$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MhLECXbovqr84IRHL8u8MS-Szow.cer File: MhLECXbovqr84IRHL8u8MS-Szow.cer (raw, json) Hash identifier: hr+8dxcCSkPxAEr0c4EhejGX0RsOM4kWJgFXCDtdpa8= Subject key identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E1DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:08:55 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 163.61.202.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57821 (0xe1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:08:55 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3212C40976E8BEAAFCE084472FCBBC312F92CE8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:d9:ce:f7:4b:e4:fc:2e:28:54:9d:41:71: ff:4f:da:bf:5a:6a:b3:28:4b:13:6e:82:4f:73:ee: 0b:58:1c:e8:9d:c8:97:d4:d5:58:41:f5:cf:5b:ac: aa:5f:f4:12:ef:1c:41:40:62:66:19:1b:35:2b:a1: 72:72:be:6a:bc:b0:48:83:16:82:31:4d:63:aa:45: b1:4e:3d:b2:19:ac:89:11:2e:5e:60:96:6d:d7:8d: 70:fc:05:fa:ad:fa:1f:19:e3:3f:0c:18:cb:73:fe: 8a:2e:5d:ea:a8:7e:94:f9:9e:71:84:a1:e5:c4:e0: 44:19:82:3e:f9:f4:2f:3a:f8:ec:72:94:c1:0d:25: 84:90:15:fc:db:0a:c7:cc:93:6c:06:a4:00:9c:7a: d4:78:fc:c2:d1:93:07:8e:13:50:3a:7b:ee:1a:f9: 6a:ef:dc:1b:eb:7d:dc:ff:c7:47:58:8b:d8:bb:12: 9c:58:93:54:09:5c:fc:82:6a:87:40:73:fe:3b:fe: 5d:6c:c3:9f:ac:a4:7b:f1:92:30:be:99:07:df:1c: 4c:2f:74:a9:2d:35:6a:e6:44:15:c3:b4:ee:4a:d0: 04:40:d2:00:d4:ac:23:15:43:ed:a0:85:d2:b8:d0: 6b:72:76:d6:b8:9d:95:0f:ad:00:78:8f:19:7a:89: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.202.0/23 Signature Algorithm: sha256WithRSAEncryption 46:60:f5:a8:e4:1a:99:0d:15:73:4a:9c:ad:de:3c:8f:16:48: d8:51:dd:1b:dc:40:9f:e3:da:b1:e6:fa:68:6b:7e:43:79:f9: 29:07:12:09:ca:4e:20:8b:86:5c:65:b0:ca:19:48:d4:d6:7b: 06:a7:35:54:6a:d6:a3:20:ab:1f:3e:05:13:a8:86:56:7e:7d: 4f:60:c3:16:cf:5e:52:70:4b:12:43:d7:ef:a4:85:11:e2:bd: 14:30:f1:4d:02:9f:83:9f:23:a3:e0:7d:f0:27:6a:1f:06:67: 4f:58:b5:e4:ee:ea:49:02:3f:1d:bb:91:8c:33:a3:6a:9b:02: 2c:51:4d:b6:2f:f3:c1:52:21:5c:6b:49:54:b4:07:56:3e:9b: 48:97:f2:db:5c:ce:09:25:76:0d:d0:44:d5:95:05:f2:67:d6: 0e:dc:6d:24:52:41:95:b4:33:d4:22:f6:9c:af:1b:a4:f0:45: 9f:2c:60:83:6f:e9:7b:2c:96:d3:cd:4c:08:16:f8:73:10:19: 4f:f4:cd:e3:2e:50:68:85:7b:e4:82:05:aa:cf:8c:ef:ec:f5: 55:76:af:73:57:09:08:17:bd:cf:13:7b:a4:34:15:78:d0:7e: 00:9e:06:d5:26:42:cf:04:5c:4f:2c:5d:ea:a7:da:b0:0d:30: 8a:c8:50:f4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOHdMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA4NTVaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDMyMTJDNDA5NzZFOEJFQUFGQ0UwODQ0NzJGQ0JCQzMxMkY5MkNF OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUdnO90vk/C4oVJ1B cf9P2r9aarMoSxNugk9z7gtYHOidyJfU1VhB9c9brKpf9BLvHEFAYmYZGzUroXJy vmq8sEiDFoIxTWOqRbFOPbIZrIkRLl5glm3XjXD8Bfqt+h8Z4z8MGMtz/oouXeqo fpT5nnGEoeXE4EQZgj759C86+OxylMENJYSQFfzbCsfMk2wGpACcetR4/MLRkweO E1A6e+4a+Wrv3Bvrfdz/x0dYi9i7EpxYk1QJXPyCaodAc/47/l1sw5+spHvxkjC+ mQffHEwvdKktNWrmRBXDtO5K0ARA0gDUrCMVQ+2ghdK40Gtydta4nZUPrQB4jxl6 iYj5AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUMhLECXbovqr84IRHL8u8MS+Szoww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1My9NaExFQ1hib3Zxcjg0SVJITDh1OE1TLVN6b3cubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoz3KMA0GCSqGSIb3DQEBCwUA A4IBAQBGYPWo5BqZDRVzSpyt3jyPFkjYUd0b3ECf49qx5vpoa35DefkpBxIJyk4g i4ZcZbDKGUjU1nsGpzVUatajIKsfPgUTqIZWfn1PYMMWz15ScEsSQ9fvpIUR4r0U MPFNAp+DnyOj4H3wJ2ofBmdPWLXk7upJAj8du5GMM6NqmwIsUU22L/PBUiFca0lU tAdWPptIl/LbXM4JJXYN0ETVlQXyZ9YO3G0kUkGVtDPUIvacrxuk8EWfLGCDb+l7 LJbTzUwIFvhzEBlP9M3jLlBohXvkggWqz4zv7PVVdq9zVwkIF73PE3ukNBV40H4A ngbVJkLPBFxPLF3qp9qwDTCKyFD0 -----END CERTIFICATE-----Generated at Wed Nov 5 15:52:57 2025 by rpki-client