$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer File: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer (raw, json) Hash identifier: 4ItbkKnhPZ8Xa4cBK09/xmQkaeXwfYb61bwDRnxVvpU= Subject key identifier: 08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 420D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:07:42 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 157.66.244.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16909 (0x420d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:07:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0812172AA74AF852C0F5A7787B64825FE5619361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:c9:ac:a4:10:cf:c4:49:51:b2:59:65:ec: a2:9e:7a:7f:62:9f:bf:37:95:f1:57:38:fa:1d:ea: 70:ce:ed:91:63:f5:33:aa:a3:eb:0a:3c:ba:7e:53: 9b:fa:78:33:bb:1d:3d:0d:e0:62:9b:00:4b:56:44: ee:f4:73:99:05:47:6e:a2:fd:51:b8:53:56:98:a2: 4a:a6:ba:57:69:6d:18:8f:72:76:ca:13:44:f1:d5: b4:14:41:ee:dc:b1:61:e8:98:07:73:9a:3f:d7:a5: bc:a5:35:49:5a:b3:cf:41:f2:88:45:51:09:6a:b7: c0:4c:3d:f6:29:e0:4e:d1:75:ee:a7:bd:5b:b3:3a: 51:3d:7c:81:b6:77:66:b5:97:f9:be:2f:d6:d1:5e: 86:99:dd:b0:59:ad:d6:81:4d:47:53:cd:e4:aa:a8: 6c:e0:8a:9a:0f:cd:af:e8:bf:d4:b0:f4:f7:94:ea: a8:8a:a9:bc:dd:50:f2:7d:d6:41:4b:8a:eb:16:30: 76:f1:59:57:9e:a6:4b:04:23:f6:94:0d:d0:9f:e4: 91:26:90:f5:43:88:f3:75:49:90:45:af:b9:aa:78: 74:b6:aa:bc:a4:c5:36:48:f7:ba:cd:0f:5d:87:8c: 87:a9:c0:ac:76:65:ab:c5:fc:9a:71:fe:8a:9e:73: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.244.0/23 Signature Algorithm: sha256WithRSAEncryption 65:4d:eb:ab:42:aa:2c:24:2e:ac:97:f9:0b:2b:e9:74:c9:85: ef:ee:33:eb:e9:c0:31:6b:04:79:2c:56:66:1c:6a:e0:da:ae: 20:42:f6:95:0f:d2:b4:03:f1:a8:99:e9:c6:15:fc:6c:df:84: 38:8a:e3:9d:c8:92:d7:0e:9c:22:b5:24:a9:02:da:8e:c5:22: ef:0d:d2:77:b7:b3:35:99:61:d9:f5:aa:df:d4:84:98:34:12: 4a:48:47:44:1f:f8:7a:59:7e:32:d3:81:7d:44:19:43:12:7f: bf:13:ad:5f:ea:5d:f3:f9:a2:00:8a:b1:b9:87:b0:89:46:c0: 53:12:28:f6:ea:68:ed:14:21:a5:91:dd:74:f7:7b:df:60:a6: e8:11:77:a6:62:70:88:48:c2:1e:e0:2b:68:8c:ac:ce:ce:2d: fd:2b:80:c7:67:27:6f:ea:86:09:67:58:9d:a4:cd:03:7b:ca: 8f:dd:c5:01:c0:9e:ac:58:9f:74:95:c2:4f:f0:71:31:14:b7: 34:25:5b:89:f5:77:6b:39:46:c5:10:b5:0f:9f:f0:fe:bd:75: 13:63:d2:bd:7a:2b:26:92:23:0e:93:bb:c8:dc:a0:42:36:c2: 56:4f:ae:b9:e9:0e:6b:c2:95:29:25:59:ff:86:8a:6e:9a:01: f8:47:91:4c -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQg0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMDc0MloXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoMDgxMjE3MkFBNzRBRjg1MkMwRjVBNzc4N0I2NDgyNUZFNTYxOTM2 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMNByaykEM/ESVGyWWXs op56f2KfvzeV8Vc4+h3qcM7tkWP1M6qj6wo8un5Tm/p4M7sdPQ3gYpsAS1ZE7vRz mQVHbqL9UbhTVpiiSqa6V2ltGI9ydsoTRPHVtBRB7tyxYeiYB3OaP9elvKU1SVqz z0HyiEVRCWq3wEw99ingTtF17qe9W7M6UT18gbZ3ZrWX+b4v1tFehpndsFmt1oFN R1PN5KqobOCKmg/Nr+i/1LD095TqqIqpvN1Q8n3WQUuK6xYwdvFZV56mSwQj9pQN 0J/kkSaQ9UOI83VJkEWvuap4dLaqvKTFNkj3us0PXYeMh6nArHZlq8X8mnH+ip5z f3cCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQIEhcqp0r4UsD1p3h7ZIJf5WGTYTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjc5L0NCSVhLcWRLLUZMQTlhZDRlMlNDWC1WaGsyRS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQvQwDQYJKoZIhvcNAQELBQAD ggEBAGVN66tCqiwkLqyX+Qsr6XTJhe/uM+vpwDFrBHksVmYcauDariBC9pUP0rQD 8aiZ6cYV/GzfhDiK453IktcOnCK1JKkC2o7FIu8N0ne3szWZYdn1qt/UhJg0EkpI R0Qf+HpZfjLTgX1EGUMSf78TrV/qXfP5ogCKsbmHsIlGwFMSKPbqaO0UIaWR3XT3 e99gpugRd6ZicIhIwh7gK2iMrM7OLf0rgMdnJ2/qhglnWJ2kzQN7yo/dxQHAnqxY n3SVwk/wcTEUtzQlW4n1d2s5RsUQtQ+f8P69dRNj0r16KyaSIw6Tu8jcoEI2wlZP rrnpDmvClSklWf+Gim6aAfhHkUw= -----END CERTIFICATE-----Generated at Fri Oct 24 08:50:38 2025 by rpki-client