$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer File: q8wu6vrqrw1E480gBAmZ7T6LblY.cer (raw, json) Hash identifier: mJiqNInObecSlr9Teovv0tc0x+azXhqTa96RUQ3sXNw= Subject key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:14:42 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 103.20.160.0/22 IP: 150.242.244.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55570 (0xd912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:14:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:aa:16:47:15:70:b5:be:06:de:4a:d6:11: a1:38:c8:75:fd:5e:0f:86:9d:e0:e6:22:42:c1:f6: 3e:7e:04:38:0a:f2:2c:b3:10:5b:89:38:43:0e:1d: e2:9d:9b:d2:3b:1d:22:25:42:38:cc:92:10:85:28: f6:9d:7d:de:d3:e9:5e:7a:4f:74:ec:1c:66:be:1b: db:45:6d:9a:d7:1b:35:39:59:cb:57:ec:b8:de:dd: 18:f2:56:d0:e3:5c:22:ed:aa:75:f6:74:2f:82:1f: b5:96:81:fd:58:09:40:cc:61:e5:c6:7b:87:21:ff: 15:07:d8:33:d4:80:fe:47:13:2e:44:23:10:cf:11: 5d:93:db:9a:65:6e:fa:99:ee:f3:98:e3:e1:f6:c3: 68:a8:9d:01:55:f6:e2:4a:e9:9c:36:d2:65:b2:17: 2c:6f:80:d4:7f:0a:f4:23:df:8a:b6:73:c3:92:21: 47:54:23:f3:39:ad:15:ac:e9:0a:d1:97:e6:86:73: f4:c6:1c:00:42:29:5c:26:81:95:34:8b:56:be:29: a5:f1:52:35:d9:65:10:f7:76:39:aa:f7:42:a9:43: 74:92:c9:f3:70:95:0d:03:a3:7a:15:a1:7a:69:09: 5a:c4:2a:30:38:3d:e3:f9:cd:61:2d:af:35:d2:9b: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.20.160.0/22 150.242.244.0/22 Signature Algorithm: sha256WithRSAEncryption 74:05:0d:ad:72:e4:13:a2:bf:19:ca:d5:6c:1e:c9:8a:2e:8e: 48:29:bc:3c:fa:e7:10:13:a7:d8:a0:60:eb:31:ad:6d:7b:25: b9:6f:dc:f9:56:6c:40:22:ea:94:bd:5f:a0:ba:63:25:e6:2e: b2:59:a7:fd:f9:fb:45:c1:6a:f5:0b:bc:aa:9d:28:51:7e:14: 06:ec:09:f6:51:b3:af:ab:f8:49:8a:6a:ac:e4:cd:e4:c8:87: 75:55:99:ea:1d:f4:95:81:7f:a5:d3:d7:82:9e:60:55:a6:7e: 2e:47:78:de:0f:52:da:03:54:cc:61:21:4c:de:6e:b9:68:c9: d0:4f:32:f9:66:96:e0:ea:4a:5f:96:5e:49:a9:c7:0d:38:9f: 95:78:d3:b5:64:ad:47:88:0b:4d:cd:ae:bf:91:af:16:d4:f8: 50:f5:40:42:15:bf:ef:2c:21:9f:0f:e8:28:2e:60:f9:fb:db: ed:32:c8:44:9a:2f:38:a3:fa:fb:f0:e4:79:9f:bd:c3:b1:29: ef:7f:40:4f:50:13:39:35:b1:01:08:06:6c:83:ac:87:75:c1: cf:85:0e:10:14:09:4d:2b:0f:4b:f8:e3:b5:5a:b7:7c:6e:17: 9d:08:39:c5:8b:f2:52:d2:92:cc:fc:7e:db:de:3e:4b:04:37: 3f:f2:e9:0a -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDANkSMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE0NDJaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEFCQ0MyRUVBRkFFQUFGMEQ0NEUzQ0QyMDA0MDk5OUVEM0U4QjZF NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIKoWRxVwtb4G3krW EaE4yHX9Xg+GneDmIkLB9j5+BDgK8iyzEFuJOEMOHeKdm9I7HSIlQjjMkhCFKPad fd7T6V56T3TsHGa+G9tFbZrXGzU5WctX7Lje3RjyVtDjXCLtqnX2dC+CH7WWgf1Y CUDMYeXGe4ch/xUH2DPUgP5HEy5EIxDPEV2T25plbvqZ7vOY4+H2w2ionQFV9uJK 6Zw20mWyFyxvgNR/CvQj34q2c8OSIUdUI/M5rRWs6QrRl+aGc/TGHABCKVwmgZU0 i1a+KaXxUjXZZRD3djmq90KpQ3SSyfNwlQ0Do3oVoXppCVrEKjA4PeP5zWEtrzXS m7l1AgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUq8wu6vrqrw1E480gBAmZ7T6LblYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMxNy9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZxSgAwQClvL0MA0GCSqGSIb3 DQEBCwUAA4IBAQB0BQ2tcuQTor8ZytVsHsmKLo5IKbw8+ucQE6fYoGDrMa1teyW5 b9z5VmxAIuqUvV+gumMl5i6yWaf9+ftFwWr1C7yqnShRfhQG7An2UbOvq/hJimqs 5M3kyId1VZnqHfSVgX+l09eCnmBVpn4uR3jeD1LaA1TMYSFM3m65aMnQTzL5Zpbg 6kpfll5JqccNOJ+VeNO1ZK1HiAtNza6/ka8W1PhQ9UBCFb/vLCGfD+goLmD5+9vt MshEmi84o/r78OR5n73DsSnvf0BPUBM5NbEBCAZsg6yHdcHPhQ4QFAlNKw9L+OO1 Wrd8bhedCDnFi/JS0pLM/H7b3j5LBDc/8ukK -----END CERTIFICATE-----Generated at Wed Aug 13 05:59:19 2025 by rpki-client