$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer (raw, json) Hash identifier: giGFCgEF176BjMFff3nQQD/M1EIaP91aRY/f7mkIOg4= Subject key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CD0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:07:21 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:afa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52493 (0xcd0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:07:21 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:dc:71:22:d2:70:ab:1f:d3:2d:91:ff:bb: e2:c2:c2:6f:a8:17:19:22:ca:1a:c6:48:a9:a9:23: 26:d4:f7:94:66:1a:c8:98:4d:ce:80:6e:0e:fe:e4: a0:ef:b7:81:20:29:d0:5f:2e:2c:45:fc:41:5c:9b: a5:19:7c:62:43:6a:d9:15:64:35:93:11:3a:aa:a2: a9:26:25:76:fb:0d:d3:42:6b:7e:c7:f5:a3:35:3e: 4c:7c:9c:0c:39:8b:45:b1:06:42:f7:ac:cc:c8:3e: 07:12:b8:a0:54:a4:4f:81:2d:8d:d2:28:5c:0d:36: e1:3b:60:7f:42:22:f9:37:53:c2:d4:52:7c:de:40: a4:d0:e1:ca:bf:f8:1f:d8:a1:3f:d8:5c:e5:73:fe: 86:1b:12:7a:e9:5f:64:69:43:35:4b:f1:ab:0e:dd: 39:cf:ef:0e:e5:91:62:cd:18:e3:42:30:2d:ec:7b: 61:63:9d:92:9b:25:5c:64:11:43:8b:6b:51:49:f0: da:5f:3c:a0:e9:c4:bd:32:6a:97:a8:dc:5c:39:d5: 9d:60:6c:9c:e7:07:a9:d7:da:8e:1b:3b:94:31:c1: c0:cb:95:0b:a6:94:81:6d:7f:92:44:e5:1c:36:73: 6c:3b:de:12:55:7b:65:58:41:9f:c6:65:54:40:29: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:afa0::/32 Signature Algorithm: sha256WithRSAEncryption 33:13:a2:81:c9:2c:fd:31:57:3f:4a:63:0c:e6:06:91:9c:bd: c8:bf:cd:28:3c:58:ce:0e:81:55:ce:44:7c:5b:04:c8:1e:fe: ac:95:3d:1d:2b:93:fa:58:4c:30:76:1f:92:36:5f:28:0f:98: 31:fc:22:fa:3f:16:69:e3:b3:26:4a:2f:2b:87:7e:eb:af:73: c0:82:65:4f:3a:37:94:68:a6:fb:74:71:fe:f7:97:43:9c:51: 62:7a:3b:8f:11:a8:c5:44:1b:e7:0a:7c:c0:94:79:6b:d1:f0: 47:65:0e:cd:63:b1:08:f3:57:d4:f2:74:27:81:00:fb:c1:59: 63:e5:02:de:0e:8a:f2:d8:32:25:0c:f8:08:62:6f:84:8d:a6: 4f:c4:be:52:5f:d7:b1:b1:d6:6a:a3:45:37:37:9c:29:ef:b0: 15:3e:3c:4c:48:c4:e6:16:fe:de:b2:f0:72:d1:05:75:8e:12: c2:76:e7:e2:79:e2:b0:f2:b6:7c:f2:7f:3b:6e:92:9a:c0:a6: b3:66:67:05:cf:96:ad:fe:10:c6:9f:a7:e5:17:13:15:75:ef: 87:7f:44:4f:42:9b:22:e3:08:78:d5:d3:80:15:1c:47:84:7b: ff:23:0c:87:12:4e:5c:04:88:6c:aa:a7:71:e7:fa:c7:da:0b: be:83:8b:8a -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAM0NMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA3MjFaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDMyOUYyQUZDODZGRTlGMUZBQzlGMkY4QkIzMTJCNUFCOUM5MThD MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDNxxItJwqx/TLZH/ u+LCwm+oFxkiyhrGSKmpIybU95RmGsiYTc6Abg7+5KDvt4EgKdBfLixF/EFcm6UZ fGJDatkVZDWTETqqoqkmJXb7DdNCa37H9aM1Pkx8nAw5i0WxBkL3rMzIPgcSuKBU pE+BLY3SKFwNNuE7YH9CIvk3U8LUUnzeQKTQ4cq/+B/YoT/YXOVz/oYbEnrpX2Rp QzVL8asO3TnP7w7lkWLNGONCMC3se2FjnZKbJVxkEUOLa1FJ8NpfPKDpxL0yapeo 3Fw51Z1gbJznB6nX2o4bO5QxwcDLlQumlIFtf5JE5Rw2c2w73hJVe2VYQZ/GZVRA KVczAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUMp8q/Ib+nx+sny+LsxK1q5yRjCYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMwMS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGvoDANBgkqhkiG9w0BAQsF AAOCAQEAMxOigcks/TFXP0pjDOYGkZy9yL/NKDxYzg6BVc5EfFsEyB7+rJU9HSuT +lhMMHYfkjZfKA+YMfwi+j8WaeOzJkovK4d+669zwIJlTzo3lGim+3Rx/veXQ5xR Yno7jxGoxUQb5wp8wJR5a9HwR2UOzWOxCPNX1PJ0J4EA+8FZY+UC3g6K8tgyJQz4 CGJvhI2mT8S+Ul/XsbHWaqNFNzecKe+wFT48TEjE5hb+3rLwctEFdY4Swnbn4nni sPK2fPJ/O26SmsCms2ZnBc+Wrf4Qxp+n5RcTFXXvh39ET0KbIuMIeNXTgBUcR4R7 /yMMhxJOXASIbKqncef6x9oLvoOLig== -----END CERTIFICATE-----Generated at Sat Apr 26 08:23:00 2025 by rpki-client