$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MhLECXbovqr84IRHL8u8MS-Szow.cer File: MhLECXbovqr84IRHL8u8MS-Szow.cer (raw, json) Hash identifier: wUiS84H0JlG/xQpfKD7l0vx4JpEULmIu5XplJaoDi1o= Subject key identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:15:20 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 163.61.202.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 12:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55622 (0xd946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:15:20 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3212C40976E8BEAAFCE084472FCBBC312F92CE8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:d9:ce:f7:4b:e4:fc:2e:28:54:9d:41:71: ff:4f:da:bf:5a:6a:b3:28:4b:13:6e:82:4f:73:ee: 0b:58:1c:e8:9d:c8:97:d4:d5:58:41:f5:cf:5b:ac: aa:5f:f4:12:ef:1c:41:40:62:66:19:1b:35:2b:a1: 72:72:be:6a:bc:b0:48:83:16:82:31:4d:63:aa:45: b1:4e:3d:b2:19:ac:89:11:2e:5e:60:96:6d:d7:8d: 70:fc:05:fa:ad:fa:1f:19:e3:3f:0c:18:cb:73:fe: 8a:2e:5d:ea:a8:7e:94:f9:9e:71:84:a1:e5:c4:e0: 44:19:82:3e:f9:f4:2f:3a:f8:ec:72:94:c1:0d:25: 84:90:15:fc:db:0a:c7:cc:93:6c:06:a4:00:9c:7a: d4:78:fc:c2:d1:93:07:8e:13:50:3a:7b:ee:1a:f9: 6a:ef:dc:1b:eb:7d:dc:ff:c7:47:58:8b:d8:bb:12: 9c:58:93:54:09:5c:fc:82:6a:87:40:73:fe:3b:fe: 5d:6c:c3:9f:ac:a4:7b:f1:92:30:be:99:07:df:1c: 4c:2f:74:a9:2d:35:6a:e6:44:15:c3:b4:ee:4a:d0: 04:40:d2:00:d4:ac:23:15:43:ed:a0:85:d2:b8:d0: 6b:72:76:d6:b8:9d:95:0f:ad:00:78:8f:19:7a:89: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.202.0/23 Signature Algorithm: sha256WithRSAEncryption b5:d9:43:c7:e8:74:bf:47:c0:fa:f6:7e:fa:53:ad:d3:3d:99: a0:a9:e8:89:19:c4:57:2c:cf:3a:2c:26:a0:8d:3c:a3:90:f8: 1d:9b:4c:ae:72:08:58:b8:2b:e7:f2:be:22:9c:8d:d1:27:70: e8:7a:5a:77:78:b6:f8:26:47:70:29:d3:2e:39:83:5d:b4:52: 0d:bb:14:d4:44:c8:6d:7a:39:37:01:70:24:ea:9e:10:0e:f7: bd:68:e2:1f:1f:08:15:79:23:2b:64:44:8e:1e:67:c1:8d:72: 47:a2:3b:d9:3d:99:28:7f:0b:9b:82:54:ee:ba:0b:d0:14:68: 1d:ba:0f:43:f8:02:94:a9:e2:a1:50:8c:02:59:cd:29:22:ee: 98:30:f8:bc:29:62:bf:97:21:72:17:e2:3b:c9:32:91:e7:dd: f6:45:e8:5c:7e:48:0e:dc:1b:6b:7e:60:0d:84:ac:17:79:a0: 44:49:dc:cc:e7:69:8d:82:98:93:2f:af:e5:f6:87:c3:0b:93: 26:ee:64:34:c2:a6:12:1c:df:68:c4:76:b2:af:11:4b:8b:7e: f4:6f:54:6c:75:fb:e3:66:eb:18:b1:4a:57:c4:ff:83:8c:63: 3d:ca:56:8d:21:dc:2f:a3:90:5f:fa:15:4b:58:81:8f:e8:fa: c7:e7:46:08 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDANlGMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE1MjBaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDMyMTJDNDA5NzZFOEJFQUFGQ0UwODQ0NzJGQ0JCQzMxMkY5MkNF OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUdnO90vk/C4oVJ1B cf9P2r9aarMoSxNugk9z7gtYHOidyJfU1VhB9c9brKpf9BLvHEFAYmYZGzUroXJy vmq8sEiDFoIxTWOqRbFOPbIZrIkRLl5glm3XjXD8Bfqt+h8Z4z8MGMtz/oouXeqo fpT5nnGEoeXE4EQZgj759C86+OxylMENJYSQFfzbCsfMk2wGpACcetR4/MLRkweO E1A6e+4a+Wrv3Bvrfdz/x0dYi9i7EpxYk1QJXPyCaodAc/47/l1sw5+spHvxkjC+ mQffHEwvdKktNWrmRBXDtO5K0ARA0gDUrCMVQ+2ghdK40Gtydta4nZUPrQB4jxl6 iYj5AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUMhLECXbovqr84IRHL8u8MS+Szoww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1My9NaExFQ1hib3Zxcjg0SVJITDh1OE1TLVN6b3cubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoz3KMA0GCSqGSIb3DQEBCwUA A4IBAQC12UPH6HS/R8D69n76U63TPZmgqeiJGcRXLM86LCagjTyjkPgdm0yucghY uCvn8r4inI3RJ3Doelp3eLb4JkdwKdMuOYNdtFINuxTURMhtejk3AXAk6p4QDve9 aOIfHwgVeSMrZESOHmfBjXJHojvZPZkofwubglTuugvQFGgdug9D+AKUqeKhUIwC Wc0pIu6YMPi8KWK/lyFyF+I7yTKR5932RehcfkgO3BtrfmANhKwXeaBESdzM52mN gpiTL6/l9ofDC5Mm7mQ0wqYSHN9oxHayrxFLi370b1RsdfvjZusYsUpXxP+DjGM9 ylaNIdwvo5Bf+hVLWIGP6PrH50YI -----END CERTIFICATE-----Generated at Wed Aug 13 08:06:12 2025 by rpki-client