$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer File: dLHNkLnEHIANH1u3AQiWQC4auU4.cer (raw, json) Hash identifier: 8Euus6T0V20cmBVZxzboJFZvXE1X6v2P1mGCa1iY9cY= Subject key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CBD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:12:16 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 160.250.160.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15549 (0x3cbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:12:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:32:2e:35:d4:25:d1:07:b6:e7:80:58:0f: 4b:e0:25:6e:c6:41:76:6a:71:f0:cb:6c:b0:3a:b3: 16:a2:0a:19:f8:c1:fc:2c:8a:f1:e4:66:6d:00:91: f6:b1:bf:41:5a:d4:83:18:86:9b:4e:d6:6e:7f:ed: 6a:fe:03:4c:a7:f6:ae:8f:ce:bf:90:1a:0d:bc:a8: 11:71:78:aa:0f:f8:35:5c:54:e6:fd:88:bb:d3:72: f2:7c:c2:b6:e0:d5:90:b8:8f:19:83:73:5c:a8:79: 1d:af:ec:3e:35:00:9c:81:4a:30:93:1f:33:52:b7: a2:86:b3:53:63:4d:47:a5:ad:55:2c:d9:cf:25:26: 92:b4:ba:13:24:a4:42:e9:d8:23:c3:1c:ab:3d:d5: 97:47:00:bf:b5:3f:9c:f2:3f:8b:db:88:b1:42:8c: 55:00:c7:43:23:e2:d9:89:9d:a8:d1:f4:09:70:03: 92:72:9e:fc:c6:b9:be:7e:10:57:c3:84:42:67:9b: ef:fc:b6:ea:c2:36:7e:1c:ce:be:94:bb:19:d7:fd: 06:aa:4f:c5:61:de:5f:1a:6a:ab:3e:28:c4:b6:eb: a1:d9:5f:19:55:84:86:54:a7:f4:45:6a:9b:cf:44: 83:94:3a:34:a1:a2:ef:64:12:4b:1c:22:30:f6:e4: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.160.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:77:3c:e6:b6:d7:c3:2f:25:f1:4a:80:ef:60:3d:53:ce:29: e9:76:0b:e4:6d:0a:86:fc:54:6d:41:d0:28:ba:d8:bf:be:95: 84:eb:ca:8a:bc:75:50:29:94:2c:8b:09:87:f8:ae:4d:d5:15: 94:b6:b9:3a:69:d4:5b:ff:b8:91:0e:31:41:81:92:75:c7:59: 94:77:6b:d2:9b:2b:c1:b3:4d:f8:3c:04:a1:6d:d4:5b:4b:46: 6d:c8:5f:3b:3b:93:4b:ab:dc:09:47:2c:d0:e7:73:dc:d6:ed: 2e:7a:fd:fc:73:91:b6:58:3f:05:aa:3e:83:23:42:ab:70:01: ee:84:b7:16:98:99:75:2b:23:e0:89:66:b5:70:b9:c1:fc:17: 0b:f2:68:1f:15:63:c6:d2:4e:93:1c:d6:38:ed:15:68:b7:41: 1f:c4:9e:a6:11:42:3e:e7:23:a1:5f:c7:95:e9:e0:df:e1:b6: 56:39:5c:97:4c:cf:dc:0f:d5:59:e7:68:71:6e:7a:31:60:36: 53:cb:f6:45:99:f7:d7:bb:bc:df:30:1e:36:73:fd:eb:7c:45: 9d:b0:26:52:e0:56:1e:a2:1d:e7:7a:b0:60:6a:6e:18:aa:a8: b1:50:4b:75:54:17:c0:b6:28:2a:ce:b3:10:6a:e9:19:56:12: dc:e8:4e:61 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPL0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTIxNloXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoNzRCMUNEOTBCOUM0MUM4MDBEMUY1QkI3MDEwODk2NDAyRTFBQjk0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxXMi411CXRB7bngFgP S+AlbsZBdmpx8MtssDqzFqIKGfjB/CyK8eRmbQCR9rG/QVrUgxiGm07Wbn/tav4D TKf2ro/Ov5AaDbyoEXF4qg/4NVxU5v2Iu9Ny8nzCtuDVkLiPGYNzXKh5Ha/sPjUA nIFKMJMfM1K3ooazU2NNR6WtVSzZzyUmkrS6EySkQunYI8Mcqz3Vl0cAv7U/nPI/ i9uIsUKMVQDHQyPi2YmdqNH0CXADknKe/Ma5vn4QV8OEQmeb7/y26sI2fhzOvpS7 Gdf9BqpPxWHeXxpqqz4oxLbrodlfGVWEhlSn9EVqm89Eg5Q6NKGi72QSSxwiMPbk 3b0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR0sc2QucQcgA0fW7cBCJZALhq5TjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzM1L2RMSE5rTG5FSElBTkgxdTNBUWlXUUM0YXVVNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+qAwDQYJKoZIhvcNAQELBQAD ggEBABp3POa218MvJfFKgO9gPVPOKel2C+RtCob8VG1B0Ci62L++lYTryoq8dVAp lCyLCYf4rk3VFZS2uTpp1Fv/uJEOMUGBknXHWZR3a9KbK8GzTfg8BKFt1FtLRm3I Xzs7k0ur3AlHLNDnc9zW7S56/fxzkbZYPwWqPoMjQqtwAe6EtxaYmXUrI+CJZrVw ucH8FwvyaB8VY8bSTpMc1jjtFWi3QR/EnqYRQj7nI6Ffx5Xp4N/htlY5XJdMz9wP 1VnnaHFuejFgNlPL9kWZ99e7vN8wHjZz/et8RZ2wJlLgVh6iHed6sGBqbhiqqLFQ S3VUF8C2KCrOsxBq6RlWEtzoTmE= -----END CERTIFICATE-----Generated at Sat Apr 26 09:45:22 2025 by rpki-client