$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Um3mirHCXqVTIWuhLuNonNVrlkU.cer File: Um3mirHCXqVTIWuhLuNonNVrlkU.cer (raw, json) Hash identifier: T7w3UZeMtw2V0mpyM1nwM54x1jg5GcjYRT0Y3SnTMMk= Subject key identifier: 52:6D:E6:8A:B1:C2:5E:A5:53:21:6B:A1:2E:E3:68:9C:D5:6B:96:45 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:14:33 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 2405:5d40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55558 (0xd906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:14:33 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=526DE68AB1C25EA553216BA12EE3689CD56B9645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:66:98:72:36:42:8e:20:ec:8e:8e:bb:b5: be:80:d4:0f:09:d1:8d:c3:ff:3a:7b:22:87:44:f4: 21:5f:7a:24:cc:c1:a3:89:4e:54:31:3e:65:f0:cd: f4:df:bf:0b:32:ce:91:1e:c4:41:ee:cd:cb:9c:51: 18:7c:4c:0d:fc:dd:b5:41:b5:c9:9f:f6:72:37:4e: f9:d0:d6:3c:d8:93:5b:0f:12:b3:0b:73:21:e4:29: 2e:4f:60:fc:b2:a7:c4:f1:16:f6:2f:b5:6e:aa:87: b8:69:4d:1c:27:90:2f:a9:e8:19:e4:55:bf:e1:70: a7:da:2d:f3:48:2b:aa:23:bc:a6:ba:4c:3d:99:04: 6a:95:1e:d1:d1:cd:e9:68:0e:26:5c:fd:46:e0:07: 1b:b4:35:9d:6e:f0:46:00:86:ae:a6:85:79:97:99: e3:01:bc:44:bc:90:b7:e1:fa:f1:69:72:f9:0b:2d: 20:92:c8:b5:93:ae:0b:46:9c:73:ca:31:9d:a4:bb: c9:e8:e3:a1:65:63:39:39:dd:27:9f:57:dc:8b:dd: 9b:20:e2:55:88:b3:95:3f:91:3d:e6:e3:ff:08:fa: e9:cb:77:cd:d8:da:86:83:dc:34:c3:09:e0:07:e0: fa:2e:a5:dc:30:35:6b:6c:8b:0d:41:59:a2:3f:d1: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:E6:8A:B1:C2:5E:A5:53:21:6B:A1:2E:E3:68:9C:D5:6B:96:45 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:5d40::/32 Signature Algorithm: sha256WithRSAEncryption 37:e0:a4:d9:cd:d9:8f:ac:18:9c:a9:06:c3:ce:c4:38:65:f9: 07:0a:57:8c:d9:43:b2:ff:12:50:69:0c:b0:8f:99:86:91:45: 63:1a:b6:fc:3f:d8:39:1d:ac:2f:36:17:b1:7e:71:5e:f1:e7: f5:f5:2c:02:eb:8b:ac:59:7a:cc:e7:b0:3a:1d:ed:2a:38:09: 41:a0:8f:9c:a6:90:2a:45:3b:7e:51:18:b8:5c:98:88:89:1a: 1f:1b:a0:0c:96:ef:a9:5a:a9:7e:97:d8:69:c3:5a:62:d9:93: b5:03:79:55:85:de:16:35:78:61:d4:75:18:8c:02:e7:b2:6b: 0a:09:9d:c1:71:fb:75:18:9b:18:74:1a:d3:47:58:15:b3:a1: 79:43:e4:13:60:70:cf:7d:af:79:c7:cd:6d:d7:d1:01:4e:19: 8b:b7:06:ea:be:26:1a:11:ee:3f:0b:b3:9e:13:3a:9a:c7:44: 7b:ea:d5:cc:a2:fe:51:f5:ac:be:21:cb:52:b2:ef:a4:27:a4: bd:23:7d:42:a5:b9:cc:f5:10:1c:7a:53:b5:cf:c7:23:47:fd: f7:01:8d:23:36:d0:8d:b7:7d:65:6d:9b:a8:74:69:f7:db:e9: 69:ef:87:55:a6:ba:d3:09:7b:04:4d:ff:e7:3c:fc:12:35:96: f8:b2:93:4c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANkGMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE0MzNaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDUyNkRFNjhBQjFDMjVFQTU1MzIxNkJBMTJFRTM2ODlDRDU2Qjk2 NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoWaYcjZCjiDsjo67 tb6A1A8J0Y3D/zp7IodE9CFfeiTMwaOJTlQxPmXwzfTfvwsyzpEexEHuzcucURh8 TA383bVBtcmf9nI3TvnQ1jzYk1sPErMLcyHkKS5PYPyyp8TxFvYvtW6qh7hpTRwn kC+p6BnkVb/hcKfaLfNIK6ojvKa6TD2ZBGqVHtHRzeloDiZc/UbgBxu0NZ1u8EYA hq6mhXmXmeMBvES8kLfh+vFpcvkLLSCSyLWTrgtGnHPKMZ2ku8no46FlYzk53Sef V9yL3Zsg4lWIs5U/kT3m4/8I+unLd83Y2oaD3DTDCeAH4PoupdwwNWtsiw1BWaI/ 0bGXAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUUm3mirHCXqVTIWuhLuNonNVrlkUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4Ni9VbTNtaXJIQ1hxVlRJV3VoTHVOb25OVnJsa1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAVdQDANBgkqhkiG9w0BAQsF AAOCAQEAN+Ck2c3Zj6wYnKkGw87EOGX5BwpXjNlDsv8SUGkMsI+ZhpFFYxq2/D/Y OR2sLzYXsX5xXvHn9fUsAuuLrFl6zOewOh3tKjgJQaCPnKaQKkU7flEYuFyYiIka HxugDJbvqVqpfpfYacNaYtmTtQN5VYXeFjV4YdR1GIwC57JrCgmdwXH7dRibGHQa 00dYFbOheUPkE2Bwz32vecfNbdfRAU4Zi7cG6r4mGhHuPwuznhM6msdEe+rVzKL+ UfWsviHLUrLvpCekvSN9QqW5zPUQHHpTtc/HI0f99wGNIzbQjbd9ZW2bqHRp99vp ae+HVaa60wl7BE3/5zz8EjWW+LKTTA== -----END CERTIFICATE-----Generated at Wed Aug 13 04:31:41 2025 by rpki-client