$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer File: dLHNkLnEHIANH1u3AQiWQC4auU4.cer (raw, json) Hash identifier: yY/DygafGKcdejOphAS9OlGGNdFtylM+mMVjoJJctYk= Subject key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4257 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:11:20 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 160.250.160.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16983 (0x4257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:11:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:32:2e:35:d4:25:d1:07:b6:e7:80:58:0f: 4b:e0:25:6e:c6:41:76:6a:71:f0:cb:6c:b0:3a:b3: 16:a2:0a:19:f8:c1:fc:2c:8a:f1:e4:66:6d:00:91: f6:b1:bf:41:5a:d4:83:18:86:9b:4e:d6:6e:7f:ed: 6a:fe:03:4c:a7:f6:ae:8f:ce:bf:90:1a:0d:bc:a8: 11:71:78:aa:0f:f8:35:5c:54:e6:fd:88:bb:d3:72: f2:7c:c2:b6:e0:d5:90:b8:8f:19:83:73:5c:a8:79: 1d:af:ec:3e:35:00:9c:81:4a:30:93:1f:33:52:b7: a2:86:b3:53:63:4d:47:a5:ad:55:2c:d9:cf:25:26: 92:b4:ba:13:24:a4:42:e9:d8:23:c3:1c:ab:3d:d5: 97:47:00:bf:b5:3f:9c:f2:3f:8b:db:88:b1:42:8c: 55:00:c7:43:23:e2:d9:89:9d:a8:d1:f4:09:70:03: 92:72:9e:fc:c6:b9:be:7e:10:57:c3:84:42:67:9b: ef:fc:b6:ea:c2:36:7e:1c:ce:be:94:bb:19:d7:fd: 06:aa:4f:c5:61:de:5f:1a:6a:ab:3e:28:c4:b6:eb: a1:d9:5f:19:55:84:86:54:a7:f4:45:6a:9b:cf:44: 83:94:3a:34:a1:a2:ef:64:12:4b:1c:22:30:f6:e4: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.160.0/23 Signature Algorithm: sha256WithRSAEncryption 09:91:c9:68:34:4e:36:b2:e8:e2:3d:81:8c:6c:a2:79:c5:4e: 90:71:9a:f5:80:2e:6c:dd:c9:fa:bc:da:34:aa:29:11:cf:47: 26:23:93:79:1d:93:67:37:c6:c8:26:93:4f:1f:0b:a9:16:a7: c9:2d:33:96:d4:89:9d:7f:d6:d1:a8:31:59:49:35:eb:28:b2: 96:06:3e:97:8a:43:a2:3c:50:a9:5c:95:0c:07:bc:b6:fd:d8: 31:a7:ec:dd:46:8a:88:9f:49:01:3c:43:9e:83:6c:dc:32:ef: c4:5c:0f:30:16:3a:46:67:89:99:8e:e8:71:73:9d:55:5f:cb: 7d:bc:6f:33:c3:95:48:1c:83:2b:86:4c:47:cb:16:86:c7:ab: c8:80:0b:bf:82:fd:b7:06:19:e4:00:36:23:f7:1c:ad:ce:b1: e9:fb:f6:7c:f5:76:e8:fc:b0:24:55:66:93:a6:02:38:cb:3f: 2e:25:37:af:1d:44:c3:57:3d:c0:b9:2e:15:24:21:bf:72:86: 4f:63:73:49:54:e4:ba:18:f1:84:ef:1c:a5:b0:f0:f0:11:4a: 95:97:56:b5:a5:24:91:b1:e4:ee:d8:6b:97:75:cb:a7:15:ae: 02:ac:a9:07:16:f0:ee:2d:3a:69:70:5f:5d:3e:46:fc:bb:35: 2d:4b:2e:88 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQlcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMTEyMFoXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoNzRCMUNEOTBCOUM0MUM4MDBEMUY1QkI3MDEwODk2NDAyRTFBQjk0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxXMi411CXRB7bngFgP S+AlbsZBdmpx8MtssDqzFqIKGfjB/CyK8eRmbQCR9rG/QVrUgxiGm07Wbn/tav4D TKf2ro/Ov5AaDbyoEXF4qg/4NVxU5v2Iu9Ny8nzCtuDVkLiPGYNzXKh5Ha/sPjUA nIFKMJMfM1K3ooazU2NNR6WtVSzZzyUmkrS6EySkQunYI8Mcqz3Vl0cAv7U/nPI/ i9uIsUKMVQDHQyPi2YmdqNH0CXADknKe/Ma5vn4QV8OEQmeb7/y26sI2fhzOvpS7 Gdf9BqpPxWHeXxpqqz4oxLbrodlfGVWEhlSn9EVqm89Eg5Q6NKGi72QSSxwiMPbk 3b0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR0sc2QucQcgA0fW7cBCJZALhq5TjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzM1L2RMSE5rTG5FSElBTkgxdTNBUWlXUUM0YXVVNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+qAwDQYJKoZIhvcNAQELBQAD ggEBAAmRyWg0Tjay6OI9gYxsonnFTpBxmvWALmzdyfq82jSqKRHPRyYjk3kdk2c3 xsgmk08fC6kWp8ktM5bUiZ1/1tGoMVlJNesospYGPpeKQ6I8UKlclQwHvLb92DGn 7N1GioifSQE8Q56DbNwy78RcDzAWOkZniZmO6HFznVVfy328bzPDlUgcgyuGTEfL FobHq8iAC7+C/bcGGeQANiP3HK3Osen79nz1duj8sCRVZpOmAjjLPy4lN68dRMNX PcC5LhUkIb9yhk9jc0lU5LoY8YTvHKWw8PARSpWXVrWlJJGx5O7Ya5d1y6cVrgKs qQcW8O4tOmlwX10+Rvy7NS1LLog= -----END CERTIFICATE-----Generated at Fri Oct 24 08:56:15 2025 by rpki-client