$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2GueAukE5bR2WU2yt5eONcp8HW4.cer File: 2GueAukE5bR2WU2yt5eONcp8HW4.cer (raw, json) Hash identifier: SQN/A92D5h/PPeQtRbXca5zMkZzkD42aNc2mYroQvPc= Subject key identifier: D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D9FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:18:00 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 151265 IP: 2401:e620::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55806 (0xd9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:18:00 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D86B9E02E904E5B476594DB2B7978E35CA7C1D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:18:be:33:4b:37:da:b1:66:21:23:eb:72: 3e:77:a3:ee:5a:64:d4:2e:d1:16:e4:93:40:e4:72: e3:18:ae:59:41:ef:9a:a0:3b:7f:f8:49:92:03:45: 12:f4:13:69:1d:a6:df:2d:0e:10:22:c8:df:93:32: 1e:31:3f:52:75:b2:6c:5a:cf:3b:3b:8c:86:32:30: 9f:82:7b:bd:19:33:46:75:2d:56:ce:51:29:c5:b6: ac:6d:63:62:28:b4:17:e9:37:bb:de:ee:e6:b6:dd: ad:9b:0d:1e:cd:be:b1:52:8d:0f:a1:3f:d7:69:5a: d8:0b:79:1b:9a:17:a8:e2:0a:b6:5e:5c:04:29:94: f8:34:24:60:fa:54:a0:61:50:c7:4c:1e:9a:d1:17: 95:e9:51:be:8b:89:ab:99:a5:12:c1:9d:14:92:4b: 00:76:24:e0:de:07:c7:72:47:00:0c:eb:80:dc:83: 2b:e6:8a:a0:cf:5b:b3:df:d9:24:05:a6:c4:a1:ad: 3f:d4:b0:88:69:b7:97:7d:36:2b:7d:bc:27:0c:1d: df:bc:1f:94:78:c6:80:d2:e8:ab:ed:1b:14:55:6f: 9f:4f:aa:a1:06:ee:0c:38:3a:b5:a5:01:14:c8:8f: 26:bd:7c:e3:cc:c1:ad:31:8a:3b:cb:e7:6e:a2:c9: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151265 sbgp-ipAddrBlock: critical IPv6: 2401:e620::/32 Signature Algorithm: sha256WithRSAEncryption 61:9a:24:2d:c3:31:1d:f1:2a:5e:b1:7e:bc:d4:c4:38:58:af: 6f:5f:be:18:ef:c4:f1:f9:2b:0f:8c:ca:ce:1b:26:32:85:18: 49:39:cf:a7:f8:73:11:b9:47:f4:dc:ef:c4:d7:26:df:ef:79: 81:92:cb:5b:db:c9:1a:40:2c:3a:74:2e:35:87:18:b7:15:72: c2:aa:de:7d:82:a5:2f:d0:4f:d6:52:f8:94:49:cd:fb:8e:53: fc:10:c8:0a:46:20:4c:79:32:39:c5:8e:53:ec:77:4b:52:5b: 0c:23:cc:01:c4:af:cf:27:68:98:45:3c:95:b4:94:3b:e8:98: 8e:ff:3a:cc:e7:de:20:b4:a9:2e:b2:9a:d4:dd:29:dd:5f:a5: 01:fb:1e:c7:c1:57:7f:3c:28:ef:2e:3f:53:fa:64:b0:50:7c: df:a7:d5:5c:3b:95:12:d7:28:21:bf:75:e0:ac:10:8d:57:46: 8c:bc:04:9b:34:75:b7:8b:2e:8f:d3:54:b6:92:fb:55:6b:1c: 91:76:5a:ab:1e:21:24:a3:69:f5:10:51:fc:de:04:21:81:8b: a6:60:b2:c0:6b:39:7c:6d:63:b3:ec:fc:1f:29:22:32:be:41: 64:38:46:0b:34:da:d0:e5:66:76:06:8a:90:91:75:e5:eb:48: aa:aa:02:8b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDANn+MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE4MDBaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEQ4NkI5RTAyRTkwNEU1QjQ3NjU5NERCMkI3OTc4RTM1Q0E3QzFE NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9Ri+M0s32rFmISPr cj53o+5aZNQu0Rbkk0DkcuMYrllB75qgO3/4SZIDRRL0E2kdpt8tDhAiyN+TMh4x P1J1smxazzs7jIYyMJ+Ce70ZM0Z1LVbOUSnFtqxtY2IotBfpN7ve7ua23a2bDR7N vrFSjQ+hP9dpWtgLeRuaF6jiCrZeXAQplPg0JGD6VKBhUMdMHprRF5XpUb6LiauZ pRLBnRSSSwB2JODeB8dyRwAM64DcgyvmiqDPW7Pf2SQFpsShrT/UsIhpt5d9Nit9 vCcMHd+8H5R4xoDS6KvtGxRVb59PqqEG7gw4OrWlARTIjya9fOPMwa0xijvL526i yZarAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQU2GueAukE5bR2WU2yt5eONcp8HW4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM0Ni8yR3VlQXVrRTViUjJXVTJ5dDVlT05jcDhIVzQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO4TAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQB5iAwDQYJKoZIhvcNAQELBQADggEBAGGaJC3DMR3xKl6xfrzU xDhYr29fvhjvxPH5Kw+Mys4bJjKFGEk5z6f4cxG5R/Tc78TXJt/veYGSy1vbyRpA LDp0LjWHGLcVcsKq3n2CpS/QT9ZS+JRJzfuOU/wQyApGIEx5MjnFjlPsd0tSWwwj zAHEr88naJhFPJW0lDvomI7/Oszn3iC0qS6ymtTdKd1fpQH7HsfBV388KO8uP1P6 ZLBQfN+n1Vw7lRLXKCG/deCsEI1XRoy8BJs0dbeLLo/TVLaS+1VrHJF2WqseISSj afUQUfzeBCGBi6ZgssBrOXxtY7Ps/B8pIjK+QWQ4Rgs02tDlZnYGipCRdeXrSKqq Aos= -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:28 2025 by rpki-client