$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer File: OhKB4chqonCKPXLu7o4bJCP-wqg.cer (raw, json) Hash identifier: QQoixGnCvbqhrI9DTKIgsvBhFcngBpPVLjVRZGe6sRM= Subject key identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 25 Jun 2025 01:54:01 +0000 Certificate not after: Thu 25 Jun 2026 01:38:52 +0000 Subordinate resources: AS: 151260 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54609 (0xd551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jun 25 01:54:01 2025 GMT Not After : Jun 25 01:38:52 2026 GMT Subject: CN=3A1281E1C86AA2708A3D72EEEE8E1B2423FEC2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:4d:14:3b:f7:e6:5b:82:13:76:ea:b6:1d: 92:6b:6a:17:2a:79:27:7f:be:1d:d6:f8:ea:99:b7: f1:2e:d4:54:af:58:b1:45:49:c9:e5:4c:18:db:a0: 98:e2:bb:e5:ce:7a:7f:5c:31:8d:8d:9e:27:4f:e8: 18:83:c2:bb:40:5b:2d:19:d1:c0:c2:77:1f:d5:24: 42:35:65:96:30:a5:a7:56:fe:a6:5e:d8:00:11:13: 73:39:d5:eb:d6:db:bf:f0:c7:ce:2c:a0:40:c2:87: 72:30:45:f7:06:0a:fc:8d:83:d2:a7:f0:e3:a6:4b: 46:7e:93:fe:5e:f8:e3:d5:c5:4a:fe:36:77:72:e3: 9c:13:5a:f6:76:a5:f2:9a:a1:c8:54:33:34:f5:f0: a7:23:d0:dc:90:46:09:2e:be:54:a0:ff:e0:70:27: c5:7d:d7:7e:a0:af:62:0b:d4:f1:f6:f0:3e:d9:28: 6c:de:54:45:cd:88:89:16:59:b7:3b:fd:44:92:59: ed:2e:21:d2:09:69:c8:db:11:d8:84:46:2d:48:ec: 32:bc:0b:0d:85:71:db:d8:d5:32:ae:a4:dc:70:40: 63:57:0b:21:23:af:13:7f:3f:41:28:6c:92:53:8c: 0d:11:74:0d:7c:89:ca:84:c6:52:7e:71:69:f8:44: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151260 Signature Algorithm: sha256WithRSAEncryption 96:d0:ef:0f:83:32:a6:fe:04:98:03:fa:9d:14:fe:51:69:33: 77:dd:2d:a0:c2:4b:b2:4f:e7:43:a3:2a:4e:93:0a:5a:8e:a3: 7f:bf:c3:36:14:30:02:d5:87:48:dc:d8:da:ef:00:28:81:d7: 9e:3b:33:e8:c1:8c:5a:e2:f3:6d:39:f4:22:ce:75:fc:00:c3: 98:27:ba:11:cd:ac:f0:0f:db:60:70:77:65:16:58:17:ce:75: b9:b9:4f:ec:6f:73:b1:35:c7:ea:da:11:fe:7f:94:5f:58:05: 5a:4e:dd:e2:6f:32:66:8c:9d:09:8b:b5:8b:21:86:68:17:f1: af:d8:82:95:6e:8c:a1:36:80:db:82:c4:d4:28:80:6e:14:60: a6:c2:bf:0f:a4:fc:ee:8c:f4:6d:d7:ad:d0:3e:7d:c4:18:d4: 40:92:c7:ec:3c:6a:39:1d:d4:00:4a:86:21:df:74:43:13:74: 16:41:cf:f3:6c:90:ea:d8:79:bc:43:c1:0a:db:7d:c4:b2:47: fe:f6:cb:4f:08:d6:e3:48:21:7c:ae:40:3d:5a:8a:b8:98:56: c4:34:90:22:3b:04:21:14:b3:5b:20:dc:f0:5d:2f:8a:59:dd: 7f:c5:ed:93:e1:a6:b2:12:50:a1:de:e9:3b:5c:f5:27:97:2c: 62:77:45:5f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANVRMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA2MjUwMTU0MDFaFw0yNjA2MjUwMTM4NTJaMDMx MTAvBgNVBAMTKDNBMTI4MUUxQzg2QUEyNzA4QTNENzJFRUVFOEUxQjI0MjNGRUMy QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGk0UO/fmW4ITduq2 HZJrahcqeSd/vh3W+OqZt/Eu1FSvWLFFScnlTBjboJjiu+XOen9cMY2NnidP6BiD wrtAWy0Z0cDCdx/VJEI1ZZYwpadW/qZe2AARE3M51evW27/wx84soEDCh3IwRfcG CvyNg9Kn8OOmS0Z+k/5e+OPVxUr+Nndy45wTWvZ2pfKaochUMzT18Kcj0NyQRgku vlSg/+BwJ8V9136gr2IL1PH28D7ZKGzeVEXNiIkWWbc7/USSWe0uIdIJacjbEdiE Ri1I7DK8Cw2FcdvY1TKupNxwQGNXCyEjrxN/P0EobJJTjA0RdA18icqExlJ+cWn4 RDwrAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUOhKB4chqonCKPXLu7o4bJCP+wqgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3OC9PaEtCNGNocW9uQ0tQWEx1N280YkpDUC13cWcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO3DANBgkqhkiG9w0BAQsFAAOCAQEA ltDvD4Mypv4EmAP6nRT+UWkzd90toMJLsk/nQ6MqTpMKWo6jf7/DNhQwAtWHSNzY 2u8AKIHXnjsz6MGMWuLzbTn0Is51/ADDmCe6Ec2s8A/bYHB3ZRZYF851ublP7G9z sTXH6toR/n+UX1gFWk7d4m8yZoydCYu1iyGGaBfxr9iClW6MoTaA24LE1CiAbhRg psK/D6T87oz0bdet0D59xBjUQJLH7DxqOR3UAEqGId90QxN0FkHP82yQ6th5vEPB Ctt9xLJH/vbLTwjW40ghfK5APVqKuJhWxDSQIjsEIRSzWyDc8F0vilndf8Xtk+Gm shJQod7pO1z1J5csYndFXw== -----END CERTIFICATE-----Generated at Fri Jul 4 12:07:25 2025 by rpki-client