$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/57-wC4BEeBqV6l72MeBDsLOl7Cg.cer File: 57-wC4BEeBqV6l72MeBDsLOl7Cg.cer (raw, json) Hash identifier: Pc2CuAwxM4pa6N+X5tXjAJs0kyXh6VokXOcE5mPLVnE= Subject key identifier: E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CC3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:13:09 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 157.66.88.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15555 (0x3cc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:13:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E7BFB00B8044781A95EA5EF631E043B0B3A5EC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:ae:af:b3:69:7b:f6:79:8e:1f:62:4e:53: 79:74:26:e9:7a:29:13:95:4b:a6:5e:31:ae:5a:e9: 95:3a:53:0e:44:60:82:5d:50:bd:c5:d3:f7:ef:ad: 46:49:32:9b:0e:97:b9:50:95:74:d1:68:f1:fd:40: d3:28:f5:a4:b5:b1:26:ff:2f:dc:da:a3:11:ae:e0: 23:51:07:af:0f:e9:9a:68:df:b1:3b:a6:40:9c:23: 66:f7:49:50:d8:ea:6d:d8:e9:96:52:6e:85:b3:12: 12:4a:ab:9a:09:ff:af:4b:a2:ed:56:6b:44:f1:07: 9d:f9:31:88:ed:f8:37:91:f6:7d:69:14:ed:ac:56: c8:ce:55:f2:8c:a9:59:82:87:e9:a4:3b:61:c1:31: 5a:e5:a7:38:58:c4:cd:52:bf:db:7b:ad:d9:7a:ea: b1:5c:4f:b1:15:28:76:36:d3:f7:e7:94:cf:fa:b9: de:60:1c:ff:1b:2c:1a:1c:6c:20:3f:92:c5:7a:0a: d4:0d:36:77:cd:90:49:6a:7f:2e:96:bb:94:2f:05: 51:39:21:a2:1e:13:f3:e6:f7:e7:0f:25:fe:cc:16: 07:4a:20:2a:7a:9b:0b:00:d3:62:f2:ec:01:a5:9f: 29:91:5b:21:c1:34:eb:4e:f5:68:bf:43:7c:cb:45: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.88.0/23 Signature Algorithm: sha256WithRSAEncryption 89:91:51:ad:98:75:3d:60:ce:d1:6f:7e:87:26:ac:80:e7:30: ed:32:3e:8a:9b:58:0a:49:b8:aa:43:e3:1d:6d:29:0f:54:3b: 66:a4:2b:2d:1b:12:1c:fe:cb:4a:ac:05:32:7a:53:0d:d5:5a: 6e:2b:92:29:9e:20:48:fb:21:9b:40:c7:69:4f:e4:d0:7c:0e: 07:a0:40:46:99:93:19:0c:23:06:e9:00:79:84:21:94:3c:b7: 37:3e:d5:2e:ac:62:d8:e8:9d:23:5b:d5:43:e7:42:e9:9b:4f: ef:a0:c3:d8:be:7c:79:ba:22:08:18:80:a7:30:83:ae:85:8b: 46:fc:3d:7e:a3:86:63:7d:95:6b:ef:35:9e:59:db:a9:10:2d: 77:97:52:66:d8:b8:98:80:e8:f1:5a:a7:18:df:12:d1:87:aa: b4:52:63:bc:e3:d7:8f:10:3b:fe:24:5d:80:07:21:dd:07:54: c0:85:f5:6c:3e:8c:2b:01:34:25:c5:2a:51:01:96:dc:74:d4: 13:07:8f:20:87:d9:6b:84:ba:93:72:fc:a2:97:e7:26:a8:2a: 80:d9:73:a0:c3:5b:e3:e9:07:48:78:52:2b:f3:2e:14:b2:db: 38:07:c0:e3:b6:1d:af:0a:40:38:b8:73:a0:3e:17:59:8b:75: bb:4a:6b:a0 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPMMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTMwOVoXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoRTdCRkIwMEI4MDQ0NzgxQTk1RUE1RUY2MzFFMDQzQjBCM0E1RUMy ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJIrq+zaXv2eY4fYk5T eXQm6XopE5VLpl4xrlrplTpTDkRggl1QvcXT9++tRkkymw6XuVCVdNFo8f1A0yj1 pLWxJv8v3NqjEa7gI1EHrw/pmmjfsTumQJwjZvdJUNjqbdjpllJuhbMSEkqrmgn/ r0ui7VZrRPEHnfkxiO34N5H2fWkU7axWyM5V8oypWYKH6aQ7YcExWuWnOFjEzVK/ 23ut2XrqsVxPsRUodjbT9+eUz/q53mAc/xssGhxsID+SxXoK1A02d82QSWp/Lpa7 lC8FUTkhoh4T8+b35w8l/swWB0ogKnqbCwDTYvLsAaWfKZFbIcE06071aL9DfMtF 7McCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTnv7ALgER4GpXqXvYx4EOws6XsKDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjc2LzU3LXdDNEJFZUJxVjZsNzJNZUJEc0xPbDdDZy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQlgwDQYJKoZIhvcNAQELBQAD ggEBAImRUa2YdT1gztFvfocmrIDnMO0yPoqbWApJuKpD4x1tKQ9UO2akKy0bEhz+ y0qsBTJ6Uw3VWm4rkimeIEj7IZtAx2lP5NB8DgegQEaZkxkMIwbpAHmEIZQ8tzc+ 1S6sYtjonSNb1UPnQumbT++gw9i+fHm6IggYgKcwg66Fi0b8PX6jhmN9lWvvNZ5Z 26kQLXeXUmbYuJiA6PFapxjfEtGHqrRSY7zj148QO/4kXYAHId0HVMCF9Ww+jCsB NCXFKlEBltx01BMHjyCH2WuEupNy/KKX5yaoKoDZc6DDW+PpB0h4UivzLhSy2zgH wOO2Ha8KQDi4c6A+F1mLdbtKa6A= -----END CERTIFICATE-----Generated at Sat Apr 26 09:43:39 2025 by rpki-client