$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer (raw, json) Hash identifier: AlWT1XXBhUw31Y06dToEvH6CW2DFFD4vq6PE+E4IvsM= Subject key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 428B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:14:23 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 160.250.90.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17035 (0x428b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:14:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:72:7c:ec:90:0e:db:fa:17:b7:76:b6:08: ab:1d:26:cb:65:8f:f7:a1:33:ea:54:9e:55:41:f4: 75:87:4d:5a:ad:61:41:4b:a7:20:98:8e:12:6d:c1: 0e:b1:89:2d:3b:56:59:e0:91:74:d3:23:98:bd:72: 41:73:17:66:9c:09:fd:b0:25:64:49:b2:05:72:e9: fe:e2:42:43:b4:36:c9:cb:3e:a6:8f:ae:b4:95:3e: ca:c2:55:b7:a2:74:14:24:1f:5f:1e:72:40:72:64: f5:13:b6:91:ec:8f:8b:cd:70:ee:3b:b3:40:be:38: fa:2b:4d:bf:31:95:ed:e3:ad:05:88:57:06:68:36: 89:86:3d:90:5f:8c:04:22:90:54:3d:49:30:6a:33: 2a:f7:e9:ba:82:f0:2a:51:6b:0e:0a:72:18:52:cc: f9:69:32:aa:10:cf:6e:98:7e:10:de:e5:e2:35:45: e5:b9:fe:68:1e:2a:bf:2d:ee:70:dc:7e:56:fb:02: 6a:09:f1:46:ac:6b:f7:d5:36:c2:7e:0f:69:a0:33: f5:c3:c6:17:e6:05:91:a4:64:c3:e2:c5:c2:2a:4b: 10:0d:46:cf:a3:18:e5:93:1e:d2:b9:a1:7c:08:78: 0b:bd:6b:13:4f:4d:8c:dc:2c:32:37:0a:fc:63:cf: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.90.0/23 Signature Algorithm: sha256WithRSAEncryption 87:84:10:bb:23:99:41:58:0c:38:7a:ab:cc:51:60:e9:c5:41: 0c:42:0c:1a:8f:99:98:cd:db:1d:c2:2c:7f:30:37:04:ee:3a: 4a:5e:8d:f7:5c:df:33:79:a3:7b:36:4e:d8:b3:9a:18:e8:c6: b7:23:5b:d5:4c:96:3e:a2:ca:fc:a9:44:14:1b:5a:5c:72:2a: f7:80:c8:90:3c:6e:55:de:71:b1:c2:48:a5:2f:46:98:9c:99: ae:fd:84:92:65:e5:5f:b3:2f:67:ed:b2:a3:25:bc:11:56:3d: 26:10:7c:4f:1a:94:03:4f:cf:58:ba:fd:66:65:f5:c0:94:a9: 97:78:58:29:72:b1:34:50:3d:e9:02:9b:5b:17:88:15:a7:f0: 06:8b:29:ce:89:11:72:a1:ae:a5:40:4c:99:65:1c:6d:18:d1: 56:c7:fd:ad:56:08:e6:63:87:40:a2:7d:c7:e4:82:94:10:61: 91:76:67:ab:79:ed:a6:fe:5b:83:8a:36:44:f1:ba:21:09:9f: 5d:72:c7:fc:86:de:2f:0d:5e:6d:21:0b:29:2d:73:7d:ed:8d: 24:19:a3:e3:cd:e2:bf:b0:07:5b:72:1c:47:01:0d:e3:48:fd: 38:40:ad:4e:69:74:4a:02:06:8e:d4:43:90:55:bf:44:3f:3b: e0:fa:8c:30 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQoswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMTQyM1oXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoN0U0MDNCOTUyMEI0MjQ2NDQzRDNFQjg3RkYxQUNDNjk5RTA0REZC NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/pcnzskA7b+he3drYI qx0my2WP96Ez6lSeVUH0dYdNWq1hQUunIJiOEm3BDrGJLTtWWeCRdNMjmL1yQXMX ZpwJ/bAlZEmyBXLp/uJCQ7Q2ycs+po+utJU+ysJVt6J0FCQfXx5yQHJk9RO2keyP i81w7juzQL44+itNvzGV7eOtBYhXBmg2iYY9kF+MBCKQVD1JMGozKvfpuoLwKlFr DgpyGFLM+WkyqhDPbph+EN7l4jVF5bn+aB4qvy3ucNx+VvsCagnxRqxr99U2wn4P aaAz9cPGF+YFkaRkw+LFwipLEA1Gz6MY5ZMe0rmhfAh4C71rE09NjNwsMjcK/GPP x8cCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR+QDuVILQkZEPT64f/GsxpngTftjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzMyL2ZrQTdsU0MwSkdSRDAtdUhfeHJNYVo0RTM3WS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+lowDQYJKoZIhvcNAQELBQAD ggEBAIeEELsjmUFYDDh6q8xRYOnFQQxCDBqPmZjN2x3CLH8wNwTuOkpejfdc3zN5 o3s2TtizmhjoxrcjW9VMlj6iyvypRBQbWlxyKveAyJA8blXecbHCSKUvRpicma79 hJJl5V+zL2ftsqMlvBFWPSYQfE8alANPz1i6/WZl9cCUqZd4WClysTRQPekCm1sX iBWn8AaLKc6JEXKhrqVATJllHG0Y0VbH/a1WCOZjh0CifcfkgpQQYZF2Z6t57ab+ W4OKNkTxuiEJn11yx/yG3i8NXm0hCyktc33tjSQZo+PN4r+wB1tyHEcBDeNI/ThA rU5pdEoCBo7UQ5BVv0Q/O+D6jDA= -----END CERTIFICATE-----Generated at Fri Oct 24 08:50:38 2025 by rpki-client