$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer File: LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer (raw, json) Hash identifier: CdS3D0Y3GhwmROsMChNA17Bw018wtxgGNJR5bm63rCs= Subject key identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D3C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 27 May 2025 08:42:00 +0000 Certificate not after: Wed 27 May 2026 08:31:41 +0000 Subordinate resources: IP: 45.114.136.0/22 IP: 103.25.148.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 23:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54210 (0xd3c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: May 27 08:42:00 2025 GMT Not After : May 27 08:31:41 2026 GMT Subject: CN=2C4BC2FB0FA26D090C2E9B1759843EA889F264B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:b7:d2:f1:d9:29:c1:ab:94:90:77:d1:9f: 7d:b7:95:ff:4c:22:ab:df:87:3d:9e:48:52:f2:ac: e3:12:07:9e:bb:9f:37:b2:c0:c4:13:ba:ac:8c:15: 34:38:a4:0e:7a:bf:92:c0:68:91:e9:65:5a:8c:29: 47:69:38:d6:50:87:0e:50:ca:05:49:2a:02:b7:bb: 15:f5:41:bc:5c:20:bd:0a:67:00:95:76:7b:cb:df: 66:6d:60:a1:84:d2:81:dd:d8:34:56:b4:ef:a7:a0: 65:78:4b:eb:6a:e9:32:35:e0:fa:db:c7:4d:9a:39: d0:60:ac:8e:a3:c6:22:d1:1a:5d:98:2c:f8:26:67: 1b:1c:b9:5c:b0:b1:f1:3d:4a:b3:ca:aa:e3:43:37: de:ed:66:92:1d:0c:1b:97:5c:51:da:28:2a:e0:eb: de:6e:99:d3:14:80:65:6f:c8:1b:a8:34:ef:7b:b9: 51:8a:ba:4a:37:85:13:d8:c9:db:bf:d2:46:61:01: be:09:5b:ac:3b:c1:1a:0d:71:11:cd:e7:0e:59:4c: 03:a2:8c:30:5b:51:02:0e:82:41:a8:ac:14:2a:37: b2:e1:98:1e:64:0a:7e:8f:5b:89:5e:e3:f1:ef:5f: 9c:03:ec:88:58:27:3b:1e:ab:b0:de:42:62:b9:be: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.114.136.0/22 103.25.148.0/22 Signature Algorithm: sha256WithRSAEncryption 90:a6:ec:03:d1:8e:7e:71:1f:9a:19:c4:78:e0:55:9a:3e:2a: bc:0f:8a:e4:f0:cf:f5:24:fa:dd:4e:2c:c1:ad:39:99:d2:10: e4:1b:fe:d5:7a:38:87:2c:62:ad:4f:3c:44:29:95:e4:86:de: ba:e1:05:71:06:b7:da:9c:84:1f:5a:97:2b:92:f7:d2:82:54: 23:67:ea:7e:9a:5c:ab:8d:c9:02:c4:59:7c:80:20:8c:8d:51: bf:13:8f:6f:6d:e2:04:be:5f:f8:25:08:f8:b8:f8:f4:be:9b: a6:8e:16:d1:f7:47:5f:c3:48:37:e8:72:40:72:88:cd:81:c3: 5f:48:7a:33:de:77:f7:f0:20:c6:0a:e1:31:a2:45:38:42:fc: d4:77:4e:1c:54:ee:dd:e3:89:e6:22:e5:46:36:e3:36:11:c7: 24:31:fd:a7:cd:9d:06:ec:e1:71:b1:18:fc:b9:e6:69:95:89: 4f:57:12:1a:23:d9:6d:ef:54:cc:69:53:87:7d:f4:48:95:05: 85:38:a0:a3:b0:7b:6f:2e:53:a3:7e:3a:cc:60:f5:6f:1b:2b: 59:56:0d:e5:4a:4a:9c:a7:1b:3b:ed:a8:91:9b:2c:c1:22:4a: b3:7c:8b:c1:73:8c:e5:a4:5e:7a:4e:b0:41:95:e9:d6:d7:8d: ed:13:de:ad -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDANPCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA1MjcwODQyMDBaFw0yNjA1MjcwODMxNDFaMDMx MTAvBgNVBAMTKDJDNEJDMkZCMEZBMjZEMDkwQzJFOUIxNzU5ODQzRUE4ODlGMjY0 QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgbfS8dkpwauUkHfR n323lf9MIqvfhz2eSFLyrOMSB567nzeywMQTuqyMFTQ4pA56v5LAaJHpZVqMKUdp ONZQhw5QygVJKgK3uxX1QbxcIL0KZwCVdnvL32ZtYKGE0oHd2DRWtO+noGV4S+tq 6TI14Prbx02aOdBgrI6jxiLRGl2YLPgmZxscuVywsfE9SrPKquNDN97tZpIdDBuX XFHaKCrg695umdMUgGVvyBuoNO97uVGKuko3hRPYydu/0kZhAb4JW6w7wRoNcRHN 5w5ZTAOijDBbUQIOgkGorBQqN7LhmB5kCn6PW4le4/HvX5wD7IhYJzseq7DeQmK5 vszpAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQULEvC+w+ibQkMLpsXWYQ+qInyZLAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3NC9MRXZDLXctaWJRa01McHNYV1lRLXFJbnlaTEEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLXKIAwQCZxmUMA0GCSqGSIb3 DQEBCwUAA4IBAQCQpuwD0Y5+cR+aGcR44FWaPiq8D4rk8M/1JPrdTizBrTmZ0hDk G/7VejiHLGKtTzxEKZXkht664QVxBrfanIQfWpcrkvfSglQjZ+p+mlyrjckCxFl8 gCCMjVG/E49vbeIEvl/4JQj4uPj0vpumjhbR90dfw0g36HJAcojNgcNfSHoz3nf3 8CDGCuExokU4QvzUd04cVO7d44nmIuVGNuM2EcckMf2nzZ0G7OFxsRj8ueZplYlP VxIaI9lt71TMaVOHffRIlQWFOKCjsHtvLlOjfjrMYPVvGytZVg3lSkqcpxs77aiR myzBIkqzfIvBc4zlpF56TrBBlenW143tE96t -----END CERTIFICATE-----Generated at Sat Jun 14 23:23:34 2025 by rpki-client