$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer File: RA0YjgN6sufC2lviztymGqt4xaM.cer (raw, json) Hash identifier: 7BwpQq8X0lVUmJbzfHas6wlmxakKvIAsuKtsnTD4suo= Subject key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4221 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:08:35 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 160.30.196.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16929 (0x4221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:08:35 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:78:64:4f:5f:ff:1d:05:d2:28:4a:1f:22: 01:12:3e:88:89:a9:da:1e:8e:d2:e0:c0:20:83:e2: da:5c:18:76:c4:7d:eb:a0:28:27:28:41:2d:b1:cd: c0:c6:bf:b5:ad:d7:1b:b1:a2:c8:17:a5:3d:d1:cb: b5:fa:ff:8b:3a:af:64:3b:89:28:48:9f:9f:32:33: bb:cc:21:dd:29:8c:cc:f8:d3:b8:a7:51:9c:53:73: dc:23:8d:88:aa:70:43:f6:1e:89:05:52:9d:5c:d5: 97:29:25:be:b2:83:c5:47:e9:c2:c6:b1:cd:14:f0: 0d:98:c2:ab:0e:3a:3d:47:87:80:45:66:e9:49:42: a8:f3:f6:72:b1:52:2c:61:43:70:4d:22:5f:02:0d: 3e:bd:0d:fe:9f:1a:e8:5d:4a:28:c6:d7:ff:89:92: c9:6c:91:76:c4:7e:ff:52:b9:e4:65:0b:1c:8e:11: a9:b0:88:17:6c:43:52:9a:b6:c2:47:65:e0:bf:d6: 85:61:2c:29:af:b3:0f:30:63:77:f3:04:6c:49:fc: 58:3b:9a:76:37:d2:40:d7:a4:f2:fc:93:f0:27:9b: 3c:43:f7:f0:6e:59:f5:10:97:37:de:3a:e0:fe:3d: ff:f4:bb:72:a0:1a:b2:a3:c9:1b:79:ec:10:72:7b: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.196.0/23 Signature Algorithm: sha256WithRSAEncryption 88:25:52:e5:d5:b6:28:ca:78:5f:dd:5f:20:4a:20:78:ef:d8: 48:af:a4:4a:9f:40:b9:22:43:7a:df:37:19:1b:1f:6a:d6:19: 73:3d:fa:0a:ea:b2:6d:56:33:4f:52:92:f0:6d:d6:07:42:2a: 6e:52:9f:d8:45:e2:0c:53:c2:61:8c:2d:b0:a6:4f:e1:0e:85: 8e:d1:31:3f:a5:a3:10:d1:7e:12:de:b6:76:a0:d3:4e:64:ae: f1:ec:25:a8:0e:a6:92:df:14:10:6a:1d:ec:26:b9:22:dc:8e: 7a:5f:67:e8:80:3c:1b:49:4a:85:76:f9:78:c5:2e:21:94:95: 95:75:cb:e2:c8:eb:aa:3a:ea:4a:35:0c:0e:2b:3d:ad:d2:67: af:f1:4c:7e:b9:54:90:ad:f3:f1:47:47:39:99:cb:0e:77:ef: 27:f9:c5:89:0b:e9:3c:0b:5a:4c:f8:ec:f7:1d:00:53:b6:70: c4:d6:e7:b6:30:c1:ec:34:eb:a0:4c:a4:7e:4c:1f:9d:ac:8a: 52:67:5d:38:42:05:08:34:a0:c6:48:23:12:5a:e2:c0:40:a4: 6b:ec:cf:7a:38:4e:13:c4:ab:2a:3a:cc:3a:a7:8f:00:70:85: 60:2c:03:8d:e9:44:d1:b1:11:66:64:99:9a:80:30:54:a2:d8: cb:af:71:0a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQiEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMDgzNVoXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoNDQwRDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVB MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTOeGRPX/8dBdIoSh8i ARI+iImp2h6O0uDAIIPi2lwYdsR966AoJyhBLbHNwMa/ta3XG7GiyBelPdHLtfr/ izqvZDuJKEifnzIzu8wh3SmMzPjTuKdRnFNz3CONiKpwQ/YeiQVSnVzVlyklvrKD xUfpwsaxzRTwDZjCqw46PUeHgEVm6UlCqPP2crFSLGFDcE0iXwINPr0N/p8a6F1K KMbX/4mSyWyRdsR+/1K55GULHI4RqbCIF2xDUpq2wkdl4L/WhWEsKa+zDzBjd/ME bEn8WDuadjfSQNek8vyT8CebPEP38G5Z9RCXN9464P49//S7cqAasqPJG3nsEHJ7 IFcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBREDRiOA3qy58LaW+LO3KYaq3jFozAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzEzL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHsQwDQYJKoZIhvcNAQELBQAD ggEBAIglUuXVtijKeF/dXyBKIHjv2EivpEqfQLkiQ3rfNxkbH2rWGXM9+grqsm1W M09SkvBt1gdCKm5Sn9hF4gxTwmGMLbCmT+EOhY7RMT+loxDRfhLetnag005krvHs JagOppLfFBBqHewmuSLcjnpfZ+iAPBtJSoV2+XjFLiGUlZV1y+LI66o66ko1DA4r Pa3SZ6/xTH65VJCt8/FHRzmZyw537yf5xYkL6TwLWkz47PcdAFO2cMTW57Ywwew0 66BMpH5MH52silJnXThCBQg0oMZIIxJa4sBApGvsz3o4ThPEqyo6zDqnjwBwhWAs A43pRNGxEWZkmZqAMFSi2MuvcQo= -----END CERTIFICATE-----Generated at Fri Oct 24 08:50:39 2025 by rpki-client