$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer File: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer (raw, json) Hash identifier: sJ6/CGmhxAC+pcGcAjvXI627rbxOejqnVRZo2fGRn5c= Subject key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D978 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:15:54 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 2401:a720::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55672 (0xd978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:15:54 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:ac:7b:83:c2:5c:5a:cd:e2:76:64:31:01: b6:81:2b:77:7b:7f:96:68:39:07:f3:31:75:86:f4: 95:ec:77:a2:6d:19:8d:8c:29:49:21:04:39:98:43: 2d:3c:6d:8d:eb:b3:08:c5:2a:7d:79:4e:63:22:38: fc:0a:8e:5a:e5:de:8a:8c:e9:61:d3:53:1b:76:38: f4:b9:18:98:b2:a1:8a:02:ba:fb:39:c8:3a:f4:ac: ed:73:e5:73:9a:35:45:10:26:b6:09:49:52:ec:29: 2a:ab:e8:cc:d4:df:6a:2a:d2:e3:56:61:76:69:26: b9:1a:0c:b9:b2:36:06:12:d3:40:d6:72:11:61:f7: ec:59:7e:dc:5b:9a:3d:0e:da:14:8e:40:da:68:37: a7:43:08:3f:d3:eb:7b:f2:7d:90:98:a4:c2:23:9a: a7:b1:d0:49:50:29:83:90:15:25:11:7d:20:90:72: 42:cf:cf:38:3d:76:a3:49:39:c1:f2:72:aa:39:ba: f3:cb:53:ed:ca:28:b3:74:6e:25:78:d6:02:e6:64: d8:24:92:82:34:f2:38:74:78:28:91:cf:f0:91:a7: d4:57:35:89:99:b8:83:e0:ed:a6:aa:64:30:18:36: 25:ac:36:65:dd:e4:ad:99:18:a0:fa:65:cb:81:a4: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:a720::/32 Signature Algorithm: sha256WithRSAEncryption 41:73:13:37:75:8c:dd:d0:8b:38:fa:a1:47:59:ca:25:79:0e: 81:4b:cc:99:92:08:17:4f:fd:ac:01:57:0e:d9:6f:60:f7:e8: 87:7f:0f:27:f7:fd:9b:38:63:e1:c1:ed:05:2e:2d:c4:4c:f0: f9:e4:ec:a6:5c:4a:05:4f:f4:81:67:63:1a:f9:bc:b2:cf:a7: 0f:4c:98:76:6d:79:71:43:ed:28:8d:be:5f:33:77:ec:4a:93: f3:e5:cd:0c:46:c8:c2:72:92:8c:77:90:17:20:96:2e:39:66: 69:17:f6:3c:0f:77:7f:e2:11:80:00:bc:eb:e2:da:84:35:83: 14:2c:fc:41:23:51:95:73:86:9f:35:53:56:28:8d:72:6a:fb: d6:b1:3f:7b:e8:32:41:f3:35:23:5d:f5:60:37:72:41:ff:c5: c2:ab:58:fe:fe:2e:ef:38:da:f8:08:6d:20:a5:36:9d:7f:36: a5:b9:c4:f7:4e:47:56:d3:4f:1b:22:6a:12:f6:e1:7e:59:e8: fb:95:6a:ab:65:34:45:13:cc:29:2f:e9:f0:4f:84:d2:32:5b: 1d:20:b2:5a:7e:11:4a:a3:6a:cd:e5:91:93:13:5a:3a:b4:f4: 2f:28:20:3a:bc:50:9f:c4:06:f9:60:29:ea:2f:f0:cd:83:d2: 2f:3e:77:0c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANl4MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE1NTRaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEFGOEE1NzFDMEM3Q0JBMzE5M0M3RTk0MUNGNDYzMURDMzMwMjNG RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4Kx7g8JcWs3idmQx AbaBK3d7f5ZoOQfzMXWG9JXsd6JtGY2MKUkhBDmYQy08bY3rswjFKn15TmMiOPwK jlrl3oqM6WHTUxt2OPS5GJiyoYoCuvs5yDr0rO1z5XOaNUUQJrYJSVLsKSqr6MzU 32oq0uNWYXZpJrkaDLmyNgYS00DWchFh9+xZftxbmj0O2hSOQNpoN6dDCD/T63vy fZCYpMIjmqex0ElQKYOQFSURfSCQckLPzzg9dqNJOcHycqo5uvPLU+3KKLN0biV4 1gLmZNgkkoI08jh0eCiRz/CRp9RXNYmZuIPg7aaqZDAYNiWsNmXd5K2ZGKD6ZcuB pA5lAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUr4pXHAx8ujGTx+lBz0Yx3DMCP9kw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy OTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI5My9yNHBYSEF4OHVqR1R4LWxCejBZeDNETUNQOWsubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGnIDANBgkqhkiG9w0BAQsF AAOCAQEAQXMTN3WM3dCLOPqhR1nKJXkOgUvMmZIIF0/9rAFXDtlvYPfoh38PJ/f9 mzhj4cHtBS4txEzw+eTsplxKBU/0gWdjGvm8ss+nD0yYdm15cUPtKI2+XzN37EqT 8+XNDEbIwnKSjHeQFyCWLjlmaRf2PA93f+IRgAC86+LahDWDFCz8QSNRlXOGnzVT ViiNcmr71rE/e+gyQfM1I131YDdyQf/FwqtY/v4u7zja+AhtIKU2nX82pbnE905H VtNPGyJqEvbhflno+5Vqq2U0RRPMKS/p8E+E0jJbHSCyWn4RSqNqzeWRkxNaOrT0 LyggOrxQn8QG+WAp6i/wzYPSLz53DA== -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:24 2025 by rpki-client