$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer File: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer (raw, json) Hash identifier: mYPxVO+xnpJJTg1617VBna1RtqZINMPbzKGOsN1mh0g= Subject key identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3FFD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:17:25 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 160.250.18.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16381 (0x3ffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Aug 3 09:17:25 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:9e:d0:a5:e8:89:a4:75:9a:77:bd:ae:17: 74:28:46:ff:5c:2c:70:c3:7c:49:7e:79:99:7d:59: 0f:27:4c:26:43:73:72:80:db:52:88:51:35:4f:2a: 27:a3:d4:57:f2:b2:b5:2b:3a:bd:ad:56:0d:12:f9: 25:3f:37:16:8a:ff:28:b3:a8:3c:64:82:7e:7b:f8: 0c:b7:0c:39:fb:e8:5f:19:49:89:9d:b5:f7:30:a3: c3:71:3d:73:5b:30:fd:86:ec:ae:e3:06:85:87:91: 46:a1:11:65:75:26:4e:21:19:48:47:40:69:2a:32: 43:76:0b:60:75:7b:c5:9a:9e:38:bd:bc:eb:c2:8d: 40:b7:64:1d:c0:d6:a8:10:76:e8:ef:3b:1f:d7:6f: 64:d3:f6:67:61:bc:d9:7c:c7:7e:07:80:ad:db:f6: 16:4f:48:a5:25:6b:e2:7e:d7:8f:e3:88:aa:61:d6: ef:e2:18:d2:2f:72:0b:aa:eb:23:7f:07:c8:81:19: f0:44:1f:5a:3d:53:27:ba:eb:0a:03:69:b7:c7:5b: 18:cd:67:0b:9d:3e:72:e5:65:d4:ec:0b:70:1d:e2: ef:2f:44:36:59:cb:b7:e0:59:2c:eb:d6:5c:34:c3: d6:42:d9:c4:40:78:0d:db:aa:b1:98:b0:87:42:b5: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.18.0/23 Signature Algorithm: sha256WithRSAEncryption 92:f6:c0:dd:f8:48:ba:3f:e6:75:62:d7:fa:50:b3:2f:93:4f: 5e:32:b3:ba:d4:84:11:64:21:de:2e:28:ed:a2:18:a7:0f:49: fa:d8:a3:84:0a:b6:a2:d5:10:dc:d7:9a:8b:a7:14:fc:d8:57: 79:71:0d:73:12:b5:1e:76:c4:9e:1b:35:f5:98:22:74:66:9d: f7:fb:79:9e:b1:45:24:20:b3:95:73:f1:41:ee:0b:b5:7e:61: aa:e8:cd:16:4a:d3:b3:02:68:1e:d3:35:b2:07:e4:a4:f4:6f: fc:c8:12:58:a1:c9:1b:7d:b2:37:62:19:27:04:f5:26:da:d5: 84:7c:00:93:db:56:73:92:fe:55:3b:6e:f3:5b:6f:28:e8:ab: c1:d4:34:0b:4f:55:be:ff:d2:0c:fc:41:21:0a:fe:2b:8d:fc: 48:6b:df:47:26:08:10:90:8c:12:22:e2:27:28:45:4d:aa:18: 2b:95:a4:21:20:e0:4f:d2:41:84:ad:4a:4a:cd:1c:99:2a:1e: cd:2d:78:a3:0e:00:71:8e:11:97:c4:e8:3b:6d:8c:e4:42:9a: a0:c6:2c:7c:2d:01:62:1d:47:47:1c:9d:8f:93:4f:be:08:cc: 15:7b:75:11:e0:94:a0:88:3b:85:6f:05:32:f3:cc:8d:47:ab: f4:8b:32:1a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICP/0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDgwMzA5MTcyNVoXDTI2MDgwMzA4NDQ0MFowMzEx MC8GA1UEAxMoQ0UwNDc4RkFCRTkxOTZCNTREMEJEMUFBODRDQjM5MDczRDZDRjlG OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAODsntCl6ImkdZp3va4X dChG/1wscMN8SX55mX1ZDydMJkNzcoDbUohRNU8qJ6PUV/KytSs6va1WDRL5JT83 For/KLOoPGSCfnv4DLcMOfvoXxlJiZ219zCjw3E9c1sw/YbsruMGhYeRRqERZXUm TiEZSEdAaSoyQ3YLYHV7xZqeOL2868KNQLdkHcDWqBB26O87H9dvZNP2Z2G82XzH fgeArdv2Fk9IpSVr4n7Xj+OIqmHW7+IY0i9yC6rrI38HyIEZ8EQfWj1TJ7rrCgNp t8dbGM1nC50+cuVl1OwLcB3i7y9ENlnLt+BZLOvWXDTD1kLZxEB4DduqsZiwh0K1 U98CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTOBHj6vpGWtU0L0aqEyzkHPWz5+TAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzI5L3pnUjQtcjZSbHJWTkM5R3FoTXM1Qnoxcy1may5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+hIwDQYJKoZIhvcNAQELBQAD ggEBAJL2wN34SLo/5nVi1/pQsy+TT14ys7rUhBFkId4uKO2iGKcPSfrYo4QKtqLV ENzXmounFPzYV3lxDXMStR52xJ4bNfWYInRmnff7eZ6xRSQgs5Vz8UHuC7V+Yaro zRZK07MCaB7TNbIH5KT0b/zIElihyRt9sjdiGScE9Sba1YR8AJPbVnOS/lU7bvNb byjoq8HUNAtPVb7/0gz8QSEK/iuN/Ehr30cmCBCQjBIi4icoRU2qGCuVpCEg4E/S QYStSkrNHJkqHs0teKMOAHGOEZfE6DttjORCmqDGLHwtAWIdR0ccnY+TT74IzBV7 dRHglKCIO4VvBTLzzI1Hq/SLMho= -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:43 2025 by rpki-client