$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer (raw, json) Hash identifier: qlTZD+jse6odBtoaC3ogYlAT0O7XU3CX5pwa2KncEQM= Subject key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4277 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:13:12 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 160.187.223.0/24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17015 (0x4277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:13:12 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:ee:63:a1:78:e3:a3:c7:43:c5:17:6b:b0: f7:c7:9f:b2:aa:9e:5f:ea:63:0b:c3:9d:82:04:05: c2:0c:e7:d2:fa:6d:72:3d:e5:13:e7:65:ce:8a:10: 8b:59:63:53:ea:7f:9e:56:61:2a:90:04:1d:91:ce: 8e:58:c8:6b:5b:77:f5:f4:32:54:78:07:68:8c:56: 14:43:ed:c3:e7:b4:4d:3d:c3:ac:72:03:17:27:7f: 8a:da:36:87:22:2d:ce:59:63:d8:d5:33:5f:11:66: ad:dc:86:d6:f3:a4:11:ca:10:cc:59:3c:2c:bb:fd: 85:3b:2d:f6:a4:9e:be:16:28:cb:b8:71:c8:59:aa: 06:3f:40:f2:20:fc:0a:12:26:1c:7f:0b:14:07:9f: 22:f8:2d:00:21:bd:ea:c9:59:85:98:28:b7:16:fb: 18:81:64:7e:e3:5d:da:cb:1a:63:92:9b:ad:0d:a5: 0b:b1:09:ea:f8:ad:d7:c6:71:69:6f:ed:67:31:d3: 4b:86:91:4d:56:91:27:5c:e3:31:98:58:f2:9a:cd: 73:eb:bb:55:66:fe:bb:ce:91:5f:3b:f2:24:88:01: 95:a8:d0:c0:9e:e4:cc:c1:18:cd:be:39:71:03:29: 2c:94:78:67:cb:f9:99:06:ec:84:0e:0c:77:8b:a3: 44:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.223.0/24 Signature Algorithm: sha256WithRSAEncryption 35:81:6d:e4:24:5d:0a:ee:cc:11:f3:a9:35:c1:d6:e6:26:aa: 69:50:d3:0d:ab:5b:e4:40:cc:19:35:d4:d4:8d:18:b8:3b:2d: 1e:c0:56:82:9f:97:b5:a0:9f:42:7d:69:36:f5:65:2a:93:47: 0b:ab:f2:2f:15:eb:e3:77:7d:2f:c1:8c:d1:68:02:cb:05:2f: e1:a8:f9:c6:53:8d:40:eb:ff:8d:98:01:69:79:77:d6:81:62: 86:3c:4a:40:e6:df:3d:b6:a4:4e:e0:c1:05:89:6b:9d:f7:1d: b5:19:63:a5:a1:f1:57:ee:4f:cb:97:e2:f6:d3:08:09:a1:9a: c5:48:df:8e:84:f1:ae:32:b0:c5:85:8d:bd:01:1d:47:c4:75: 65:81:ab:7e:ea:20:c2:d3:50:49:9f:fe:ee:47:83:4e:60:aa: be:83:55:73:c3:39:60:9b:15:ce:d5:e5:ea:eb:8c:8f:1b:28: dd:d3:10:23:c1:f5:97:c8:25:df:70:ca:51:30:9a:26:1f:67: 3e:93:40:bd:69:93:81:04:3b:1b:dc:e8:47:12:7f:fd:1a:12: 98:a5:34:10:fa:34:5f:14:c6:37:d0:f3:ef:07:0f:5b:57:52: 42:f3:4a:26:dc:b1:ff:a1:95:e4:b4:b3:cc:ff:a3:27:41:39: 20:7e:59:38 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQncwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMTMxMloXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoQTM4RDVGM0VBNjU0QUQ4QzZENjU0REE1QkU5MDhBNjU4RjI2NkU2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSE7mOheOOjx0PFF2uw 98efsqqeX+pjC8OdggQFwgzn0vptcj3lE+dlzooQi1ljU+p/nlZhKpAEHZHOjljI a1t39fQyVHgHaIxWFEPtw+e0TT3DrHIDFyd/ito2hyItzllj2NUzXxFmrdyG1vOk EcoQzFk8LLv9hTst9qSevhYoy7hxyFmqBj9A8iD8ChImHH8LFAefIvgtACG96slZ hZgotxb7GIFkfuNd2ssaY5KbrQ2lC7EJ6vit18ZxaW/tZzHTS4aRTVaRJ1zjMZhY 8prNc+u7VWb+u86RXzvyJIgBlajQwJ7kzMEYzb45cQMpLJR4Z8v5mQbshA4Md4uj RMECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSjjV8+plStjG1lTaW+kIpljyZuZDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzE5L280MWZQcVpVcll4dFpVMmx2cENLWlk4bWJtUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu98wDQYJKoZIhvcNAQELBQAD ggEBADWBbeQkXQruzBHzqTXB1uYmqmlQ0w2rW+RAzBk11NSNGLg7LR7AVoKfl7Wg n0J9aTb1ZSqTRwur8i8V6+N3fS/BjNFoAssFL+Go+cZTjUDr/42YAWl5d9aBYoY8 SkDm3z22pE7gwQWJa533HbUZY6Wh8VfuT8uX4vbTCAmhmsVI346E8a4ysMWFjb0B HUfEdWWBq37qIMLTUEmf/u5Hg05gqr6DVXPDOWCbFc7V5errjI8bKN3TECPB9ZfI Jd9wylEwmiYfZz6TQL1pk4EEOxvc6EcSf/0aEpilNBD6NF8UxjfQ8+8HD1tXUkLz Sibcsf+hleS0s8z/oydBOSB+WTg= -----END CERTIFICATE-----Generated at Fri Oct 24 08:50:40 2025 by rpki-client