7d:2e:72:86:80:95:8b:37:cf:b8:82:a0:94:8a: d8:ed:59:6d:c6:28:fc:5a:fa:16:b6:43:69:3a:43:32:3e:2c: 8c:5c:cf:d7:a2:62:5b:71:1a:c7:56:eb:db:90:dd:1e:f4:8b: 9a:44:6d:dc:05:dc:c3:cb:5b:8e:38:f6:6b:b4:44:fc:d5:6e: a5:41:74:d3:ab:35:86:02:99:56:bc:b6:77:11:30:23:a7:c5: 88:f6:87:9c:ff:cb:28:fa:d8:80:14:04:83:e6:3e:ab:86:62: 68:37:52:69:0c:3e:2d:e9:32:7b:1d:a4:e2:eb:96:e7:89:2c: 0a:8a:52:cc:f5:c7:81:83:00:41:71:2c:ed:b5:97:eb:32:00: 1f:e5:68:34:cb:31:79:ae:97:d4:30:50:76:08:b1:19:c2:07: 75:3f:c3:9f:c1:45:64:f4:e6:40:eb:f7:8c:77:13:c9:8b:2c: cb:cb:b6:84:67:6d:73:a8:d5:c3:11:a7:aa:d4:ad:71:10:b6: 55:ba:e6:24:16:05:6e:b2:09:d3:b1:18:29:a4:c7:b7:31:ae: 01:97:12:33:f4:e1:4a:de:aa:1c:57:d2:05:e1:c3:d0:2b:74: f5:8c:da:db -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQlswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMTIwN1oXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoRTdCRkIwMEI4MDQ0NzgxQTk1RUE1RUY2MzFFMDQzQjBCM0E1RUMy ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJIrq+zaXv2eY4fYk5T eXQm6XopE5VLpl4xrlrplTpTDkRggl1QvcXT9++tRkkymw6XuVCVdNFo8f1A0yj1 pLWxJv8v3NqjEa7gI1EHrw/pmmjfsTumQJwjZvdJUNjqbdjpllJuhbMSEkqrmgn/ r0ui7VZrRPEHnfkxiO34N5H2fWkU7axWyM5V8oypWYKH6aQ7YcExWuWnOFjEzVK/ 23ut2XrqsVxPsRUodjbT9+eUz/q53mAc/xssGhxsID+SxXoK1A02d82QSWp/Lpa7 lC8FUTkhoh4T8+b35w8l/swWB0ogKnqbCwDTYvLsAaWfKZFbIcE06071aL9DfMtF 7McCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTnv7ALgER4GpXqXvYx4EOws6XsKDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjc2LzU3LXdDNEJFZUJxVjZsNzJNZUJEc0xPbDdDZy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQlgwDQYJKoZIhvcNAQELBQAD ggEBAGFaZD1CfBF9JV1HLnV83oYgetPjtUp9LnKGgJWLN8+4gqCUitjtWW3GKPxa +ha2Q2k6QzI+LIxcz9eiYltxGsdW69uQ3R70i5pEbdwF3MPLW4449mu0RPzVbqVB dNOrNYYCmVa8tncRMCOnxYj2h5z/yyj62IAUBIPmPquGYmg3UmkMPi3pMnsdpOLr lueJLAqKUsz1x4GDAEFxLO21l+syAB/laDTLMXmul9QwUHYIsRnCB3U/w5/BRWT0 5kDr94x3E8mLLMvLtoRnbXOo1cMRp6rUrXEQtlW65iQWBW6yCdOxGCmkx7cxrgGX EjP04UreqhxX0gXhw9ArdPWM2ts= -----END CERTIFICATE-----Generated at Fri Oct 24 08:50:37 2025 by rpki-client