$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2GueAukE5bR2WU2yt5eONcp8HW4.cer File: 2GueAukE5bR2WU2yt5eONcp8HW4.cer (raw, json) Hash identifier: N1hPID3SZQSkut4zVO0Q2iG1W9F2bJ/04A+OCRq64gU= Subject key identifier: D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CE61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:14:16 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 151265 IP: 2401:e620::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52833 (0xce61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:14:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D86B9E02E904E5B476594DB2B7978E35CA7C1D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:18:be:33:4b:37:da:b1:66:21:23:eb:72: 3e:77:a3:ee:5a:64:d4:2e:d1:16:e4:93:40:e4:72: e3:18:ae:59:41:ef:9a:a0:3b:7f:f8:49:92:03:45: 12:f4:13:69:1d:a6:df:2d:0e:10:22:c8:df:93:32: 1e:31:3f:52:75:b2:6c:5a:cf:3b:3b:8c:86:32:30: 9f:82:7b:bd:19:33:46:75:2d:56:ce:51:29:c5:b6: ac:6d:63:62:28:b4:17:e9:37:bb:de:ee:e6:b6:dd: ad:9b:0d:1e:cd:be:b1:52:8d:0f:a1:3f:d7:69:5a: d8:0b:79:1b:9a:17:a8:e2:0a:b6:5e:5c:04:29:94: f8:34:24:60:fa:54:a0:61:50:c7:4c:1e:9a:d1:17: 95:e9:51:be:8b:89:ab:99:a5:12:c1:9d:14:92:4b: 00:76:24:e0:de:07:c7:72:47:00:0c:eb:80:dc:83: 2b:e6:8a:a0:cf:5b:b3:df:d9:24:05:a6:c4:a1:ad: 3f:d4:b0:88:69:b7:97:7d:36:2b:7d:bc:27:0c:1d: df:bc:1f:94:78:c6:80:d2:e8:ab:ed:1b:14:55:6f: 9f:4f:aa:a1:06:ee:0c:38:3a:b5:a5:01:14:c8:8f: 26:bd:7c:e3:cc:c1:ad:31:8a:3b:cb:e7:6e:a2:c9: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151265 sbgp-ipAddrBlock: critical IPv6: 2401:e620::/32 Signature Algorithm: sha256WithRSAEncryption 17:39:8a:55:04:ab:f4:6b:31:eb:0b:e6:13:ac:ba:08:88:de: e6:39:af:d6:eb:99:2b:ee:58:b0:91:ac:24:b6:30:85:98:1a: 90:ce:2f:c6:09:7a:34:f7:c2:0f:56:53:71:fb:27:5f:d9:31: 23:66:0d:a7:f4:ed:0b:42:d4:57:bf:ab:ee:ad:01:d3:bf:1b: 7b:26:15:62:9a:56:3c:ad:70:54:23:f7:19:7b:8e:a8:26:34: 63:a7:23:58:6f:7d:9f:84:eb:b1:15:88:1c:2f:63:fe:4a:80: 2d:e7:37:20:16:d2:b3:70:36:40:88:d4:4e:f0:55:05:73:4d: b2:73:cf:3b:d8:66:56:a7:cd:f5:54:64:df:7c:32:0b:d0:45: c1:63:52:5a:0a:3b:ba:d9:af:99:d4:29:2a:f2:2e:d3:57:d1: c6:7a:57:8f:4a:8a:f5:ef:ff:76:42:3f:37:bb:e8:17:35:53: 94:6b:f3:10:b5:4c:8b:5e:c5:6d:07:5f:57:36:e9:df:47:b2: 05:14:48:9e:4d:32:52:ca:7c:f8:b9:c2:2e:8b:a9:fd:d7:5f: 15:35:ea:d0:7b:94:4c:35:88:34:6a:2c:77:9e:41:56:85:a3: 47:90:2a:b2:53:19:58:51:6f:f2:77:73:fa:76:4b:e2:07:aa: 07:d6:24:40 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDAM5hMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODE0MTZaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEQ4NkI5RTAyRTkwNEU1QjQ3NjU5NERCMkI3OTc4RTM1Q0E3QzFE NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9Ri+M0s32rFmISPr cj53o+5aZNQu0Rbkk0DkcuMYrllB75qgO3/4SZIDRRL0E2kdpt8tDhAiyN+TMh4x P1J1smxazzs7jIYyMJ+Ce70ZM0Z1LVbOUSnFtqxtY2IotBfpN7ve7ua23a2bDR7N vrFSjQ+hP9dpWtgLeRuaF6jiCrZeXAQplPg0JGD6VKBhUMdMHprRF5XpUb6LiauZ pRLBnRSSSwB2JODeB8dyRwAM64DcgyvmiqDPW7Pf2SQFpsShrT/UsIhpt5d9Nit9 vCcMHd+8H5R4xoDS6KvtGxRVb59PqqEG7gw4OrWlARTIjya9fOPMwa0xijvL526i yZarAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQU2GueAukE5bR2WU2yt5eONcp8HW4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM0Ni8yR3VlQXVrRTViUjJXVTJ5dDVlT05jcDhIVzQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO4TAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQB5iAwDQYJKoZIhvcNAQELBQADggEBABc5ilUEq/RrMesL5hOs ugiI3uY5r9brmSvuWLCRrCS2MIWYGpDOL8YJejT3wg9WU3H7J1/ZMSNmDaf07QtC 1Fe/q+6tAdO/G3smFWKaVjytcFQj9xl7jqgmNGOnI1hvfZ+E67EViBwvY/5KgC3n NyAW0rNwNkCI1E7wVQVzTbJzzzvYZlanzfVUZN98MgvQRcFjUloKO7rZr5nUKSry LtNX0cZ6V49KivXv/3ZCPze76Bc1U5Rr8xC1TItexW0HX1c26d9HsgUUSJ5NMlLK fPi5wi6Lqf3XXxU16tB7lEw1iDRqLHeeQVaFo0eQKrJTGVhRb/J3c/p2S+IHqgfW JEA= -----END CERTIFICATE-----Generated at Sat Apr 26 08:15:58 2025 by rpki-client