$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer (raw, json) Hash identifier: JFVFeWOF8tCPYoNzXBpZca/TX+I1XvEmBpZdTGAgc0M= Subject key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CE2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:13:18 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 137794 IP: 103.138.134.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52783 (0xce2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:13:18 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:c7:2c:71:18:21:d9:cd:64:88:56:7a:58: a4:3b:f4:71:5b:87:47:d5:89:62:d7:29:3b:b9:61: 89:6e:4a:9e:20:4e:21:cd:c3:4c:e7:e6:2f:aa:ed: b1:8f:a1:c8:30:45:4f:50:16:ba:2c:ed:d2:8f:7f: 12:b1:4d:11:49:78:42:b9:65:95:72:c7:44:33:30: a2:e7:ee:cc:d2:f3:aa:b1:f6:db:1c:da:19:9e:98: c9:66:d8:0d:e3:1b:bb:cf:71:7b:f8:50:54:10:3e: 6b:18:7b:e7:2d:e3:06:cf:06:e1:b8:c8:0b:85:ce: d0:b9:42:60:d6:2e:08:e0:6d:1e:23:fe:2f:1c:e8: 53:87:2d:96:21:e5:8c:d9:3c:ce:48:28:bf:d3:f7: 25:f4:70:aa:ea:bd:b0:db:2f:74:23:dd:a5:d2:8d: 45:8d:00:b6:ce:ab:e4:3c:66:49:11:c5:35:3b:5e: 62:77:61:62:0d:6b:3f:79:aa:3b:18:0e:1e:04:c6: c1:7d:8d:05:88:25:64:f4:98:eb:1f:ae:2e:63:f3: 84:1a:c3:58:f9:76:f8:04:b0:f8:43:47:45:8d:56: bd:e6:cf:bf:ec:35:0e:b1:73:c1:72:8f:2b:be:7f: 01:ec:2a:25:ea:2b:47:e3:29:65:2d:a5:50:dd:16: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137794 sbgp-ipAddrBlock: critical IPv4: 103.138.134.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:2a:46:3e:20:e9:8e:dd:e6:2f:4a:65:40:b7:53:29:5d:ba: e6:c6:53:11:76:53:58:fb:cb:c3:19:70:93:b1:10:23:d9:d5: 7e:d0:8d:3e:37:ce:59:42:b3:de:ec:9a:66:4b:d9:82:e9:73: db:15:3e:21:14:48:7e:1b:7e:6f:a5:d3:1d:39:e6:8e:c2:e5: 95:21:dc:ae:55:62:a9:e1:a9:f7:bd:bb:1d:7c:93:e8:f7:e9: 4e:75:4c:df:31:9e:dd:4d:26:63:08:46:96:cc:17:a1:4f:8f: 7c:0d:1e:0f:20:10:9b:c3:35:a1:94:e9:5c:fa:da:60:89:5b: 2c:a1:74:f4:96:18:72:58:2a:12:a9:e3:6f:b8:fd:a7:e6:ca: 8f:1d:ec:d0:20:1d:26:31:76:8d:48:b8:6c:6c:6b:0f:9b:94: 89:21:b5:59:6d:af:9e:97:9b:4d:a1:aa:f5:da:c4:52:2b:3d: e9:8b:43:ff:39:4b:0f:29:4e:10:f7:fb:ef:53:d6:4e:43:5a: 81:76:c6:8d:9b:05:53:86:10:e2:a2:fd:97:8e:61:a1:c1:aa: bc:9f:1a:9f:00:17:81:29:05:48:ae:32:fc:5a:1a:d6:d7:a8: ab:0e:69:fe:d5:f2:5c:ed:d5:09:ff:32:ed:df:a2:83:86:b5: 91:54:38:e1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAM4vMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODEzMThaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDQ5ODYyNDJCMDNGQjRBOUMxOTA2MTI3RUZDNEMwNUUzQjlCREZF QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGscscRgh2c1kiFZ6 WKQ79HFbh0fViWLXKTu5YYluSp4gTiHNw0zn5i+q7bGPocgwRU9QFros7dKPfxKx TRFJeEK5ZZVyx0QzMKLn7szS86qx9tsc2hmemMlm2A3jG7vPcXv4UFQQPmsYe+ct 4wbPBuG4yAuFztC5QmDWLgjgbR4j/i8c6FOHLZYh5YzZPM5IKL/T9yX0cKrqvbDb L3Qj3aXSjUWNALbOq+Q8ZkkRxTU7XmJ3YWINaz95qjsYDh4ExsF9jQWIJWT0mOsf ri5j84Qaw1j5dvgEsPhDR0WNVr3mz7/sNQ6xc8Fyjyu+fwHsKiXqK0fjKWUtpVDd Fl/zAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUSYYkKwP7SpwZBhJ+/EwF47m9/rsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjc0OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaQjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeKhjANBgkqhkiG9w0BAQsFAAOCAQEAbSpGPiDpjt3mL0plQLdT KV265sZTEXZTWPvLwxlwk7EQI9nVftCNPjfOWUKz3uyaZkvZgulz2xU+IRRIfht+ b6XTHTnmjsLllSHcrlViqeGp9727HXyT6PfpTnVM3zGe3U0mYwhGlswXoU+PfA0e DyAQm8M1oZTpXPraYIlbLKF09JYYclgqEqnjb7j9p+bKjx3s0CAdJjF2jUi4bGxr D5uUiSG1WW2vnpebTaGq9drEUis96YtD/zlLDylOEPf771PWTkNagXbGjZsFU4YQ 4qL9l45hocGqvJ8anwAXgSkFSK4y/Foa1teoqw5p/tXyXO3VCf8y7d+ig4a1kVQ4 4Q== -----END CERTIFICATE-----Generated at Sat Apr 26 10:18:04 2025 by rpki-client