$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/cgA7ZqRsigeu_fvVZhYXSr8XXyA.cer File: cgA7ZqRsigeu_fvVZhYXSr8XXyA.cer (raw, json) Hash identifier: +KPz9XrQb0cvcFWscjZtdxTiWiwGhZZz6ZEonFmFeME= Subject key identifier: 72:00:3B:66:A4:6C:8A:07:AE:FD:FB:D5:66:16:17:4A:BF:17:5F:20 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CC7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:13:35 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 160.250.102.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15559 (0x3cc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:13:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=72003B66A46C8A07AEFDFBD56616174ABF175F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:4c:2b:bf:05:5d:ce:35:78:02:d4:65:b2: 0e:d8:a2:99:64:dc:05:34:4e:b7:c8:4f:b3:0a:37: 5a:0d:24:6f:3e:62:80:d3:a5:bb:b9:97:5d:c7:6a: 05:7c:33:8c:ff:61:af:4d:47:5b:61:a3:08:62:b2: 44:c3:76:b8:5b:50:f5:43:2d:42:a5:af:e6:23:a9: 85:5b:69:d8:e4:6a:78:07:ce:65:42:a2:a3:21:72: 46:5e:5d:13:f2:4c:30:69:fb:9a:5c:88:0d:a3:8b: 29:5e:50:dd:20:00:44:04:40:1a:0d:fa:fc:59:65: 17:76:27:82:2a:31:5e:58:55:95:d0:83:d7:a0:d1: c6:e3:53:4e:10:42:20:ac:1a:c1:6f:31:c2:61:50: cb:38:0d:3d:2f:c6:15:35:ce:d8:f4:17:cc:cf:fa: 89:90:8c:42:be:d8:79:84:e4:fe:d7:3a:5a:52:07: f6:8f:ae:99:3f:25:9a:e8:95:7a:ff:3d:57:45:1a: 80:aa:ae:6c:c2:f4:89:56:69:da:d6:aa:09:fd:2a: 54:53:d6:f3:01:c0:af:c1:75:79:92:3a:9d:1a:ba: 62:38:cd:9e:8c:f0:90:aa:b2:fa:75:87:8b:4a:c1: 0c:d7:e4:a7:20:b4:be:5f:61:aa:ab:3a:c4:2f:56: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:00:3B:66:A4:6C:8A:07:AE:FD:FB:D5:66:16:17:4A:BF:17:5F:20 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/cgA7ZqRsigeu_fvVZhYXSr8XXyA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.102.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:aa:13:f1:ae:75:a6:69:99:42:e4:88:2c:ce:41:6e:39:d1: 56:8f:b1:e0:6d:02:ad:a9:30:40:8b:0f:60:00:93:e0:9b:99: e3:79:0a:e3:0f:22:62:23:0b:53:df:fc:71:7c:62:9a:72:8f: 18:71:7c:84:18:0e:a0:05:09:ab:68:c8:7c:d1:c7:56:64:89: ef:8e:51:cd:82:be:8d:de:ff:98:93:aa:bf:1f:ad:ab:f9:94: 1d:af:38:ac:ed:a1:50:4a:93:a5:8b:bb:fa:87:4e:68:b4:77: 13:fc:92:8a:a2:83:42:79:c6:ee:12:f4:a3:59:5d:87:4a:74: 9f:ca:07:a8:98:37:17:a9:6f:93:7a:b4:c4:c6:9c:75:31:fb: dc:d6:4f:7a:fb:f9:a4:a7:90:51:08:79:87:97:62:ed:8d:22: b1:00:29:ad:95:b8:9a:5f:ec:1a:44:f0:c7:68:e6:9c:c9:c3: 56:0a:0a:f9:54:6f:42:d9:f9:0c:fd:35:a8:49:81:6f:fd:3f: c5:40:c5:56:aa:40:39:9b:ca:b1:2d:78:1e:a6:5c:05:db:71: 91:36:ed:5d:29:cb:4d:55:40:d8:c2:bc:82:a7:10:cf:09:9b: 37:53:ef:19:73:3f:b8:c7:b7:f9:78:01:14:0d:ca:e1:40:93: a7:ea:ef:28 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPMcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTMzNVoXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoNzIwMDNCNjZBNDZDOEEwN0FFRkRGQkQ1NjYxNjE3NEFCRjE3NUYy MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALVTTCu/BV3ONXgC1GWy DtiimWTcBTROt8hPswo3Wg0kbz5igNOlu7mXXcdqBXwzjP9hr01HW2GjCGKyRMN2 uFtQ9UMtQqWv5iOphVtp2ORqeAfOZUKioyFyRl5dE/JMMGn7mlyIDaOLKV5Q3SAA RARAGg36/FllF3YngioxXlhVldCD16DRxuNTThBCIKwawW8xwmFQyzgNPS/GFTXO 2PQXzM/6iZCMQr7YeYTk/tc6WlIH9o+umT8lmuiVev89V0UagKqubML0iVZp2taq Cf0qVFPW8wHAr8F1eZI6nRq6YjjNnozwkKqy+nWHi0rBDNfkpyC0vl9hqqs6xC9W R6UCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRyADtmpGyKB679+9VmFhdKvxdfIDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzMwL2NnQTdacVJzaWdldV9mdlZaaFlYU3I4WFh5QS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+mYwDQYJKoZIhvcNAQELBQAD ggEBAJ+qE/GudaZpmULkiCzOQW450VaPseBtAq2pMECLD2AAk+CbmeN5CuMPImIj C1Pf/HF8YppyjxhxfIQYDqAFCatoyHzRx1Zkie+OUc2Cvo3e/5iTqr8frav5lB2v OKztoVBKk6WLu/qHTmi0dxP8koqig0J5xu4S9KNZXYdKdJ/KB6iYNxepb5N6tMTG nHUx+9zWT3r7+aSnkFEIeYeXYu2NIrEAKa2VuJpf7BpE8Mdo5pzJw1YKCvlUb0LZ +Qz9NahJgW/9P8VAxVaqQDmbyrEteB6mXAXbcZE27V0py01VQNjCvIKnEM8JmzdT 7xlzP7jHt/l4ARQNyuFAk6fq7yg= -----END CERTIFICATE-----Generated at Sat Apr 26 08:50:26 2025 by rpki-client