$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jJMxBDzLH-EZ8cLr4BxWx982ErY.cer File: jJMxBDzLH-EZ8cLr4BxWx982ErY.cer (raw, json) Hash identifier: 2PBmZ022Z5hKBPf4vOlx9b7k7l5mD5ia09yzcsiPRR0= Subject key identifier: 8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:12:37 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 110.173.96.0/19 IP: 202.173.224.0/19 IP: 211.148.128.0/19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55378 (0xd852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:12:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8C9331043CCB1FE119F1C2EBE01C56C7DF3612B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:8b:ea:85:4d:aa:e4:c7:13:27:38:a2:60: 25:f6:31:79:b5:03:71:85:15:6f:4e:7e:95:b2:96: 56:fb:6a:41:65:6f:07:d2:2c:80:04:67:e5:2a:61: e0:77:a3:3d:01:54:df:6c:7d:05:18:91:1e:43:7a: 23:cd:87:a0:b8:53:0c:c5:88:cd:61:20:34:40:f8: a0:1e:36:08:94:60:6c:00:13:49:f6:f7:a4:84:c8: ac:03:f2:fe:0f:27:16:d5:52:3b:a2:4e:49:8e:01: e6:ae:35:4d:b2:73:52:b6:4c:39:df:18:a8:21:22: b7:7e:60:dc:49:9d:c2:85:c8:10:37:5a:13:e5:22: 8d:57:dd:a7:80:c3:98:49:d3:82:c2:6e:58:7a:1d: 7c:0a:1d:ef:75:93:94:dd:23:6d:77:82:ec:88:66: a7:56:5a:18:c8:28:8c:84:23:9a:11:df:a1:7c:44: 5f:0b:f1:f4:ff:d6:9b:4f:8e:98:b4:90:97:2f:61: 4b:96:3a:ec:0e:ab:12:92:4a:5a:94:e9:b6:02:05: 63:62:9c:90:41:24:82:f8:83:b9:95:4a:35:1d:07: 93:06:c6:44:f7:98:69:fe:0c:d4:e8:85:3e:0b:df: 55:ae:7f:3a:4d:dd:77:dc:d3:68:43:d9:63:83:bf: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.173.96.0/19 202.173.224.0/19 211.148.128.0/19 Signature Algorithm: sha256WithRSAEncryption 18:66:da:a5:13:0b:f8:0f:88:7a:b6:09:5d:bc:e0:bb:13:e9: cb:d8:dc:90:71:e7:cb:ba:7a:88:f1:d0:02:6c:1f:01:3e:93: 7c:fa:25:e9:59:ed:bd:0c:3d:81:31:3d:ea:81:1c:4f:f9:24: 2c:68:bd:4a:5f:56:25:a3:43:e1:6b:1b:cb:91:29:e0:80:38: 00:ef:aa:d8:20:a4:32:e7:16:59:1e:e8:ac:c7:71:e1:b0:a2: 57:05:ab:86:1c:5f:49:0e:3c:33:2b:e5:1d:a0:08:73:bc:26: df:56:76:8a:0c:7e:77:52:60:8a:7d:14:5f:08:32:82:43:ac: 87:31:62:de:09:03:6b:8a:73:58:3e:46:f2:f3:44:0d:84:b1: ed:f3:e9:f1:c6:77:1c:50:99:14:32:ef:5c:84:2b:a4:63:1f: 32:82:ea:80:98:b1:5e:32:23:16:8e:22:bf:31:b0:31:11:96: 2c:ab:80:04:34:4c:b8:fd:d3:cf:bb:1f:64:f9:c3:c5:80:0a: 62:5c:98:b6:1a:fd:3e:57:f2:44:ad:65:7b:a0:4e:91:63:dc: 7d:1a:02:e7:1e:29:ff:78:8b:66:2e:1c:ab:7f:33:ab:09:4b: 95:ee:f8:41:88:55:e3:0b:50:67:4a:c0:3b:54:91:e7:e0:87: e3:35:17:19 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDANhSMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEyMzdaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDhDOTMzMTA0M0NDQjFGRTExOUYxQzJFQkUwMUM1NkM3REYzNjEy QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hIvqhU2q5McTJzii YCX2MXm1A3GFFW9OfpWyllb7akFlbwfSLIAEZ+UqYeB3oz0BVN9sfQUYkR5DeiPN h6C4UwzFiM1hIDRA+KAeNgiUYGwAE0n296SEyKwD8v4PJxbVUjuiTkmOAeauNU2y c1K2TDnfGKghIrd+YNxJncKFyBA3WhPlIo1X3aeAw5hJ04LCblh6HXwKHe91k5Td I213guyIZqdWWhjIKIyEI5oR36F8RF8L8fT/1ptPjpi0kJcvYUuWOuwOqxKSSlqU 6bYCBWNinJBBJIL4g7mVSjUdB5MGxkT3mGn+DNTohT4L31WufzpN3Xfc02hD2WOD v/AxAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUjJMxBDzLH+EZ8cLr4BxWx982ErYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1NC9qSk14QkR6TEgtRVo4Y0xyNEJ4V3g5ODJFclkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFbq1gAwQFyq3gAwQF05SAMA0G CSqGSIb3DQEBCwUAA4IBAQAYZtqlEwv4D4h6tgldvOC7E+nL2NyQcefLunqI8dAC bB8BPpN8+iXpWe29DD2BMT3qgRxP+SQsaL1KX1Ylo0PhaxvLkSnggDgA76rYIKQy 5xZZHuisx3HhsKJXBauGHF9JDjwzK+UdoAhzvCbfVnaKDH53UmCKfRRfCDKCQ6yH MWLeCQNrinNYPkby80QNhLHt8+nxxnccUJkUMu9chCukYx8yguqAmLFeMiMWjiK/ MbAxEZYsq4AENEy4/dPPux9k+cPFgApiXJi2Gv0+V/JErWV7oE6RY9x9GgLnHin/ eItmLhyrfzOrCUuV7vhBiFXjC1BnSsA7VJHn4IfjNRcZ -----END CERTIFICATE-----Generated at Wed Aug 13 04:31:05 2025 by rpki-client