$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer File: RA0YjgN6sufC2lviztymGqt4xaM.cer (raw, json) Hash identifier: aWW0InFStkHbX4Ae3vhMXdGlC3WVAsA3pSqd65EjEds= Subject key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3FC7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:15:01 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.30.196.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16327 (0x3fc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:15:01 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:78:64:4f:5f:ff:1d:05:d2:28:4a:1f:22: 01:12:3e:88:89:a9:da:1e:8e:d2:e0:c0:20:83:e2: da:5c:18:76:c4:7d:eb:a0:28:27:28:41:2d:b1:cd: c0:c6:bf:b5:ad:d7:1b:b1:a2:c8:17:a5:3d:d1:cb: b5:fa:ff:8b:3a:af:64:3b:89:28:48:9f:9f:32:33: bb:cc:21:dd:29:8c:cc:f8:d3:b8:a7:51:9c:53:73: dc:23:8d:88:aa:70:43:f6:1e:89:05:52:9d:5c:d5: 97:29:25:be:b2:83:c5:47:e9:c2:c6:b1:cd:14:f0: 0d:98:c2:ab:0e:3a:3d:47:87:80:45:66:e9:49:42: a8:f3:f6:72:b1:52:2c:61:43:70:4d:22:5f:02:0d: 3e:bd:0d:fe:9f:1a:e8:5d:4a:28:c6:d7:ff:89:92: c9:6c:91:76:c4:7e:ff:52:b9:e4:65:0b:1c:8e:11: a9:b0:88:17:6c:43:52:9a:b6:c2:47:65:e0:bf:d6: 85:61:2c:29:af:b3:0f:30:63:77:f3:04:6c:49:fc: 58:3b:9a:76:37:d2:40:d7:a4:f2:fc:93:f0:27:9b: 3c:43:f7:f0:6e:59:f5:10:97:37:de:3a:e0:fe:3d: ff:f4:bb:72:a0:1a:b2:a3:c9:1b:79:ec:10:72:7b: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.196.0/23 Signature Algorithm: sha256WithRSAEncryption a0:54:bd:92:32:94:d8:74:e3:76:91:b4:b1:c9:d9:78:34:a8: 40:da:2d:aa:8c:8d:6b:5c:c5:da:92:cc:40:d1:16:d3:75:2e: d8:47:7a:a6:2a:94:40:3e:f6:dd:20:80:ff:31:84:6b:5f:3f: 85:2a:56:e2:5e:ea:69:cf:90:fe:42:8c:59:f4:9a:b1:3f:a3: 3f:1b:78:99:af:9c:48:f3:95:54:47:d8:74:83:88:86:eb:e6: 0a:1e:54:c8:6e:b1:1b:85:c9:e3:6b:81:df:a4:1c:2d:a4:15: 6b:0f:d2:64:a4:e9:66:1a:a1:01:0a:f1:21:8c:be:9a:0b:ee: 25:8f:f1:79:ce:86:0c:78:91:0e:ec:c1:b4:7f:7f:1b:32:35: 74:f4:6a:58:cc:59:dd:c5:49:90:24:59:37:ac:1d:d1:cd:5c: a4:06:fe:05:23:81:68:bc:a9:d8:99:4c:50:6c:66:85:2e:0b: 43:6b:5f:ed:50:ae:c0:59:2c:e1:e0:18:a5:6d:3c:0b:8a:c1: 46:91:42:54:49:f4:4b:a1:f7:5b:ba:74:4b:07:40:cb:27:ba: c1:09:27:69:aa:41:2f:4f:e7:60:f1:57:b4:ad:ec:27:38:9e: f8:fb:9a:0b:7f:5c:41:19:60:f0:7a:6d:65:03:1d:e5:a3:9d: 3f:8b:88:79 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICP8cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTUwMVoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoNDQwRDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVB MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTOeGRPX/8dBdIoSh8i ARI+iImp2h6O0uDAIIPi2lwYdsR966AoJyhBLbHNwMa/ta3XG7GiyBelPdHLtfr/ izqvZDuJKEifnzIzu8wh3SmMzPjTuKdRnFNz3CONiKpwQ/YeiQVSnVzVlyklvrKD xUfpwsaxzRTwDZjCqw46PUeHgEVm6UlCqPP2crFSLGFDcE0iXwINPr0N/p8a6F1K KMbX/4mSyWyRdsR+/1K55GULHI4RqbCIF2xDUpq2wkdl4L/WhWEsKa+zDzBjd/ME bEn8WDuadjfSQNek8vyT8CebPEP38G5Z9RCXN9464P49//S7cqAasqPJG3nsEHJ7 IFcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBREDRiOA3qy58LaW+LO3KYaq3jFozAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzEzL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHsQwDQYJKoZIhvcNAQELBQAD ggEBAKBUvZIylNh043aRtLHJ2Xg0qEDaLaqMjWtcxdqSzEDRFtN1LthHeqYqlEA+ 9t0ggP8xhGtfP4UqVuJe6mnPkP5CjFn0mrE/oz8beJmvnEjzlVRH2HSDiIbr5goe VMhusRuFyeNrgd+kHC2kFWsP0mSk6WYaoQEK8SGMvpoL7iWP8XnOhgx4kQ7swbR/ fxsyNXT0aljMWd3FSZAkWTesHdHNXKQG/gUjgWi8qdiZTFBsZoUuC0NrX+1QrsBZ LOHgGKVtPAuKwUaRQlRJ9Euh91u6dEsHQMsnusEJJ2mqQS9P52DxV7St7Cc4nvj7 mgt/XEEZYPB6bWUDHeWjnT+LiHk= -----END CERTIFICATE-----Generated at Mon Aug 11 13:03:15 2025 by rpki-client