$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer (raw, json) Hash identifier: 0JF57oUHh+O2DiqYDMJ+flMJkXg1Wd7mFmFknsad6Hs= Subject key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:13:07 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 2401:afa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55426 (0xd882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:13:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:dc:71:22:d2:70:ab:1f:d3:2d:91:ff:bb: e2:c2:c2:6f:a8:17:19:22:ca:1a:c6:48:a9:a9:23: 26:d4:f7:94:66:1a:c8:98:4d:ce:80:6e:0e:fe:e4: a0:ef:b7:81:20:29:d0:5f:2e:2c:45:fc:41:5c:9b: a5:19:7c:62:43:6a:d9:15:64:35:93:11:3a:aa:a2: a9:26:25:76:fb:0d:d3:42:6b:7e:c7:f5:a3:35:3e: 4c:7c:9c:0c:39:8b:45:b1:06:42:f7:ac:cc:c8:3e: 07:12:b8:a0:54:a4:4f:81:2d:8d:d2:28:5c:0d:36: e1:3b:60:7f:42:22:f9:37:53:c2:d4:52:7c:de:40: a4:d0:e1:ca:bf:f8:1f:d8:a1:3f:d8:5c:e5:73:fe: 86:1b:12:7a:e9:5f:64:69:43:35:4b:f1:ab:0e:dd: 39:cf:ef:0e:e5:91:62:cd:18:e3:42:30:2d:ec:7b: 61:63:9d:92:9b:25:5c:64:11:43:8b:6b:51:49:f0: da:5f:3c:a0:e9:c4:bd:32:6a:97:a8:dc:5c:39:d5: 9d:60:6c:9c:e7:07:a9:d7:da:8e:1b:3b:94:31:c1: c0:cb:95:0b:a6:94:81:6d:7f:92:44:e5:1c:36:73: 6c:3b:de:12:55:7b:65:58:41:9f:c6:65:54:40:29: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:afa0::/32 Signature Algorithm: sha256WithRSAEncryption 70:60:9b:82:35:46:af:c9:ce:87:24:b0:45:53:51:7f:16:0d: 55:bb:28:65:cc:d2:ba:b5:e8:4c:dc:e0:f1:e4:10:bc:a4:ce: 01:ee:d7:7e:4f:fe:89:97:3e:62:13:91:35:29:86:ab:81:80: bd:fd:73:01:05:f1:2d:7a:f2:a1:fa:26:29:00:e0:c8:21:10: a0:22:e4:e3:02:95:a2:87:0f:b2:c7:5b:33:12:3d:fb:4f:bd: ed:4d:58:9f:d1:30:26:83:08:c2:eb:85:b3:45:6f:ba:80:ce: 44:e4:86:e4:d8:fd:27:e3:9a:30:30:98:f0:37:3c:e9:dc:65: ee:68:4b:fd:c0:80:2d:c8:57:be:c6:03:94:67:6e:57:ee:ef: aa:c1:25:97:aa:36:7a:37:c5:94:47:41:1e:6c:08:88:2d:b2: 73:9b:df:24:4f:ed:fa:8e:61:c1:71:a4:ff:d6:47:af:c3:36: 21:7c:ea:20:48:12:b2:69:fc:3a:a4:69:ce:9b:71:72:60:42: 66:be:55:bd:11:12:57:dd:0a:92:fc:f6:80:4e:46:e3:a9:58: a6:9f:a1:e8:e6:5f:6a:7f:4b:f4:ce:1f:d3:bc:98:1b:18:b1: 13:c6:c6:9f:a4:be:eb:d6:ba:c8:f5:92:4d:66:e4:c9:9e:8b: 68:a1:8d:e5 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANiCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzMDdaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDMyOUYyQUZDODZGRTlGMUZBQzlGMkY4QkIzMTJCNUFCOUM5MThD MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDNxxItJwqx/TLZH/ u+LCwm+oFxkiyhrGSKmpIybU95RmGsiYTc6Abg7+5KDvt4EgKdBfLixF/EFcm6UZ fGJDatkVZDWTETqqoqkmJXb7DdNCa37H9aM1Pkx8nAw5i0WxBkL3rMzIPgcSuKBU pE+BLY3SKFwNNuE7YH9CIvk3U8LUUnzeQKTQ4cq/+B/YoT/YXOVz/oYbEnrpX2Rp QzVL8asO3TnP7w7lkWLNGONCMC3se2FjnZKbJVxkEUOLa1FJ8NpfPKDpxL0yapeo 3Fw51Z1gbJznB6nX2o4bO5QxwcDLlQumlIFtf5JE5Rw2c2w73hJVe2VYQZ/GZVRA KVczAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUMp8q/Ib+nx+sny+LsxK1q5yRjCYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMwMS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGvoDANBgkqhkiG9w0BAQsF AAOCAQEAcGCbgjVGr8nOhySwRVNRfxYNVbsoZczSurXoTNzg8eQQvKTOAe7Xfk/+ iZc+YhORNSmGq4GAvf1zAQXxLXryofomKQDgyCEQoCLk4wKVoocPssdbMxI9+0+9 7U1Yn9EwJoMIwuuFs0VvuoDOROSG5Nj9J+OaMDCY8Dc86dxl7mhL/cCALchXvsYD lGduV+7vqsEll6o2ejfFlEdBHmwIiC2yc5vfJE/t+o5hwXGk/9ZHr8M2IXzqIEgS smn8OqRpzptxcmBCZr5VvRESV90Kkvz2gE5G46lYpp+h6OZfan9L9M4f07yYGxix E8bGn6S+69a6yPWSTWbkyZ6LaKGN5Q== -----END CERTIFICATE-----Generated at Wed Aug 13 04:31:30 2025 by rpki-client