$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Nd6o5bEoW5KyERchGKNBqy3bdrU.cer File: Nd6o5bEoW5KyERchGKNBqy3bdrU.cer (raw, json) Hash identifier: SkEgaeWAeuysRVDNhy7bpb+SYvwLg7TAMHhSgJQNkE0= Subject key identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CE89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:15:07 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 103.240.202.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52873 (0xce89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:15:07 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=35DEA8E5B1285B92B211172118A341AB2DDB76B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:c9:44:92:7b:3f:1a:38:ab:3d:d9:ca:eb: 53:c8:80:7b:aa:6d:a3:b6:34:b9:3b:9c:fa:7a:07: cf:45:fc:a6:b5:b6:48:b6:e8:a5:c2:85:fb:e3:ba: 70:6d:72:ce:e5:e1:91:21:70:87:26:f3:b3:f3:b2: 57:d8:f3:0d:91:43:5b:2c:be:04:22:d1:80:bb:76: 42:46:97:1b:82:60:a5:48:fa:96:fa:f7:3a:66:a3: a9:4c:b4:41:95:99:da:17:ae:ff:a4:13:a1:9b:8c: 74:e9:dd:98:8e:e6:db:bf:f9:e8:98:0b:63:95:54: e8:1e:d2:95:c2:d3:e8:c5:a1:74:b3:53:49:69:f7: 2d:6f:1e:e6:5e:91:8b:d9:3a:53:d4:e8:09:d2:a9: 60:76:52:f5:91:eb:cb:36:2f:5b:6b:1f:3c:05:6d: 5a:95:a8:b1:d5:26:cc:db:90:9b:65:ca:da:19:e6: d2:cf:9e:04:cb:f8:48:dd:2d:06:40:69:ad:c7:7a: 52:1d:cb:94:18:37:e6:6b:e3:8f:42:86:79:69:f0: cb:e1:ec:32:eb:50:2f:60:be:06:ae:c7:c1:14:09: 95:43:db:55:51:8d:50:c2:c2:52:a0:e5:22:31:38: 2c:26:f2:56:3f:16:bf:76:b6:5e:bb:db:e9:a9:60: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DE:A8:E5:B1:28:5B:92:B2:11:17:21:18:A3:41:AB:2D:DB:76:B5 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3232/Nd6o5bEoW5KyERchGKNBqy3bdrU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.240.202.0/23 Signature Algorithm: sha256WithRSAEncryption 39:4b:c5:e7:6c:b9:db:20:11:5a:98:48:72:1e:f6:19:78:9a: f3:93:de:a9:c3:de:ab:11:20:04:f8:00:30:9a:84:c8:85:a7: c2:c6:04:c1:99:29:b5:5d:84:ca:d6:b2:34:15:1d:0c:84:5f: f1:01:30:e1:62:90:f2:af:2c:83:81:7f:6a:1b:9a:fe:8e:e1: eb:9c:05:26:0e:11:b8:bf:5b:86:0f:d8:4a:6a:90:e5:87:3f: 20:01:56:69:79:88:68:51:11:f0:07:d5:9c:73:0b:fe:91:70: af:94:47:eb:66:97:76:93:f5:46:8a:06:f3:ee:66:79:7d:58: 71:74:03:e0:af:24:1e:9a:40:0c:31:5f:bf:d5:5b:44:86:c5: 0d:2f:25:5c:7a:68:85:39:29:08:31:04:7e:de:36:62:9d:33: c5:8a:5a:53:ce:65:8d:0b:79:0f:5d:87:51:c0:e6:99:40:46: 2f:22:cf:35:47:cd:28:d9:51:01:1d:39:54:ee:0c:bd:64:1a: 14:13:b8:ab:3b:f7:c4:7c:5a:47:e2:7c:9b:c2:16:1b:51:62: 83:a3:b9:dd:5a:3d:7f:7c:a6:fe:e1:c1:5a:2f:79:75:6e:dd: bf:dd:45:81:81:83:c6:54:7a:b9:47:ce:33:bd:b2:70:19:e4: 3c:0f:47:10 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAM6JMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODE1MDdaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDM1REVBOEU1QjEyODVCOTJCMjExMTcyMTE4QTM0MUFCMkREQjc2 QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaclEkns/GjirPdnK 61PIgHuqbaO2NLk7nPp6B89F/Ka1tki26KXChfvjunBtcs7l4ZEhcIcm87PzslfY 8w2RQ1ssvgQi0YC7dkJGlxuCYKVI+pb69zpmo6lMtEGVmdoXrv+kE6GbjHTp3ZiO 5tu/+eiYC2OVVOge0pXC0+jFoXSzU0lp9y1vHuZekYvZOlPU6AnSqWB2UvWR68s2 L1trHzwFbVqVqLHVJszbkJtlytoZ5tLPngTL+EjdLQZAaa3HelIdy5QYN+Zr449C hnlp8Mvh7DLrUC9gvgaux8EUCZVD21VRjVDCwlKg5SIxOCwm8lY/Fr92tl672+mp YLfLAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUNd6o5bEoW5KyERchGKNBqy3bdrUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIzMi9OZDZvNWJFb1c1S3lFUmNoR0tOQnF5M2JkclUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/DKMA0GCSqGSIb3DQEBCwUA A4IBAQA5S8XnbLnbIBFamEhyHvYZeJrzk96pw96rESAE+AAwmoTIhafCxgTBmSm1 XYTK1rI0FR0MhF/xATDhYpDyryyDgX9qG5r+juHrnAUmDhG4v1uGD9hKapDlhz8g AVZpeYhoURHwB9Wccwv+kXCvlEfrZpd2k/VGigbz7mZ5fVhxdAPgryQemkAMMV+/ 1VtEhsUNLyVcemiFOSkIMQR+3jZinTPFilpTzmWNC3kPXYdRwOaZQEYvIs81R80o 2VEBHTlU7gy9ZBoUE7irO/fEfFpH4nybwhYbUWKDo7ndWj1/fKb+4cFaL3l1bt2/ 3UWBgYPGVHq5R84zvbJwGeQ8D0cQ -----END CERTIFICATE-----Generated at Sat Apr 26 08:19:42 2025 by rpki-client