$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer File: RA0YjgN6sufC2lviztymGqt4xaM.cer (raw, json) Hash identifier: UMevO8No+ILzm2LB2frL1/1A5/ShHcxvks6/j9YIn08= Subject key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3C93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:09:51 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 160.30.196.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15507 (0x3c93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:09:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:78:64:4f:5f:ff:1d:05:d2:28:4a:1f:22: 01:12:3e:88:89:a9:da:1e:8e:d2:e0:c0:20:83:e2: da:5c:18:76:c4:7d:eb:a0:28:27:28:41:2d:b1:cd: c0:c6:bf:b5:ad:d7:1b:b1:a2:c8:17:a5:3d:d1:cb: b5:fa:ff:8b:3a:af:64:3b:89:28:48:9f:9f:32:33: bb:cc:21:dd:29:8c:cc:f8:d3:b8:a7:51:9c:53:73: dc:23:8d:88:aa:70:43:f6:1e:89:05:52:9d:5c:d5: 97:29:25:be:b2:83:c5:47:e9:c2:c6:b1:cd:14:f0: 0d:98:c2:ab:0e:3a:3d:47:87:80:45:66:e9:49:42: a8:f3:f6:72:b1:52:2c:61:43:70:4d:22:5f:02:0d: 3e:bd:0d:fe:9f:1a:e8:5d:4a:28:c6:d7:ff:89:92: c9:6c:91:76:c4:7e:ff:52:b9:e4:65:0b:1c:8e:11: a9:b0:88:17:6c:43:52:9a:b6:c2:47:65:e0:bf:d6: 85:61:2c:29:af:b3:0f:30:63:77:f3:04:6c:49:fc: 58:3b:9a:76:37:d2:40:d7:a4:f2:fc:93:f0:27:9b: 3c:43:f7:f0:6e:59:f5:10:97:37:de:3a:e0:fe:3d: ff:f4:bb:72:a0:1a:b2:a3:c9:1b:79:ec:10:72:7b: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.196.0/23 Signature Algorithm: sha256WithRSAEncryption 23:ab:f6:51:98:af:33:18:b2:11:73:34:ac:9c:43:c9:23:a5: e5:7a:b6:66:9c:28:62:fb:ac:66:ca:19:a2:35:a4:d1:04:59: 43:07:1b:eb:4b:a3:0a:52:5c:df:51:70:26:ef:06:84:45:f5: 1b:3a:a4:fb:a0:77:81:4c:bb:ec:ff:53:d2:04:84:f5:64:a6: bd:63:53:ea:95:f3:02:2e:50:4a:c4:7a:f6:cf:18:cd:0e:f8: 2a:aa:4e:62:69:9d:44:99:84:d6:d8:bf:08:69:55:9b:0e:13: 71:26:b6:a9:49:b3:b4:1f:f8:a0:bb:aa:32:75:14:7f:61:1a: b3:bf:23:13:94:c1:bf:47:e5:d9:08:df:c6:52:d3:0f:e4:3c: d2:c9:3e:fe:bf:3c:01:65:f3:fe:01:32:45:e1:97:aa:4d:57: 69:ea:66:15:a0:ea:e2:c1:b3:74:88:0b:12:2b:1e:8e:dd:c6: 11:a8:59:9f:04:8e:5d:26:b5:1c:9b:e1:3b:8f:94:a8:7c:a5: 94:f2:65:8d:d8:b1:3b:bd:eb:7b:10:a7:43:46:d3:0c:5d:b4: e0:8d:29:67:dc:b3:33:32:82:1d:30:3d:cc:e4:56:fc:6d:9f: a7:98:a5:44:a6:8a:3f:14:f9:b7:49:96:eb:eb:63:50:f3:6d: 1c:93:e9:0c -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPJMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MDk1MVoXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoNDQwRDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVB MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTOeGRPX/8dBdIoSh8i ARI+iImp2h6O0uDAIIPi2lwYdsR966AoJyhBLbHNwMa/ta3XG7GiyBelPdHLtfr/ izqvZDuJKEifnzIzu8wh3SmMzPjTuKdRnFNz3CONiKpwQ/YeiQVSnVzVlyklvrKD xUfpwsaxzRTwDZjCqw46PUeHgEVm6UlCqPP2crFSLGFDcE0iXwINPr0N/p8a6F1K KMbX/4mSyWyRdsR+/1K55GULHI4RqbCIF2xDUpq2wkdl4L/WhWEsKa+zDzBjd/ME bEn8WDuadjfSQNek8vyT8CebPEP38G5Z9RCXN9464P49//S7cqAasqPJG3nsEHJ7 IFcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBREDRiOA3qy58LaW+LO3KYaq3jFozAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzEzL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHsQwDQYJKoZIhvcNAQELBQAD ggEBACOr9lGYrzMYshFzNKycQ8kjpeV6tmacKGL7rGbKGaI1pNEEWUMHG+tLowpS XN9RcCbvBoRF9Rs6pPugd4FMu+z/U9IEhPVkpr1jU+qV8wIuUErEevbPGM0O+Cqq TmJpnUSZhNbYvwhpVZsOE3EmtqlJs7Qf+KC7qjJ1FH9hGrO/IxOUwb9H5dkI38ZS 0w/kPNLJPv6/PAFl8/4BMkXhl6pNV2nqZhWg6uLBs3SICxIrHo7dxhGoWZ8Ejl0m tRyb4TuPlKh8pZTyZY3YsTu963sQp0NG0wxdtOCNKWfcszMygh0wPczkVvxtn6eY pUSmij8U+bdJluvrY1DzbRyT6Qw= -----END CERTIFICATE-----Generated at Sat Apr 26 08:49:00 2025 by rpki-client