$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer File: OhKB4chqonCKPXLu7o4bJCP-wqg.cer (raw, json) Hash identifier: 8i69DDf+yZHi95msYQVzOl8oR1mjNJVE3OwD6poRG4M= Subject key identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D832 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:12:17 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 151260 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55346 (0xd832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:12:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=3A1281E1C86AA2708A3D72EEEE8E1B2423FEC2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:4d:14:3b:f7:e6:5b:82:13:76:ea:b6:1d: 92:6b:6a:17:2a:79:27:7f:be:1d:d6:f8:ea:99:b7: f1:2e:d4:54:af:58:b1:45:49:c9:e5:4c:18:db:a0: 98:e2:bb:e5:ce:7a:7f:5c:31:8d:8d:9e:27:4f:e8: 18:83:c2:bb:40:5b:2d:19:d1:c0:c2:77:1f:d5:24: 42:35:65:96:30:a5:a7:56:fe:a6:5e:d8:00:11:13: 73:39:d5:eb:d6:db:bf:f0:c7:ce:2c:a0:40:c2:87: 72:30:45:f7:06:0a:fc:8d:83:d2:a7:f0:e3:a6:4b: 46:7e:93:fe:5e:f8:e3:d5:c5:4a:fe:36:77:72:e3: 9c:13:5a:f6:76:a5:f2:9a:a1:c8:54:33:34:f5:f0: a7:23:d0:dc:90:46:09:2e:be:54:a0:ff:e0:70:27: c5:7d:d7:7e:a0:af:62:0b:d4:f1:f6:f0:3e:d9:28: 6c:de:54:45:cd:88:89:16:59:b7:3b:fd:44:92:59: ed:2e:21:d2:09:69:c8:db:11:d8:84:46:2d:48:ec: 32:bc:0b:0d:85:71:db:d8:d5:32:ae:a4:dc:70:40: 63:57:0b:21:23:af:13:7f:3f:41:28:6c:92:53:8c: 0d:11:74:0d:7c:89:ca:84:c6:52:7e:71:69:f8:44: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151260 Signature Algorithm: sha256WithRSAEncryption ab:3f:94:af:12:55:30:77:22:80:c5:ef:9b:82:14:9a:fd:4a: 8d:ec:d0:47:3c:9a:13:9e:03:14:5d:09:8b:93:57:fb:41:15: 60:b5:ad:c2:a7:8d:b3:64:8d:51:44:76:59:01:a1:74:48:ce: 20:67:58:6d:6e:6f:91:6f:eb:87:2f:fd:7a:0e:dd:77:23:38: db:e1:52:13:88:4f:fe:5f:6c:4d:67:e4:0e:b9:29:d7:e4:32: c0:bd:10:b0:1e:0b:f6:6f:91:9d:61:c0:01:3f:56:85:01:d0: 7f:04:f5:fd:3c:29:6e:12:00:59:ba:cf:48:ab:19:f5:65:73: bd:4e:61:57:5d:ea:5e:d9:62:e5:1e:09:20:6e:d0:56:57:1c: 7a:66:ae:b6:5c:6e:66:c4:83:b8:59:c8:69:20:7c:5c:63:22: 67:a3:c9:d9:60:eb:81:6a:7d:b3:ab:5b:9f:9b:e2:6d:25:b5: 23:85:25:a2:91:7d:ff:eb:2a:5a:7a:12:88:3c:3c:20:85:f5: 06:ce:5b:c6:db:b2:a8:76:6f:be:6e:35:5b:3d:ce:b3:d6:c8: 17:e7:58:4f:d1:af:0c:dd:0d:0c:33:80:45:32:ea:67:c6:5b: 03:28:24:8f:1d:6e:63:37:af:4b:7c:4d:7c:41:38:1f:f4:07: bf:df:d0:ed -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANgyMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEyMTdaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDNBMTI4MUUxQzg2QUEyNzA4QTNENzJFRUVFOEUxQjI0MjNGRUMy QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGk0UO/fmW4ITduq2 HZJrahcqeSd/vh3W+OqZt/Eu1FSvWLFFScnlTBjboJjiu+XOen9cMY2NnidP6BiD wrtAWy0Z0cDCdx/VJEI1ZZYwpadW/qZe2AARE3M51evW27/wx84soEDCh3IwRfcG CvyNg9Kn8OOmS0Z+k/5e+OPVxUr+Nndy45wTWvZ2pfKaochUMzT18Kcj0NyQRgku vlSg/+BwJ8V9136gr2IL1PH28D7ZKGzeVEXNiIkWWbc7/USSWe0uIdIJacjbEdiE Ri1I7DK8Cw2FcdvY1TKupNxwQGNXCyEjrxN/P0EobJJTjA0RdA18icqExlJ+cWn4 RDwrAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUOhKB4chqonCKPXLu7o4bJCP+wqgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3OC9PaEtCNGNocW9uQ0tQWEx1N280YkpDUC13cWcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO3DANBgkqhkiG9w0BAQsFAAOCAQEA qz+UrxJVMHcigMXvm4IUmv1KjezQRzyaE54DFF0Ji5NX+0EVYLWtwqeNs2SNUUR2 WQGhdEjOIGdYbW5vkW/rhy/9eg7ddyM42+FSE4hP/l9sTWfkDrkp1+QywL0QsB4L 9m+RnWHAAT9WhQHQfwT1/TwpbhIAWbrPSKsZ9WVzvU5hV13qXtli5R4JIG7QVlcc emautlxuZsSDuFnIaSB8XGMiZ6PJ2WDrgWp9s6tbn5vibSW1I4UlopF9/+sqWnoS iDw8IIX1Bs5bxtuyqHZvvm41Wz3Os9bIF+dYT9GvDN0NDDOARTLqZ8ZbAygkjx1u YzevS3xNfEE4H/QHv9/Q7Q== -----END CERTIFICATE-----Generated at Wed Aug 13 04:31:04 2025 by rpki-client