$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/a5mV9HjPG2vSjnyeKoOeyeBpgKg.cer File: a5mV9HjPG2vSjnyeKoOeyeBpgKg.cer (raw, json) Hash identifier: ezCAax9kuOsDppaie7TBH18/Ih5N9zwJ26Oxb5VCHuw= Subject key identifier: 6B:99:95:F4:78:CF:1B:6B:D2:8E:7C:9E:2A:83:9E:C9:E0:69:80:A8 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CD3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/a5mV9HjPG2vSjnyeKoOeyeBpgKg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:14:00 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 161.248.42.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15571 (0x3cd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:14:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6B9995F478CF1B6BD28E7C9E2A839EC9E06980A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:7f:e3:6c:a5:39:03:95:3d:82:0a:06:e4: 7e:c3:5e:a0:a0:be:e5:4a:73:46:7b:41:d2:92:37: 4b:ba:3c:d6:3e:bb:c6:76:f7:9e:ce:d5:56:66:ca: 08:da:0f:f2:bd:50:8a:b0:b5:1b:30:d9:a2:a6:41: a8:eb:31:76:91:30:fb:72:79:f3:fe:07:15:1a:d4: 89:41:c1:d4:08:e3:ee:5b:4d:c1:d8:aa:0c:c9:5e: c7:d6:c6:24:d0:e6:e7:ac:93:24:97:ff:bf:d0:3f: 9a:cb:0c:4b:85:76:e3:2a:57:67:05:ea:5a:94:a3: b4:f2:69:18:53:59:71:04:02:f5:8e:09:e2:30:9a: fa:9b:25:95:90:96:34:7e:ee:f5:7e:a8:ee:75:98: 82:cb:dc:9f:cb:5d:cb:6d:41:ca:03:0e:1c:3e:29: 40:6f:d2:41:58:2f:f6:4c:94:ce:27:3d:5a:32:76: 2f:a0:2a:f1:4f:ce:37:ad:8f:f6:30:06:bc:64:f1: cf:a1:fe:cd:5f:7c:39:1c:39:e9:c7:7c:71:be:1d: ca:5a:19:67:99:61:02:65:3a:d6:01:70:4c:7a:b4: cb:de:6f:f2:c8:5b:8c:04:ee:49:ec:86:c4:77:0a: d2:58:bc:05:6f:15:a3:b0:2d:3d:40:eb:ce:94:68: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:99:95:F4:78:CF:1B:6B:D2:8E:7C:9E:2A:83:9E:C9:E0:69:80:A8 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3344/a5mV9HjPG2vSjnyeKoOeyeBpgKg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.42.0/23 Signature Algorithm: sha256WithRSAEncryption 77:b2:97:4e:ee:be:cb:b5:e0:46:cf:aa:fc:4e:76:b6:53:94: b7:e0:29:13:f3:8b:30:a1:f4:8d:30:9a:c5:d5:82:27:a8:75: a7:a4:08:5e:cf:3d:72:1c:85:5f:16:95:a3:ae:4f:7e:3a:09: b0:68:41:4b:4b:ad:fd:a7:a2:ed:d3:9f:60:ca:9e:a1:3c:c7: 66:65:0b:16:27:0b:8c:98:ae:fc:b9:8e:26:46:82:14:a8:6d: f2:a4:e2:b0:82:b6:1c:18:33:bf:62:23:9f:dd:ff:6b:f3:fc: 26:bc:03:ce:a8:cb:2a:64:27:33:c7:f5:11:ef:f9:61:71:4b: 0e:d0:1d:83:55:73:6f:93:f0:8e:82:2e:98:13:d7:b9:ed:0d: 80:d1:a9:16:3f:a6:4b:88:54:79:91:09:d9:16:e5:d8:14:cf: a2:24:35:d2:4b:2c:a6:46:9c:c8:48:e1:aa:04:01:51:5a:50: 2f:e2:a5:10:fb:65:81:0f:bb:e3:40:3d:ab:4f:99:c5:8b:f3: 9c:66:8e:d4:b6:53:25:91:6b:a2:bb:5d:42:51:ab:79:f1:a0: 3f:ae:06:06:39:8c:8b:02:f3:25:6a:0e:f5:c5:93:e5:72:ed: 22:c8:e6:40:a8:ea:8f:dd:6f:81:51:0c:dd:c9:c5:47:93:67: f2:09:6d:22 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPNMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTQwMFoXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoNkI5OTk1RjQ3OENGMUI2QkQyOEU3QzlFMkE4MzlFQzlFMDY5ODBB ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFBf+NspTkDlT2CCgbk fsNeoKC+5UpzRntB0pI3S7o81j67xnb3ns7VVmbKCNoP8r1QirC1GzDZoqZBqOsx dpEw+3J58/4HFRrUiUHB1Ajj7ltNwdiqDMlex9bGJNDm56yTJJf/v9A/mssMS4V2 4ypXZwXqWpSjtPJpGFNZcQQC9Y4J4jCa+psllZCWNH7u9X6o7nWYgsvcn8tdy21B ygMOHD4pQG/SQVgv9kyUzic9WjJ2L6Aq8U/ON62P9jAGvGTxz6H+zV98ORw56cd8 cb4dyloZZ5lhAmU61gFwTHq0y95v8shbjATuSeyGxHcK0li8BW8Vo7AtPUDrzpRo pkcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRrmZX0eM8ba9KOfJ4qg57J4GmAqDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzQ0L2E1bVY5SGpQRzJ2U2pueWVLb09leWVCcGdLZy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGh+CowDQYJKoZIhvcNAQELBQAD ggEBAHeyl07uvsu14EbPqvxOdrZTlLfgKRPzizCh9I0wmsXVgieodaekCF7PPXIc hV8WlaOuT346CbBoQUtLrf2nou3Tn2DKnqE8x2ZlCxYnC4yYrvy5jiZGghSobfKk 4rCCthwYM79iI5/d/2vz/Ca8A86oyypkJzPH9RHv+WFxSw7QHYNVc2+T8I6CLpgT 17ntDYDRqRY/pkuIVHmRCdkW5dgUz6IkNdJLLKZGnMhI4aoEAVFaUC/ipRD7ZYEP u+NAPatPmcWL85xmjtS2UyWRa6K7XUJRq3nxoD+uBgY5jIsC8yVqDvXFk+Vy7SLI 5kCo6o/db4FRDN3JxUeTZ/IJbSI= -----END CERTIFICATE-----Generated at Sat Apr 26 09:45:26 2025 by rpki-client