$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer File: _RcrCSdVjbeuit47T13UnttFtYI.cer (raw, json) Hash identifier: LAokuDrbvLR5wH57mH/UTurDyyju0XEieb6KQmSb86I= Subject key identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CD17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:07:33 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 151308 IP: 103.216.156.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52503 (0xcd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:07:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cf:d6:cf:e3:ac:36:76:f5:ef:b7:8b:6e:47: 29:72:33:e8:da:88:80:cd:51:7a:4b:97:ae:29:0e: 97:30:2e:da:bb:ec:73:2c:14:e4:8e:52:28:80:5d: 38:66:20:eb:ba:f5:01:05:38:63:df:66:94:ca:12: c2:19:39:59:96:60:df:ff:e2:c5:88:96:3e:ea:c8: e4:b5:bf:16:20:3f:cf:9e:8f:cc:df:3c:e6:3e:65: c9:bf:94:f7:11:9f:4e:db:cf:8a:31:56:3c:c7:02: 8d:ce:d6:e7:28:ef:7c:1e:5a:90:9d:90:3d:ed:d9: 2e:2c:8b:de:76:21:59:e5:e9:ad:e7:69:80:30:09: 1d:86:47:1f:d7:da:e1:5e:dd:a2:07:92:07:4d:2f: 16:e1:54:98:a2:69:e1:b0:48:46:4b:7a:09:b0:5c: 80:7e:47:bd:ba:38:20:b8:47:c5:bd:59:b3:e2:d0: da:25:9e:54:79:55:1f:56:84:06:ba:14:0b:02:9c: dc:39:c8:89:f6:e6:21:2c:ce:08:43:7c:87:a3:7f: 1d:3b:01:ac:a5:de:6d:f7:74:13:3b:65:c9:10:8d: c3:0d:5f:42:ae:2d:81:c1:a4:2f:1a:90:e7:aa:82: 52:0e:10:0a:98:b4:9e:e1:66:4e:63:8a:f9:2e:8a: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151308 sbgp-ipAddrBlock: critical IPv4: 103.216.156.0/23 Signature Algorithm: sha256WithRSAEncryption 70:a1:85:92:f0:2a:5b:03:e2:a1:44:0e:ab:7f:70:c1:07:44: d4:63:5a:73:55:95:d8:e1:1f:71:3a:fc:6f:7a:f6:6d:cb:64: 1d:a3:96:85:c0:3e:bf:c6:d2:dd:c2:33:4e:16:70:bb:4e:48: 9b:03:57:1f:f2:1b:49:53:49:51:14:da:c5:dd:04:7d:79:de: 1e:6f:d6:34:6e:c6:cf:1f:91:bb:df:1a:af:41:78:43:3d:6f: cb:e5:a1:b8:04:84:c0:66:6c:83:6f:a2:52:f3:d6:f4:31:60: 0e:66:ee:93:78:ee:ea:f8:77:19:c1:9c:5d:eb:7e:5a:5a:33: 83:6a:e7:5c:a2:38:41:4e:54:0e:f6:d1:b7:f6:f8:74:f6:67: 0a:4b:ae:20:f9:f2:bc:c1:99:4a:5d:d5:8d:6e:4c:6b:4f:b1: 98:2d:fb:09:7e:38:38:94:bd:7b:75:c1:5e:6d:12:82:b9:d1: af:2c:e4:fa:81:38:30:22:e7:1b:99:24:be:a9:9e:c0:2f:05: 7a:e1:be:fa:f2:eb:85:9c:78:89:c0:e4:b8:04:d7:1b:a7:01: 2e:84:31:0a:ec:80:9f:46:15:96:43:21:c9:f8:19:f9:d8:52: 12:0a:1f:9f:93:09:46:f6:9f:9d:b3:9e:0a:ff:24:ac:19:8b: 59:3a:56:8a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAM0XMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA3MzNaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEZEMTcyQjA5Mjc1NThEQjdBRThBREUzQjRGNURENDlFREI0NUI1 ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxz9bP46w2dvXvt4tu RylyM+jaiIDNUXpLl64pDpcwLtq77HMsFOSOUiiAXThmIOu69QEFOGPfZpTKEsIZ OVmWYN//4sWIlj7qyOS1vxYgP8+ej8zfPOY+Zcm/lPcRn07bz4oxVjzHAo3O1uco 73weWpCdkD3t2S4si952IVnl6a3naYAwCR2GRx/X2uFe3aIHkgdNLxbhVJiiaeGw SEZLegmwXIB+R726OCC4R8W9WbPi0NolnlR5VR9WhAa6FAsCnNw5yIn25iEszghD fIejfx07Aayl3m33dBM7ZckQjcMNX0KuLYHBpC8akOeqglIOEAqYtJ7hZk5jivku ikHLAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU/RcrCSdVjbeuit47T13UnttFtYIw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MzYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIzNi9fUmNyQ1NkVmpiZXVpdDQ3VDEzVW50dEZ0WUkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJPDDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfYnDANBgkqhkiG9w0BAQsFAAOCAQEAcKGFkvAqWwPioUQOq39w wQdE1GNac1WV2OEfcTr8b3r2bctkHaOWhcA+v8bS3cIzThZwu05ImwNXH/IbSVNJ URTaxd0EfXneHm/WNG7Gzx+Ru98ar0F4Qz1vy+WhuASEwGZsg2+iUvPW9DFgDmbu k3ju6vh3GcGcXet+Wlozg2rnXKI4QU5UDvbRt/b4dPZnCkuuIPnyvMGZSl3VjW5M a0+xmC37CX44OJS9e3XBXm0SgrnRryzk+oE4MCLnG5kkvqmewC8FeuG++vLrhZx4 icDkuATXG6cBLoQxCuyAn0YVlkMhyfgZ+dhSEgofn5MJRvafnbOeCv8krBmLWTpW ig== -----END CERTIFICATE-----Generated at Sat Apr 26 08:13:29 2025 by rpki-client