$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer File: f_5usVL6-W0Yv8af0-O_mYYqqfE.cer (raw, json) Hash identifier: tGTMSu7v0xDyEt/b3Tdoy98uoisdYITHFhnvQsuNz5o= Subject key identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D009 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 17 Apr 2025 20:07:27 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 210.87.72.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53257 (0xd009) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 17 20:07:27 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:89:f8:c1:a6:4b:5f:a3:87:13:d9:1c:2e: b9:b9:5b:de:5b:2a:02:c8:76:e6:ee:9e:d9:1c:e6: c6:bf:98:a6:48:c6:f9:81:e1:84:b8:47:97:1c:3a: 3f:67:b2:64:5a:26:dc:4f:df:52:da:3e:a2:9d:fc: e0:35:08:44:d4:63:7d:19:04:14:59:1a:1f:32:8f: d8:c1:36:14:af:ef:1e:0e:45:a0:0a:7c:5e:91:37: 02:fd:0e:8e:78:24:66:ce:77:ce:7c:9d:4e:03:85: 4d:dd:16:01:98:4a:4d:c4:70:15:b4:91:a6:b3:f3: 7e:7b:4d:2e:52:30:0c:7b:84:2a:25:d5:89:f3:f5: 05:87:4d:22:3c:ae:4b:0b:6c:5f:1c:8d:cb:cd:33: e8:25:57:d2:0f:da:e3:98:52:a8:d2:6c:a1:6b:2d: 7c:80:e6:06:d2:89:85:2c:f2:10:3f:d4:67:fe:5c: e5:db:b5:5c:50:a6:8b:90:17:5f:21:d7:fe:4b:a0: 79:9a:91:f1:9b:8e:c3:02:49:57:ab:6b:62:b0:31: 3e:85:09:dc:e8:9d:dc:2a:c2:1a:03:71:68:36:74: 90:f8:01:41:ed:b0:56:48:53:76:fb:a1:de:06:44: 46:0b:c9:74:cb:7b:32:ab:91:1b:3a:46:ea:23:bc: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.87.72.0/23 Signature Algorithm: sha256WithRSAEncryption af:04:61:33:c5:77:de:1c:d1:b8:f6:d5:c8:f6:3d:aa:60:d3: c9:7b:65:f8:6f:6d:c9:f7:cb:48:07:89:8d:fd:05:92:30:91: 39:2e:06:d5:9c:46:54:25:33:cb:35:b7:be:60:81:22:09:a8: 75:41:5f:9f:ae:3c:ba:ae:a5:e8:76:14:3d:10:78:b0:21:c0: f8:d5:2b:2f:bb:ac:c2:16:36:f0:d3:59:ac:e1:47:19:aa:02: 1d:c9:8f:3b:b8:a1:86:52:bc:1a:4a:82:99:c5:4c:49:2e:ca: 45:b6:f5:b2:f9:d9:33:07:43:7e:89:7c:5d:ee:44:b9:08:54: fb:cd:4f:f3:11:e0:52:61:13:a5:25:81:d8:4b:cf:c9:71:b7: 95:1d:33:8b:87:5f:e8:06:57:a5:b2:4c:a4:0d:80:fc:5f:ba: cf:aa:ac:99:d6:1f:42:e2:d9:2c:57:c4:1d:d4:12:c9:28:be: 1c:6e:aa:9e:07:b6:84:d0:3d:5c:00:3c:c8:c1:ca:26:e1:c8: 54:ce:69:a9:f8:50:65:bd:08:70:f0:a3:61:8f:89:89:1c:f5: 1a:b8:44:52:c4:92:d8:b5:60:07:db:c2:da:ae:ea:9d:8a:d2: 5a:b7:59:25:d5:e7:d9:d7:02:e0:cd:87:60:82:d1:19:e5:7f: 45:a8:4d:13 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDANAJMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MTcyMDA3MjdaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDdGRkU2RUIxNTJGQUY5NkQxOEJGQzY5RkQzRTNCRjk5ODYyQUE5 RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgon4waZLX6OHE9kc Lrm5W95bKgLIdubuntkc5sa/mKZIxvmB4YS4R5ccOj9nsmRaJtxP31LaPqKd/OA1 CETUY30ZBBRZGh8yj9jBNhSv7x4ORaAKfF6RNwL9Do54JGbOd858nU4DhU3dFgGY Sk3EcBW0kaaz8357TS5SMAx7hCol1Ynz9QWHTSI8rksLbF8cjcvNM+glV9IP2uOY UqjSbKFrLXyA5gbSiYUs8hA/1Gf+XOXbtVxQpouQF18h1/5LoHmakfGbjsMCSVer a2KwMT6FCdzondwqwhoDcWg2dJD4AUHtsFZIU3b7od4GREYLyXTLezKrkRs6Ruoj vEZfAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUf/5usVL6+W0Yv8af0+O/mYYqqfEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Ni9mXzV1c1ZMNi1XMFl2OGFmMC1PX21ZWXFxZkUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ldIMA0GCSqGSIb3DQEBCwUA A4IBAQCvBGEzxXfeHNG49tXI9j2qYNPJe2X4b23J98tIB4mN/QWSMJE5LgbVnEZU JTPLNbe+YIEiCah1QV+frjy6rqXodhQ9EHiwIcD41Ssvu6zCFjbw01ms4UcZqgId yY87uKGGUrwaSoKZxUxJLspFtvWy+dkzB0N+iXxd7kS5CFT7zU/zEeBSYROlJYHY S8/JcbeVHTOLh1/oBlelskykDYD8X7rPqqyZ1h9C4tksV8Qd1BLJKL4cbqqeB7aE 0D1cADzIwcom4chUzmmp+FBlvQhw8KNhj4mJHPUauERSxJLYtWAH28LaruqditJa t1kl1efZ1wLgzYdggtEZ5X9FqE0T -----END CERTIFICATE-----Generated at Sat Apr 26 08:18:47 2025 by rpki-client