$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer File: OCdChXYoqbKyIFmuiEdvIwYL6tA.cer (raw, json) Hash identifier: sUbll4eYHeAr4+xIpxqO0ThOQzHPZbrDl428bcnEKAY= Subject key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4253 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:55 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 160.250.16.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16979 (0x4253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:10:55 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=382742857628A9B2B22059AE88476F23060BEAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:59:6b:e1:83:53:be:01:5f:a6:53:11:c4: b8:19:96:5d:50:19:2f:f7:4f:7b:61:dc:c7:6d:5c: 1d:40:4e:da:57:07:6b:64:a1:e2:d9:7f:29:ec:20: 2d:cf:02:00:8b:10:ea:1e:1c:3e:0f:70:5b:b7:ae: 50:37:32:cf:27:b1:16:42:46:a4:69:06:9c:fa:68: 70:69:e3:30:06:6c:d9:b9:d1:27:73:54:b9:9a:01: d6:07:09:87:ec:11:f7:66:8b:98:c6:eb:d2:ee:90: 73:c3:c7:ed:2d:c8:61:00:f3:d6:54:7a:1a:4d:26: 51:d1:59:cc:58:48:e9:4c:50:aa:63:29:21:74:cf: 04:7c:16:17:19:39:02:5b:e6:50:34:26:ae:67:cc: e0:42:55:fa:95:ce:bf:f6:5d:b8:c9:ab:2c:21:8f: 5f:86:2b:36:66:27:69:e8:2d:4f:3e:49:0c:ed:c5: 2d:16:d8:0f:bb:d6:b5:b6:72:cf:b0:9d:0c:e4:45: d5:d5:13:3c:47:57:9c:f7:ec:ed:ea:08:18:d4:63: 60:49:90:73:4b:52:a0:e5:21:32:fe:90:71:b4:f5: 32:37:7a:c7:87:33:aa:61:6b:98:b4:74:0b:9d:24: 2d:bf:71:66:9e:56:94:37:9a:ec:90:c8:ec:ce:44: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.16.0/23 Signature Algorithm: sha256WithRSAEncryption 45:26:94:60:53:30:91:b6:ca:1e:c6:97:69:88:87:4f:0f:2f: b3:81:0f:24:ee:82:28:6f:2e:b6:25:09:26:94:f9:70:28:65: 67:c4:0a:ab:3c:50:dc:d7:4f:d1:68:b3:09:41:c0:c3:07:66: 8d:c9:33:c5:ac:61:e2:f7:9e:2b:79:f2:6a:d8:ed:8c:af:74: 14:5b:77:f5:40:fe:3f:d1:45:39:9a:72:5b:24:f2:d7:38:9f: 0a:6d:f1:a6:e2:77:2e:46:f4:fa:25:6c:e8:da:4c:fe:91:4e: d1:22:b5:50:2d:f3:56:6d:12:28:e7:1d:a4:48:ef:a8:5e:3f: 5f:22:fc:f6:68:1e:73:14:f1:3d:df:b3:c5:f8:8d:46:12:67: c9:c9:4e:07:c2:74:ff:fe:ab:49:bb:eb:72:a7:d9:b9:c0:47: 62:93:20:fc:e5:b4:b5:60:cf:84:4a:7f:c0:a3:e5:fd:57:5a: ce:c9:f8:8b:75:4a:b6:8a:e7:3f:8f:a4:ef:24:33:31:db:18: ef:86:04:c6:7b:67:08:2a:f4:66:b6:51:82:ee:ae:78:10:77: d6:c8:f7:1c:a2:ba:07:2c:3d:ff:b9:79:13:4a:6d:71:21:8b: e1:fa:0d:8e:ae:3f:b0:50:17:88:3f:19:09:c2:1e:bf:1f:10: f1:53:8d:08 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQlMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMTA1NVoXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoMzgyNzQyODU3NjI4QTlCMkIyMjA1OUFFODg0NzZGMjMwNjBCRUFE MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhmWWvhg1O+AV+mUxHE uBmWXVAZL/dPe2Hcx21cHUBO2lcHa2Sh4tl/KewgLc8CAIsQ6h4cPg9wW7euUDcy zyexFkJGpGkGnPpocGnjMAZs2bnRJ3NUuZoB1gcJh+wR92aLmMbr0u6Qc8PH7S3I YQDz1lR6Gk0mUdFZzFhI6UxQqmMpIXTPBHwWFxk5AlvmUDQmrmfM4EJV+pXOv/Zd uMmrLCGPX4YrNmYnaegtTz5JDO3FLRbYD7vWtbZyz7CdDORF1dUTPEdXnPfs7eoI GNRjYEmQc0tSoOUhMv6QcbT1Mjd6x4czqmFrmLR0C50kLb9xZp5WlDea7JDI7M5E S0ECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ4J0KFdiipsrIgWa6IR28jBgvq0DAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzI4L09DZENoWFlvcWJLeUlGbXVpRWR2SXdZTDZ0QS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+hAwDQYJKoZIhvcNAQELBQAD ggEBAEUmlGBTMJG2yh7Gl2mIh08PL7OBDyTugihvLrYlCSaU+XAoZWfECqs8UNzX T9FoswlBwMMHZo3JM8WsYeL3nit58mrY7YyvdBRbd/VA/j/RRTmaclsk8tc4nwpt 8abidy5G9PolbOjaTP6RTtEitVAt81ZtEijnHaRI76heP18i/PZoHnMU8T3fs8X4 jUYSZ8nJTgfCdP/+q0m763Kn2bnAR2KTIPzltLVgz4RKf8Cj5f1XWs7J+It1SraK 5z+PpO8kMzHbGO+GBMZ7Zwgq9Ga2UYLurngQd9bI9xyiugcsPf+5eRNKbXEhi+H6 DY6uP7BQF4g/GQnCHr8fEPFTjQg= -----END CERTIFICATE-----Generated at Fri Oct 24 08:53:32 2025 by rpki-client