$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/H4HG-W0BkJkB20LNehLnmKk_Trc.cer File: H4HG-W0BkJkB20LNehLnmKk_Trc.cer (raw, json) Hash identifier: J3jryJjcPF+wbmZ/Hyw0S/44OdD1nrU1pLGM0nVOl+M= Subject key identifier: 1F:81:C6:F9:6D:01:90:99:01:DB:42:CD:7A:12:E7:98:A9:3F:4E:B7 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D9D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:17:28 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 103.156.174.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55760 (0xd9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:17:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1F81C6F96D01909901DB42CD7A12E798A93F4EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:8d:2d:b4:3d:5b:15:aa:2c:1c:52:eb:92: 31:d7:8b:50:c4:ab:6c:27:6e:cd:a5:49:c2:c3:12: 8c:7e:48:cf:f2:e1:34:ee:f0:1f:64:98:70:4f:45: 2d:95:1f:2d:1f:b1:93:d0:04:31:50:25:1d:03:20: 47:64:61:13:05:77:33:fc:4b:35:34:97:6b:01:dd: bb:ca:1a:eb:f9:c6:b4:61:63:d8:20:73:fc:fc:4c: a4:2f:c4:16:95:4c:6d:06:96:75:91:65:ab:01:6a: bf:fc:72:85:b7:ff:3b:73:65:8a:e5:60:53:70:4a: d3:99:bf:65:c4:d3:77:91:cf:6e:8f:2d:ef:b0:cd: b0:58:57:ec:fa:f9:28:67:f5:f2:b6:b9:2d:3e:ca: 0e:ce:c6:f7:4b:9d:30:27:d5:7b:4e:50:bb:ec:4f: 01:8c:66:37:4e:fb:63:c1:56:a1:53:e5:ea:b5:7a: dd:6f:36:11:c3:27:be:71:d7:5c:94:d4:42:31:c8: 5a:24:63:3f:c1:fe:c4:35:51:2d:08:c5:c9:fb:e8: 90:fd:b9:d6:67:5d:7c:ee:cd:b9:a8:e0:c5:c1:86: 86:0b:79:af:0a:ee:2a:72:af:42:1e:75:18:53:d1: 3d:a9:53:f8:d4:39:34:0b:35:d8:5e:e1:70:96:01: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:81:C6:F9:6D:01:90:99:01:DB:42:CD:7A:12:E7:98:A9:3F:4E:B7 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/H4HG-W0BkJkB20LNehLnmKk_Trc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.174.0/23 Signature Algorithm: sha256WithRSAEncryption 08:3f:0d:3b:c6:57:35:e7:27:29:1c:74:2b:5f:f5:62:bf:23: 4d:60:9f:69:22:53:ba:09:7b:da:43:36:0f:c5:7a:32:e8:b1: a8:6d:27:7e:2e:02:e5:d0:4c:06:de:5c:f4:2b:1a:18:17:a7: 9c:b6:fa:41:2f:36:55:4a:67:93:f4:7b:d7:31:1d:2d:ea:12: 27:a4:8c:01:36:17:19:e4:9c:70:f1:59:49:b3:74:9b:bf:73: 89:28:6e:ae:24:9e:ea:6c:b3:91:1e:56:64:d5:fd:96:d9:c6: 42:2e:ec:57:14:ba:45:4c:1e:75:5f:f1:09:63:ed:a4:0b:a3: 83:c7:a2:9f:f6:24:31:ce:57:cf:81:1f:33:82:57:b5:28:64: 0e:0a:05:14:ed:c6:e5:b5:7e:26:9c:ce:c4:e9:e8:27:4a:dc: 6a:ae:d5:0d:d6:fe:52:b0:5a:ad:a2:1e:aa:45:30:36:7f:d9: 0c:f1:d1:42:ed:a2:8f:49:c8:d3:f5:1c:e5:26:ba:78:4f:f2: ca:81:8d:6e:de:9a:0c:d6:4a:cc:62:b1:57:7f:ac:48:b2:fd: cf:de:67:4b:d1:30:cf:14:fa:90:99:9a:ba:19:c2:98:80:4e: a7:70:47:1f:c4:b6:e8:46:0f:c7:da:64:a7:4a:7d:b1:10:e9: 23:da:43:84 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDANnQMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE3MjhaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDFGODFDNkY5NkQwMTkwOTkwMURCNDJDRDdBMTJFNzk4QTkzRjRF QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CY0ttD1bFaosHFLr kjHXi1DEq2wnbs2lScLDEox+SM/y4TTu8B9kmHBPRS2VHy0fsZPQBDFQJR0DIEdk YRMFdzP8SzU0l2sB3bvKGuv5xrRhY9ggc/z8TKQvxBaVTG0GlnWRZasBar/8coW3 /ztzZYrlYFNwStOZv2XE03eRz26PLe+wzbBYV+z6+Shn9fK2uS0+yg7OxvdLnTAn 1XtOULvsTwGMZjdO+2PBVqFT5eq1et1vNhHDJ75x11yU1EIxyFokYz/B/sQ1US0I xcn76JD9udZnXXzuzbmo4MXBhoYLea8K7ipyr0IedRhT0T2pU/jUOTQLNdhe4XCW ARzxAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUH4HG+W0BkJkB20LNehLnmKk/Trcw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw MjMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzAyMy9INEhHLVcwQmtKa0IyMExOZWhMbm1La19UcmMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5yuMA0GCSqGSIb3DQEBCwUA A4IBAQAIPw07xlc15ycpHHQrX/VivyNNYJ9pIlO6CXvaQzYPxXoy6LGobSd+LgLl 0EwG3lz0KxoYF6ectvpBLzZVSmeT9HvXMR0t6hInpIwBNhcZ5Jxw8VlJs3Sbv3OJ KG6uJJ7qbLORHlZk1f2W2cZCLuxXFLpFTB51X/EJY+2kC6ODx6Kf9iQxzlfPgR8z gle1KGQOCgUU7cbltX4mnM7E6egnStxqrtUN1v5SsFqtoh6qRTA2f9kM8dFC7aKP ScjT9RzlJrp4T/LKgY1u3poM1krMYrFXf6xIsv3P3mdL0TDPFPqQmZq6GcKYgE6n cEcfxLboRg/H2mSnSn2xEOkj2kOE -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:19 2025 by rpki-client