$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer File: CBIXKqdK-FLA9ad4e2SCX-Vhk2E.cer (raw, json) Hash identifier: 7Hsc6KhcjRSxzfXceUPr2IjIRj3rfjgsf1WLSGCQZ9Q= Subject key identifier: 08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3D4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sat 19 Apr 2025 20:07:50 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 157.66.244.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15691 (0x3d4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 19 20:07:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=0812172AA74AF852C0F5A7787B64825FE5619361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:c9:ac:a4:10:cf:c4:49:51:b2:59:65:ec: a2:9e:7a:7f:62:9f:bf:37:95:f1:57:38:fa:1d:ea: 70:ce:ed:91:63:f5:33:aa:a3:eb:0a:3c:ba:7e:53: 9b:fa:78:33:bb:1d:3d:0d:e0:62:9b:00:4b:56:44: ee:f4:73:99:05:47:6e:a2:fd:51:b8:53:56:98:a2: 4a:a6:ba:57:69:6d:18:8f:72:76:ca:13:44:f1:d5: b4:14:41:ee:dc:b1:61:e8:98:07:73:9a:3f:d7:a5: bc:a5:35:49:5a:b3:cf:41:f2:88:45:51:09:6a:b7: c0:4c:3d:f6:29:e0:4e:d1:75:ee:a7:bd:5b:b3:3a: 51:3d:7c:81:b6:77:66:b5:97:f9:be:2f:d6:d1:5e: 86:99:dd:b0:59:ad:d6:81:4d:47:53:cd:e4:aa:a8: 6c:e0:8a:9a:0f:cd:af:e8:bf:d4:b0:f4:f7:94:ea: a8:8a:a9:bc:dd:50:f2:7d:d6:41:4b:8a:eb:16:30: 76:f1:59:57:9e:a6:4b:04:23:f6:94:0d:d0:9f:e4: 91:26:90:f5:43:88:f3:75:49:90:45:af:b9:aa:78: 74:b6:aa:bc:a4:c5:36:48:f7:ba:cd:0f:5d:87:8c: 87:a9:c0:ac:76:65:ab:c5:fc:9a:71:fe:8a:9e:73: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:12:17:2A:A7:4A:F8:52:C0:F5:A7:78:7B:64:82:5F:E5:61:93:61 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/CBIXKqdK-FLA9ad4e2SCX-Vhk2E.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.244.0/23 Signature Algorithm: sha256WithRSAEncryption 08:dd:1f:0e:63:cf:a4:19:bb:e5:8b:04:97:1b:98:c8:1b:37: f6:4f:7e:17:0c:07:a7:23:81:3d:0e:88:a7:9e:d8:36:7f:17: 79:bb:cb:34:d4:b6:d9:3c:bc:4d:bd:cd:fd:5a:50:91:a7:76: a2:62:36:bb:fa:fc:fb:21:a5:70:58:1b:84:58:b7:dc:df:9b: 9b:65:b2:3e:d7:b4:22:66:6b:62:29:f3:33:78:d2:04:7e:35: 28:57:a7:bf:eb:3b:c8:dc:ad:e1:41:ef:97:9c:a8:9d:0a:6f: 5e:bc:3a:6f:35:4e:cd:03:1b:cf:82:07:40:6c:6e:db:58:ac: ac:71:20:67:c8:54:4c:da:db:22:46:97:c7:c3:74:3d:59:c5: 85:8a:6c:4d:16:65:e3:ac:62:cc:72:83:82:4d:95:55:61:f4: 6e:bb:89:f7:95:0c:55:ea:48:fd:be:e6:f5:f7:46:82:0a:4d: 37:af:c1:f9:09:3c:39:a0:9f:3e:9c:d9:8b:f3:b9:b1:16:07: 96:d0:e8:25:95:b5:3e:f9:f8:ad:6c:76:16:8a:0b:51:3c:e3: 01:03:31:d7:67:47:32:f3:ae:3f:83:d3:61:cc:81:9c:c3:d6: 49:c3:d9:36:7d:6c:79:3c:4d:55:9c:4d:e8:53:ad:e8:2e:c5: c9:8e:af:8e -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPUswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQxOTIwMDc1MFoXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoMDgxMjE3MkFBNzRBRjg1MkMwRjVBNzc4N0I2NDgyNUZFNTYxOTM2 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMNByaykEM/ESVGyWWXs op56f2KfvzeV8Vc4+h3qcM7tkWP1M6qj6wo8un5Tm/p4M7sdPQ3gYpsAS1ZE7vRz mQVHbqL9UbhTVpiiSqa6V2ltGI9ydsoTRPHVtBRB7tyxYeiYB3OaP9elvKU1SVqz z0HyiEVRCWq3wEw99ingTtF17qe9W7M6UT18gbZ3ZrWX+b4v1tFehpndsFmt1oFN R1PN5KqobOCKmg/Nr+i/1LD095TqqIqpvN1Q8n3WQUuK6xYwdvFZV56mSwQj9pQN 0J/kkSaQ9UOI83VJkEWvuap4dLaqvKTFNkj3us0PXYeMh6nArHZlq8X8mnH+ip5z f3cCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQIEhcqp0r4UsD1p3h7ZIJf5WGTYTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjc5L0NCSVhLcWRLLUZMQTlhZDRlMlNDWC1WaGsyRS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQvQwDQYJKoZIhvcNAQELBQAD ggEBAAjdHw5jz6QZu+WLBJcbmMgbN/ZPfhcMB6cjgT0OiKee2DZ/F3m7yzTUttk8 vE29zf1aUJGndqJiNrv6/PshpXBYG4RYt9zfm5tlsj7XtCJma2Ip8zN40gR+NShX p7/rO8jcreFB75ecqJ0Kb168Om81Ts0DG8+CB0BsbttYrKxxIGfIVEza2yJGl8fD dD1ZxYWKbE0WZeOsYsxyg4JNlVVh9G67ifeVDFXqSP2+5vX3RoIKTTevwfkJPDmg nz6c2YvzubEWB5bQ6CWVtT75+K1sdhaKC1E84wEDMddnRzLzrj+D02HMgZzD1knD 2TZ9bHk8TVWcTehTreguxcmOr44= -----END CERTIFICATE-----Generated at Sat Apr 26 09:43:04 2025 by rpki-client