$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer File: dLHNkLnEHIANH1u3AQiWQC4auU4.cer (raw, json) Hash identifier: dc4xHaWJ8ebO5nsioYXUAhb0IxaCly3x0J5VDsCimTE= Subject key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3FF9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:16:48 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.250.160.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16377 (0x3ff9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:16:48 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:32:2e:35:d4:25:d1:07:b6:e7:80:58:0f: 4b:e0:25:6e:c6:41:76:6a:71:f0:cb:6c:b0:3a:b3: 16:a2:0a:19:f8:c1:fc:2c:8a:f1:e4:66:6d:00:91: f6:b1:bf:41:5a:d4:83:18:86:9b:4e:d6:6e:7f:ed: 6a:fe:03:4c:a7:f6:ae:8f:ce:bf:90:1a:0d:bc:a8: 11:71:78:aa:0f:f8:35:5c:54:e6:fd:88:bb:d3:72: f2:7c:c2:b6:e0:d5:90:b8:8f:19:83:73:5c:a8:79: 1d:af:ec:3e:35:00:9c:81:4a:30:93:1f:33:52:b7: a2:86:b3:53:63:4d:47:a5:ad:55:2c:d9:cf:25:26: 92:b4:ba:13:24:a4:42:e9:d8:23:c3:1c:ab:3d:d5: 97:47:00:bf:b5:3f:9c:f2:3f:8b:db:88:b1:42:8c: 55:00:c7:43:23:e2:d9:89:9d:a8:d1:f4:09:70:03: 92:72:9e:fc:c6:b9:be:7e:10:57:c3:84:42:67:9b: ef:fc:b6:ea:c2:36:7e:1c:ce:be:94:bb:19:d7:fd: 06:aa:4f:c5:61:de:5f:1a:6a:ab:3e:28:c4:b6:eb: a1:d9:5f:19:55:84:86:54:a7:f4:45:6a:9b:cf:44: 83:94:3a:34:a1:a2:ef:64:12:4b:1c:22:30:f6:e4: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.160.0/23 Signature Algorithm: sha256WithRSAEncryption 29:00:ce:72:a2:39:36:0a:cc:ef:c7:66:50:53:30:c7:8b:0a: 7a:c1:46:77:1e:8f:f7:4f:69:97:3d:6e:dc:35:69:73:b4:4c: 15:3d:09:ff:83:12:0c:d5:f1:c5:1e:31:6e:22:f2:ad:76:c7: 30:8c:97:c4:70:e0:b5:7c:27:18:96:7a:27:52:f1:95:b4:37: e0:2f:79:c5:db:bf:84:fd:98:ac:73:50:f2:44:71:66:8c:4f: 3c:c6:12:08:bf:3e:ff:6c:79:7e:4c:05:a1:01:cc:40:8b:33: 22:f1:91:3f:57:58:b8:12:ae:04:c1:63:77:ee:0f:01:f3:4f: 61:49:83:28:30:d5:35:f4:c6:a0:23:53:bb:bb:be:c0:69:fc: 86:ba:bf:75:35:19:b5:dc:a7:26:ab:6f:f8:4c:75:e4:b5:38: 1b:cd:93:ed:a1:63:ec:1d:59:16:7c:67:e1:4c:5c:c7:14:b9: c4:19:7d:71:33:9e:86:2b:6f:f3:02:2a:be:62:39:8a:7d:34: 02:09:93:bb:8a:40:28:c8:ce:eb:7b:5d:9f:b3:65:ba:7e:2b: 04:00:48:d8:1a:37:c9:fc:d2:ba:cd:54:45:6d:83:74:3a:ca: 4c:07:b4:de:d9:d2:a0:37:47:fb:56:db:c7:0b:6e:4d:e4:b9: 70:40:45:90 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICP/kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTY0OFoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoNzRCMUNEOTBCOUM0MUM4MDBEMUY1QkI3MDEwODk2NDAyRTFBQjk0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxXMi411CXRB7bngFgP S+AlbsZBdmpx8MtssDqzFqIKGfjB/CyK8eRmbQCR9rG/QVrUgxiGm07Wbn/tav4D TKf2ro/Ov5AaDbyoEXF4qg/4NVxU5v2Iu9Ny8nzCtuDVkLiPGYNzXKh5Ha/sPjUA nIFKMJMfM1K3ooazU2NNR6WtVSzZzyUmkrS6EySkQunYI8Mcqz3Vl0cAv7U/nPI/ i9uIsUKMVQDHQyPi2YmdqNH0CXADknKe/Ma5vn4QV8OEQmeb7/y26sI2fhzOvpS7 Gdf9BqpPxWHeXxpqqz4oxLbrodlfGVWEhlSn9EVqm89Eg5Q6NKGi72QSSxwiMPbk 3b0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR0sc2QucQcgA0fW7cBCJZALhq5TjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzM1L2RMSE5rTG5FSElBTkgxdTNBUWlXUUM0YXVVNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+qAwDQYJKoZIhvcNAQELBQAD ggEBACkAznKiOTYKzO/HZlBTMMeLCnrBRncej/dPaZc9btw1aXO0TBU9Cf+DEgzV 8cUeMW4i8q12xzCMl8Rw4LV8JxiWeidS8ZW0N+AvecXbv4T9mKxzUPJEcWaMTzzG Egi/Pv9seX5MBaEBzECLMyLxkT9XWLgSrgTBY3fuDwHzT2FJgygw1TX0xqAjU7u7 vsBp/Ia6v3U1GbXcpyarb/hMdeS1OBvNk+2hY+wdWRZ8Z+FMXMcUucQZfXEznoYr b/MCKr5iOYp9NAIJk7uKQCjIzut7XZ+zZbp+KwQASNgaN8n80rrNVEVtg3Q6ykwH tN7Z0qA3R/tW28cLbk3kuXBARZA= -----END CERTIFICATE-----Generated at Mon Aug 11 07:44:03 2025 by rpki-client