$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/USN2g1L_1eSeSpn0-TWAPoNb35Y.cer File: USN2g1L_1eSeSpn0-TWAPoNb35Y.cer (raw, json) Hash identifier: MrrK8ff12LkwlWj/EYI2cedyAndYkLVhH5KKo0mqg/M= Subject key identifier: 51:23:76:83:52:FF:D5:E4:9E:4A:99:F4:F9:35:80:3E:83:5B:DF:96 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3FC3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:14:55 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.30.40.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16323 (0x3fc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:14:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5123768352FFD5E49E4A99F4F935803E835BDF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:89:c8:6c:55:db:7b:1c:5e:78:7f:d0:a1: f3:cc:ce:c2:8c:04:b9:cd:82:e3:6a:41:c6:28:f0: 00:cb:33:b7:29:ab:14:ca:20:f9:e4:3a:c6:c2:d5: 74:ef:02:22:38:ca:d0:d2:cd:b8:65:0e:80:8c:60: 37:7a:9f:99:2a:67:33:35:16:f5:27:db:59:9f:71: fa:d9:8d:9a:ca:2f:5f:85:50:2d:6c:00:17:f6:d9: 85:51:9d:eb:8e:54:1b:5a:73:e7:c8:1e:72:bf:e3: 38:da:0e:8a:7b:35:b8:ee:bd:41:00:d1:d8:98:12: ff:f4:71:81:4d:9c:30:5d:cb:3f:c8:4f:ed:06:44: c0:96:cf:c3:29:e0:55:e2:9f:48:b0:de:9c:06:96: 2c:1c:d4:f1:40:20:1a:c6:68:5c:07:52:bd:c4:46: f3:36:85:fc:ad:c5:cf:de:72:51:60:48:86:a3:41: 11:4a:dc:9a:69:b4:fe:dd:41:a4:4c:41:72:b9:be: 91:bb:31:f0:ed:ed:4f:b6:57:32:a9:a8:a4:13:37: 68:46:ab:82:3d:9b:ec:ac:12:69:b9:1e:5c:ae:e6: 27:c2:93:18:c0:6c:52:8d:be:ea:20:5f:22:6b:38: 95:f7:d9:8e:20:3c:06:db:b7:7c:a2:70:0f:90:45: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:23:76:83:52:FF:D5:E4:9E:4A:99:F4:F9:35:80:3E:83:5B:DF:96 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/USN2g1L_1eSeSpn0-TWAPoNb35Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.40.0/23 Signature Algorithm: sha256WithRSAEncryption 37:ee:f2:be:97:d5:73:57:8a:4e:b2:47:da:60:7c:ff:40:21: 28:27:46:f9:39:b4:e1:28:7e:d4:c6:a7:62:af:57:86:f8:f0: e2:de:bf:30:63:e3:d8:33:50:67:d9:65:30:cf:81:da:a7:e9: c5:68:6b:74:f8:b0:d0:8f:3c:15:bf:a5:19:78:93:db:2e:70: 57:33:58:a3:01:e5:70:da:92:53:94:e4:89:38:aa:c1:42:35: bb:6b:88:8f:ff:eb:d2:f3:eb:e8:e0:f5:97:d2:64:01:b1:78: cd:d8:ce:69:64:72:08:fa:7f:54:c4:63:c1:a1:fc:9d:b1:c5: 58:4a:19:b7:10:23:a6:ed:11:4d:c0:05:41:34:18:34:7e:d3: 3a:e6:e4:22:98:79:71:1a:d1:df:0f:af:6b:99:9e:de:cb:82: bc:d3:ea:0b:87:ad:56:c3:fe:20:f2:99:50:7f:85:58:54:09: 37:3b:75:30:1c:f0:fe:85:43:da:07:9e:f9:c3:19:79:42:1c: 47:1d:e9:95:ea:6a:3f:ed:fd:d7:b6:b6:da:7d:e6:6e:fb:5a: d6:2e:c4:80:4a:16:62:04:c2:40:5a:5f:19:68:01:8b:b3:ee: cb:f5:ee:71:b1:57:41:96:a1:de:a8:09:01:87:fb:2e:dd:2f: 7f:7d:51:db -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICP8MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTQ1NVoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoNTEyMzc2ODM1MkZGRDVFNDlFNEE5OUY0RjkzNTgwM0U4MzVCREY5 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMY7ichsVdt7HF54f9Ch 88zOwowEuc2C42pBxijwAMsztymrFMog+eQ6xsLVdO8CIjjK0NLNuGUOgIxgN3qf mSpnMzUW9SfbWZ9x+tmNmsovX4VQLWwAF/bZhVGd645UG1pz58gecr/jONoOins1 uO69QQDR2JgS//RxgU2cMF3LP8hP7QZEwJbPwyngVeKfSLDenAaWLBzU8UAgGsZo XAdSvcRG8zaF/K3Fz95yUWBIhqNBEUrcmmm0/t1BpExBcrm+kbsx8O3tT7ZXMqmo pBM3aEargj2b7KwSabkeXK7mJ8KTGMBsUo2+6iBfIms4lffZjiA8Btu3fKJwD5BF CiECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRRI3aDUv/V5J5KmfT5NYA+g1vfljAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Ny8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzA3L1VTTjJnMUxfMWVTZVNwbjAtVFdBUG9OYjM1WS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHigwDQYJKoZIhvcNAQELBQAD ggEBADfu8r6X1XNXik6yR9pgfP9AISgnRvk5tOEoftTGp2KvV4b48OLevzBj49gz UGfZZTDPgdqn6cVoa3T4sNCPPBW/pRl4k9sucFczWKMB5XDaklOU5Ik4qsFCNbtr iI//69Lz6+jg9ZfSZAGxeM3Yzmlkcgj6f1TEY8Gh/J2xxVhKGbcQI6btEU3ABUE0 GDR+0zrm5CKYeXEa0d8Pr2uZnt7LgrzT6guHrVbD/iDymVB/hVhUCTc7dTAc8P6F Q9oHnvnDGXlCHEcd6ZXqaj/t/de2ttp95m77WtYuxIBKFmIEwkBaXxloAYuz7sv1 7nGxV0GWod6oCQGH+y7dL399Uds= -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:40 2025 by rpki-client