$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/eulp1muK2ryf72OJwrw1xQoV7a0.cer File: eulp1muK2ryf72OJwrw1xQoV7a0.cer (raw, json) Hash identifier: a+A6cw7fUKX4crtCppoMQLYbpD4KLRkt8BhXTEIq7wY= Subject key identifier: 7A:E9:69:D6:6B:8A:DA:BC:9F:EF:63:89:C2:BC:35:C5:0A:15:ED:AD Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CDD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:11:02 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 220.154.0.0/16 IP: 221.123.0.0/17 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52693 (0xcdd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:11:02 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7AE969D66B8ADABC9FEF6389C2BC35C50A15EDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:38:15:21:62:42:bc:5b:09:31:a7:c6:6a:90: 22:21:93:9f:cd:35:7e:b4:7b:1b:86:ca:4e:b9:64: 16:a3:01:df:ae:d7:e9:e7:7f:7b:52:1c:f7:91:8d: 20:09:e1:f2:74:b3:8d:75:62:4f:73:cf:e5:2e:a7: 0a:e0:44:f5:d0:5f:2f:3e:b3:bd:90:42:84:70:0b: 26:d0:c4:76:68:3c:3e:94:9a:08:ff:26:7e:49:5f: fe:e4:10:8b:c7:56:53:5c:db:fd:cb:aa:9a:dc:15: 52:92:20:7d:f4:ec:b5:5d:e2:da:5e:aa:a6:27:c3: 80:cc:aa:73:50:f6:3b:00:db:f6:b4:5c:e4:17:0e: 41:a0:0b:1a:3b:e9:6d:48:af:72:a3:53:56:70:2b: f9:f0:70:1e:f4:01:b8:6d:74:bb:2f:ce:1d:31:2b: 19:0c:73:31:86:c4:61:7a:08:4b:14:ec:0e:d0:36: 23:a6:0c:16:17:5d:46:e0:ac:94:13:04:e6:6a:f4: 4d:49:6b:79:da:b2:c8:af:3a:67:eb:53:b0:d5:ef: 49:37:15:09:3f:24:aa:f1:f3:ee:6d:a4:34:d4:32: 30:de:0a:47:49:b6:28:8c:8e:fd:d9:9d:c8:be:46: 6e:50:67:4a:3a:52:77:e4:51:15:21:53:98:7a:21: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E9:69:D6:6B:8A:DA:BC:9F:EF:63:89:C2:BC:35:C5:0A:15:ED:AD X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3310/eulp1muK2ryf72OJwrw1xQoV7a0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.154.0.0/16 221.123.0.0/17 Signature Algorithm: sha256WithRSAEncryption 37:64:c9:21:05:15:d0:3a:c2:aa:64:33:18:54:9c:b8:e7:7e: e0:ed:7d:ce:3a:22:27:73:bf:f0:84:b0:76:3a:7f:37:9f:1e: 2c:ad:8e:11:f6:6f:3f:07:99:ca:51:7f:64:21:99:2c:fa:4a: 84:48:9d:df:99:4e:f2:1a:2c:eb:42:19:d4:00:49:ce:4b:de: 3b:ac:a1:fc:3c:29:d2:e5:3d:0f:33:13:79:1b:56:b9:70:8e: 26:62:76:7c:9f:c0:e1:79:41:63:a1:3d:67:0b:ec:8c:92:95: b6:49:70:55:ff:c2:3f:76:9a:e1:a1:31:3f:23:20:63:f9:83: 24:d6:7c:03:c2:8a:60:64:f9:5e:a4:88:d0:95:d2:f7:f6:02: 20:9a:61:5f:8b:4f:7d:e4:84:f2:33:38:77:07:0b:eb:7a:40: cb:26:cb:e1:2b:5a:04:bb:81:62:8b:33:fe:3e:64:a4:74:62: 8e:ad:a3:e8:28:17:5e:13:f5:47:07:fc:e2:fc:2e:70:e4:a9: 86:1e:bc:c5:65:79:35:b3:cd:dd:3c:6c:12:da:98:ad:ae:58: c5:3b:74:32:f0:41:d1:c0:9a:0f:be:96:b8:80:60:44:7a:67: 9e:be:c6:4a:64:2e:dc:e8:e5:e5:0b:eb:80:fa:cc:d6:9d:18: 7d:bb:6f:32 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIDAM3VMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODExMDJaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDdBRTk2OUQ2NkI4QURBQkM5RkVGNjM4OUMyQkMzNUM1MEExNUVE QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsOBUhYkK8Wwkxp8Zq kCIhk5/NNX60exuGyk65ZBajAd+u1+nnf3tSHPeRjSAJ4fJ0s411Yk9zz+Uupwrg RPXQXy8+s72QQoRwCybQxHZoPD6Umgj/Jn5JX/7kEIvHVlNc2/3LqprcFVKSIH30 7LVd4tpeqqYnw4DMqnNQ9jsA2/a0XOQXDkGgCxo76W1Ir3KjU1ZwK/nwcB70Abht dLsvzh0xKxkMczGGxGF6CEsU7A7QNiOmDBYXXUbgrJQTBOZq9E1Ja3nassivOmfr U7DV70k3FQk/JKrx8+5tpDTUMjDeCkdJtiiMjv3Znci+Rm5QZ0o6UnfkURUhU5h6 IQAtAgMBAAGjggJaMIICVjAdBgNVHQ4EFgQUeulp1muK2ryf72OJwrw1xQoV7a0w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MTAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMxMC9ldWxwMW11SzJyeWY3Mk9Kd3J3MXhRb1Y3YTAubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMA3JoDBAfdewAwDQYJKoZIhvcN AQELBQADggEBADdkySEFFdA6wqpkMxhUnLjnfuDtfc46Iidzv/CEsHY6fzefHiyt jhH2bz8HmcpRf2QhmSz6SoRInd+ZTvIaLOtCGdQASc5L3jusofw8KdLlPQ8zE3kb VrlwjiZidnyfwOF5QWOhPWcL7IySlbZJcFX/wj92muGhMT8jIGP5gyTWfAPCimBk +V6kiNCV0vf2AiCaYV+LT33khPIzOHcHC+t6QMsmy+ErWgS7gWKLM/4+ZKR0Yo6t o+goF14T9UcH/OL8LnDkqYYevMVleTWzzd08bBLamK2uWMU7dDLwQdHAmg++lriA YER6Z56+xkpkLtzo5eUL64D6zNadGH27bzI= -----END CERTIFICATE-----Generated at Sat Apr 26 08:14:09 2025 by rpki-client