$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_nAIdXwZsXTWXyO81oKhaYJu3Tw.cer File: _nAIdXwZsXTWXyO81oKhaYJu3Tw.cer (raw, json) Hash identifier: K9XUFuIOX0DBWhTCbkcpx9pN+CLXXeK3zxVUmkhTxKs= Subject key identifier: FE:70:08:75:7C:19:B1:74:D6:5F:23:BC:D6:82:A1:69:82:6E:DD:3C Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3EEB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/_nAIdXwZsXTWXyO81oKhaYJu3Tw.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 07 Jul 2025 09:50:46 +0000 Certificate not after: Sat 04 Jul 2026 06:36:56 +0000 Subordinate resources: IP: 165.101.144.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Jul 2025 23:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16107 (0x3eeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jul 7 09:50:46 2025 GMT Not After : Jul 4 06:36:56 2026 GMT Subject: CN=FE7008757C19B174D65F23BCD682A169826EDD3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:27:8f:df:21:5d:39:03:d5:a6:f8:23:9e: 20:e4:1e:52:14:04:c3:1c:de:38:83:2a:89:34:55: 4b:7e:4a:ff:79:5d:3b:3d:b4:e6:9e:d1:d5:55:9a: 6a:8c:c0:f2:6a:72:40:94:0a:e6:10:86:f4:02:79: a5:3a:87:74:92:b9:66:d0:f3:52:1c:b7:36:8a:1f: a1:bd:0c:1d:fa:f1:56:07:bd:ad:18:d8:d7:f2:72: f4:82:03:d3:70:02:cf:c0:7e:a0:1e:63:c1:76:3b: 2d:3a:8a:d8:71:b9:59:73:32:8c:87:bd:44:5b:31: ee:db:b8:fa:f4:73:5c:b5:77:41:9a:7e:15:4c:85: c8:4f:b4:2a:6d:b8:09:a8:58:0b:11:18:85:de:30: 51:5a:fd:31:3b:6c:8c:ea:50:26:06:bf:31:09:e3: 91:af:bc:f7:3e:db:b6:4c:e9:e7:35:a7:3b:28:de: fa:77:85:b2:b8:d2:2a:c2:e1:38:5b:f1:d3:ae:b1: d1:91:6f:88:83:d5:55:39:2c:22:f8:29:3a:8b:9d: ec:39:26:2a:2a:69:44:33:97:1f:37:0d:51:15:a0: 37:1e:6b:fe:f2:ea:b0:c7:f6:c9:58:fe:2d:3c:28: ec:17:b8:49:2f:5f:7e:94:df:a1:1c:fa:28:57:ee: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:70:08:75:7C:19:B1:74:D6:5F:23:BC:D6:82:A1:69:82:6E:DD:3C X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3380/_nAIdXwZsXTWXyO81oKhaYJu3Tw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.144.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:28:5c:13:84:27:63:71:59:36:9d:80:7e:ff:5f:dc:f2:05: 74:9f:8f:47:8f:1c:8f:12:3a:ef:8d:6b:03:d0:8c:13:21:ff: 0a:d6:50:78:f5:83:90:d8:cf:a0:64:ec:16:f3:d7:a2:e0:62: 7a:7b:fd:e2:72:2d:74:9d:21:2f:2f:21:80:6f:9e:c4:9a:e4: 13:11:32:89:45:92:0f:e3:e5:27:f5:c9:e1:bf:ae:c7:6a:61: 8f:88:d7:b3:ae:34:db:d1:56:80:9f:57:49:2f:ac:2a:17:6b: db:58:6e:0e:f7:a6:00:31:ce:82:c7:e8:19:4e:6a:2f:72:d2: 11:28:96:6f:c3:7b:36:7b:51:98:db:96:5f:dc:39:76:91:9f: 67:1d:d4:f6:d7:9b:29:17:fc:6c:5c:c8:88:7a:87:d7:62:5f: 00:3f:f2:dd:5c:89:cb:e6:1d:ee:7c:24:b2:a8:9d:aa:ae:1b: c4:34:6d:c9:11:b1:4a:40:36:20:3e:de:46:4c:5d:04:d6:cb: f1:ce:b1:99:ba:d5:a0:46:a8:5b:c0:cb:53:9b:e0:26:ba:96: 8f:e5:fe:03:13:81:8f:59:32:02:e5:1f:52:65:fe:b0:9b:3f: 68:ea:08:e2:f8:a4:bd:24:66:f6:82:8f:6c:3a:de:fa:a7:58: 65:be:bd:a6 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPuswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDcwNzA5NTA0NloXDTI2MDcwNDA2MzY1NlowMzEx MC8GA1UEAxMoRkU3MDA4NzU3QzE5QjE3NEQ2NUYyM0JDRDY4MkExNjk4MjZFREQz QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMZDJ4/fIV05A9Wm+COe IOQeUhQEwxzeOIMqiTRVS35K/3ldOz205p7R1VWaaozA8mpyQJQK5hCG9AJ5pTqH dJK5ZtDzUhy3Noofob0MHfrxVge9rRjY1/Jy9IID03ACz8B+oB5jwXY7LTqK2HG5 WXMyjIe9RFsx7tu4+vRzXLV3QZp+FUyFyE+0Km24CahYCxEYhd4wUVr9MTtsjOpQ Jga/MQnjka+89z7btkzp5zWnOyje+neFsrjSKsLhOFvx066x0ZFviIPVVTksIvgp Ooud7DkmKippRDOXHzcNURWgNx5r/vLqsMf2yVj+LTwo7Be4SS9ffpTfoRz6KFfu IukCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBT+cAh1fBmxdNZfI7zWgqFpgm7dPDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzgwL19uQUlkWHdac1hUV1h5Tzgxb0toYVlKdTNUdy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGlZZAwDQYJKoZIhvcNAQELBQAD ggEBAE0oXBOEJ2NxWTadgH7/X9zyBXSfj0ePHI8SOu+NawPQjBMh/wrWUHj1g5DY z6Bk7Bbz16LgYnp7/eJyLXSdIS8vIYBvnsSa5BMRMolFkg/j5Sf1yeG/rsdqYY+I 17OuNNvRVoCfV0kvrCoXa9tYbg73pgAxzoLH6BlOai9y0hEolm/DezZ7UZjbll/c OXaRn2cd1PbXmykX/GxcyIh6h9diXwA/8t1cicvmHe58JLKonaquG8Q0bckRsUpA NiA+3kZMXQTWy/HOsZm61aBGqFvAy1Ob4Ca6lo/l/gMTgY9ZMgLlH1Jl/rCbP2jq COL4pL0kZvaCj2w63vqnWGW+vaY= -----END CERTIFICATE-----Generated at Sat Jul 19 19:34:11 2025 by rpki-client