$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ulZW_5AoSL-L3UxKm3_CYq4PO-c.cer File: ulZW_5AoSL-L3UxKm3_CYq4PO-c.cer (raw, json) Hash identifier: a67wHCSr+LZnzwVpXDK1jJbluqUBwDuh7h60E4rfLPU= Subject key identifier: BA:56:56:FF:90:28:48:BF:8B:DD:4C:4A:9B:7F:C2:62:AE:0F:3B:E7 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4211 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:07:47 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 138.252.78.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16913 (0x4211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 23 03:07:47 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=BA5656FF902848BF8BDD4C4A9B7FC262AE0F3BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:69:29:c3:9c:ed:1e:59:9f:5e:5e:19:a7:49: 52:c4:d2:61:d1:3c:9e:87:46:ae:18:92:9c:ce:b4: d4:b3:3f:68:f8:9d:75:b0:e6:fe:85:36:23:84:ee: 0b:b3:a1:59:28:50:0e:1a:e3:5a:e0:b8:ba:d9:17: 1e:99:0b:5d:d0:03:2e:ff:40:4b:b4:d3:2f:eb:03: d0:6b:e0:52:83:d2:89:0c:b6:7c:bc:7e:fb:4d:ac: 42:62:37:1d:77:77:a6:41:43:49:4b:b8:ae:8f:f1: ce:10:03:7d:a8:f9:47:c5:6b:39:18:27:5e:52:13: 95:dd:04:2a:aa:f9:57:a6:9a:43:10:41:a0:d5:c8: b2:09:f8:c5:33:b7:13:45:30:64:fb:12:58:b3:d9: 74:6b:fe:3e:60:f1:2b:41:ab:74:87:54:a0:41:93: 39:4b:ce:0c:a3:e6:8f:08:60:68:00:28:da:e5:9a: ae:ab:1c:e2:64:7a:eb:4b:9f:e7:72:13:7d:c0:08: 22:de:64:41:d4:94:99:2b:fb:86:46:fb:0b:be:eb: 79:75:4a:e6:9b:e6:87:61:58:e4:19:64:7c:b3:22: 62:9f:6a:be:9e:a1:98:07:64:ba:41:3e:22:bd:41: d6:75:48:4e:d5:6f:7d:2c:13:7a:d9:47:4d:ca:ba: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:56:FF:90:28:48:BF:8B:DD:4C:4A:9B:7F:C2:62:AE:0F:3B:E7 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3400/ulZW_5AoSL-L3UxKm3_CYq4PO-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.78.0/23 Signature Algorithm: sha256WithRSAEncryption 63:e5:ff:7d:e9:b5:5c:97:75:f3:68:05:ce:c9:41:65:d8:4d: 7a:e3:fd:98:cb:cf:95:ce:46:08:b3:16:d8:3c:0c:f6:33:ff: 42:7b:f5:2e:dc:53:10:7c:f7:77:e4:cf:9b:ac:c3:cb:15:82: 4d:43:23:0e:50:03:94:81:de:d2:9c:f0:2a:c3:ae:91:12:b1: 20:ac:a0:76:ab:7b:f0:91:1e:2f:2e:84:bd:7e:84:47:b1:b6: 82:f0:54:b3:4c:a2:8c:0a:7a:24:f8:ce:75:29:3d:85:ff:49: cf:1c:ea:66:7a:f1:2b:db:a1:ee:f2:7b:54:a2:9a:b9:01:1f: 44:88:09:c6:13:b7:17:f8:09:8c:a4:9c:6a:c4:fc:4e:02:de: c7:fc:83:af:01:03:87:3e:08:74:98:71:54:00:6e:67:5d:4f: 05:40:9c:9a:74:75:6a:22:a7:d0:fa:c4:aa:b7:17:05:5a:02: 3f:45:94:d8:80:e3:a5:36:e0:88:e4:42:dd:78:8a:7a:cf:15: 75:f3:2a:d1:8b:1c:ef:07:74:0d:52:c3:b9:53:0d:b6:2b:c7: 78:e7:86:96:7e:10:8d:b5:f5:3c:70:90:c2:f4:0b:24:16:0c: 63:29:58:5f:b5:cd:b8:25:66:3c:93:7a:e9:14:e9:48:3f:67: 40:11:23:b5 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQhEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTAyMzAzMDc0N1oXDTI2MTAyMzAzMDEwM1owMzEx MC8GA1UEAxMoQkE1NjU2RkY5MDI4NDhCRjhCREQ0QzRBOUI3RkMyNjJBRTBGM0JF NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOVpKcOc7R5Zn15eGadJ UsTSYdE8nodGrhiSnM601LM/aPiddbDm/oU2I4TuC7OhWShQDhrjWuC4utkXHpkL XdADLv9AS7TTL+sD0GvgUoPSiQy2fLx++02sQmI3HXd3pkFDSUu4ro/xzhADfaj5 R8VrORgnXlITld0EKqr5V6aaQxBBoNXIsgn4xTO3E0UwZPsSWLPZdGv+PmDxK0Gr dIdUoEGTOUvODKPmjwhgaAAo2uWarqsc4mR660uf53ITfcAIIt5kQdSUmSv7hkb7 C77reXVK5pvmh2FY5BlkfLMiYp9qvp6hmAdkukE+Ir1B1nVITtVvfSwTetlHTcq6 PaECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBS6Vlb/kChIv4vdTEqbf8Jirg875zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDAwL3VsWldfNUFvU0wtTDNVeEttM19DWXE0UE8tYy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/E4wDQYJKoZIhvcNAQELBQAD ggEBAGPl/33ptVyXdfNoBc7JQWXYTXrj/ZjLz5XORgizFtg8DPYz/0J79S7cUxB8 93fkz5usw8sVgk1DIw5QA5SB3tKc8CrDrpESsSCsoHare/CRHi8uhL1+hEextoLw VLNMoowKeiT4znUpPYX/Sc8c6mZ68Svboe7ye1SimrkBH0SICcYTtxf4CYyknGrE /E4C3sf8g68BA4c+CHSYcVQAbmddTwVAnJp0dWoip9D6xKq3FwVaAj9FlNiA46U2 4IjkQt14inrPFXXzKtGLHO8HdA1Sw7lTDbYrx3jnhpZ+EI219TxwkML0CyQWDGMp WF+1zbglZjyTeukU6Ug/Z0ARI7U= -----END CERTIFICATE-----Generated at Fri Oct 24 08:38:42 2025 by rpki-client