$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MhLECXbovqr84IRHL8u8MS-Szow.cer File: MhLECXbovqr84IRHL8u8MS-Szow.cer (raw, json) Hash identifier: dmHFawW6WuS1l6B9zF4+MMZAxH0+SuALXcZZAqMycDE= Subject key identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CCDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:06:31 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 163.61.202.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52447 (0xccdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:06:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3212C40976E8BEAAFCE084472FCBBC312F92CE8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:d9:ce:f7:4b:e4:fc:2e:28:54:9d:41:71: ff:4f:da:bf:5a:6a:b3:28:4b:13:6e:82:4f:73:ee: 0b:58:1c:e8:9d:c8:97:d4:d5:58:41:f5:cf:5b:ac: aa:5f:f4:12:ef:1c:41:40:62:66:19:1b:35:2b:a1: 72:72:be:6a:bc:b0:48:83:16:82:31:4d:63:aa:45: b1:4e:3d:b2:19:ac:89:11:2e:5e:60:96:6d:d7:8d: 70:fc:05:fa:ad:fa:1f:19:e3:3f:0c:18:cb:73:fe: 8a:2e:5d:ea:a8:7e:94:f9:9e:71:84:a1:e5:c4:e0: 44:19:82:3e:f9:f4:2f:3a:f8:ec:72:94:c1:0d:25: 84:90:15:fc:db:0a:c7:cc:93:6c:06:a4:00:9c:7a: d4:78:fc:c2:d1:93:07:8e:13:50:3a:7b:ee:1a:f9: 6a:ef:dc:1b:eb:7d:dc:ff:c7:47:58:8b:d8:bb:12: 9c:58:93:54:09:5c:fc:82:6a:87:40:73:fe:3b:fe: 5d:6c:c3:9f:ac:a4:7b:f1:92:30:be:99:07:df:1c: 4c:2f:74:a9:2d:35:6a:e6:44:15:c3:b4:ee:4a:d0: 04:40:d2:00:d4:ac:23:15:43:ed:a0:85:d2:b8:d0: 6b:72:76:d6:b8:9d:95:0f:ad:00:78:8f:19:7a:89: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.202.0/23 Signature Algorithm: sha256WithRSAEncryption 65:32:84:b2:88:12:86:ff:6b:03:78:52:13:7a:9c:0e:fe:1d: f9:04:bf:f5:77:70:b5:78:d9:38:b1:f5:57:88:6f:df:b0:0d: 9d:02:9d:cc:89:90:3a:3e:a5:15:ee:51:be:23:69:ea:02:60: 35:e1:d0:3b:49:f3:a8:b1:c4:a1:0e:0f:e9:a7:82:2d:ab:93: 58:77:3e:14:f0:6d:28:a3:11:e2:59:2b:eb:df:86:a0:da:2d: cc:ba:e6:b7:d9:e1:29:bf:78:5d:e8:81:9a:82:37:2e:42:14: 43:98:a7:53:3d:40:2c:59:ee:54:54:b5:1c:cc:c7:a3:16:ef: 36:a0:02:53:0b:6b:17:58:7f:9f:80:6b:91:21:85:d6:52:37: 36:09:1a:fe:de:5c:b7:15:7b:84:72:4f:04:78:61:d2:e6:3c: 2f:0c:43:b1:66:d3:e1:02:0d:00:ed:68:5c:17:9a:55:e1:02: 8d:15:d0:89:d1:32:22:2c:14:7e:10:22:a8:87:8d:0e:15:b1: f5:bc:2e:e3:9c:8f:91:90:49:e7:28:f2:c8:8a:a3:e2:a9:08: 93:ce:dc:3d:f6:73:d4:15:bc:e4:dd:6b:d2:2a:0c:8f:e4:34: 47:02:6b:d6:79:23:21:b1:6f:19:7f:a6:f1:4c:e3:c4:8e:b2: 0a:c1:d1:34 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAMzfMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA2MzFaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDMyMTJDNDA5NzZFOEJFQUFGQ0UwODQ0NzJGQ0JCQzMxMkY5MkNF OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUdnO90vk/C4oVJ1B cf9P2r9aarMoSxNugk9z7gtYHOidyJfU1VhB9c9brKpf9BLvHEFAYmYZGzUroXJy vmq8sEiDFoIxTWOqRbFOPbIZrIkRLl5glm3XjXD8Bfqt+h8Z4z8MGMtz/oouXeqo fpT5nnGEoeXE4EQZgj759C86+OxylMENJYSQFfzbCsfMk2wGpACcetR4/MLRkweO E1A6e+4a+Wrv3Bvrfdz/x0dYi9i7EpxYk1QJXPyCaodAc/47/l1sw5+spHvxkjC+ mQffHEwvdKktNWrmRBXDtO5K0ARA0gDUrCMVQ+2ghdK40Gtydta4nZUPrQB4jxl6 iYj5AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUMhLECXbovqr84IRHL8u8MS+Szoww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1My9NaExFQ1hib3Zxcjg0SVJITDh1OE1TLVN6b3cubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoz3KMA0GCSqGSIb3DQEBCwUA A4IBAQBlMoSyiBKG/2sDeFITepwO/h35BL/1d3C1eNk4sfVXiG/fsA2dAp3MiZA6 PqUV7lG+I2nqAmA14dA7SfOoscShDg/pp4Itq5NYdz4U8G0ooxHiWSvr34ag2i3M uua32eEpv3hd6IGagjcuQhRDmKdTPUAsWe5UVLUczMejFu82oAJTC2sXWH+fgGuR IYXWUjc2CRr+3ly3FXuEck8EeGHS5jwvDEOxZtPhAg0A7WhcF5pV4QKNFdCJ0TIi LBR+ECKoh40OFbH1vC7jnI+RkEnnKPLIiqPiqQiTztw99nPUFbzk3WvSKgyP5DRH AmvWeSMhsW8Zf6bxTOPEjrIKwdE0 -----END CERTIFICATE-----Generated at Sat Apr 26 08:24:11 2025 by rpki-client