$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer File: fetUO9g1VViFIfIivviJGRdeExQ.cer (raw, json) Hash identifier: KXenbS2fbXNQCmRCuQazwO/RwpN+jNHcVdg2XYe3BG4= Subject key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CD5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:08:47 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 103.123.200.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52575 (0xcd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:08:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7DEB543BD83555588521F222BEF88919175E1314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:2b:ef:d5:2d:1d:a0:7d:5b:e9:d5:2d:04: 23:76:cc:36:7b:d0:68:2e:ef:9b:fd:c2:59:d5:ab: 9b:d0:5d:ba:19:2a:47:45:93:f5:9c:c8:42:d4:cc: 55:4f:c3:f6:ee:c7:4a:46:24:52:8b:a5:31:a8:0d: fd:8b:0f:d2:c4:58:db:7d:5e:54:40:f8:9f:89:22: 6c:d5:2c:96:aa:06:36:7d:5e:3a:de:de:31:16:2c: 9b:ec:b3:15:7c:f6:c0:85:9d:2c:b9:75:b0:f6:21: 69:b1:e6:52:15:06:83:bc:68:07:24:20:fe:40:5e: 3a:ca:3c:4c:16:77:19:80:20:1e:07:77:6d:f2:cc: 68:3a:5f:7f:e5:54:1f:41:8b:35:45:f6:d7:8e:06: 61:13:89:55:5e:bb:22:f1:e7:69:83:07:d4:90:3a: d9:0b:57:ab:70:cf:1d:d0:34:26:fd:0d:c7:0d:ee: 05:50:4c:36:e8:12:80:c3:25:65:de:2d:eb:86:dc: 46:3b:78:10:6e:42:eb:51:8a:ea:f1:15:d1:dc:ae: 01:2f:8f:4a:7d:17:fb:2f:2e:25:3d:42:db:df:e5: 64:c4:3a:e2:3e:68:42:5b:11:7a:a9:07:59:d5:fb: 32:68:91:5d:39:2c:56:8c:06:94:1d:83:1f:91:10: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.200.0/22 Signature Algorithm: sha256WithRSAEncryption 77:97:ea:4e:ab:43:a5:32:da:e3:56:ed:f2:a0:99:f8:c8:b8: cb:10:ea:e2:fe:27:d3:8c:53:23:59:6a:84:30:ea:09:aa:49: a2:2f:8d:72:90:06:7f:33:3d:e7:16:c5:5a:70:5a:ee:48:cc: ed:58:c1:da:f1:64:e3:13:ed:f6:ae:ce:3b:dc:58:b9:3c:24: 9f:95:a6:53:32:a1:e7:76:68:c3:31:a9:0a:0c:aa:92:6b:e7: 31:56:43:cd:aa:ca:27:e0:55:c4:c7:7d:ef:be:aa:e1:33:71: 35:79:c4:5a:66:a2:79:a5:7a:4e:ff:8c:5c:05:20:7e:13:64: c6:8b:57:52:60:fc:ee:cc:38:96:44:2d:de:c4:64:cf:55:7d: f4:ad:64:64:dc:e3:df:11:9d:77:33:89:0c:70:41:2f:3e:64: 9d:1f:ad:04:b2:38:32:c6:09:25:24:69:51:71:78:01:a0:d4: 5b:d7:5a:40:c0:3f:ee:24:8f:ce:49:e1:4f:da:8c:ee:21:c1: 92:07:ae:37:2b:d4:9a:4b:f2:f6:75:3f:5f:e1:e7:93:c7:6b: 8b:e2:8a:a3:c8:93:be:8a:c3:3e:aa:17:60:1b:5b:4d:3e:1b: 58:4a:e7:2b:cb:33:ff:69:ab:77:2d:f5:79:83:7d:1e:09:21: 51:78:ff:51 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAM1fMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA4NDdaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDdERUI1NDNCRDgzNTU1NTg4NTIxRjIyMkJFRjg4OTE5MTc1RTEz MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWSvv1S0doH1b6dUt BCN2zDZ70Ggu75v9wlnVq5vQXboZKkdFk/WcyELUzFVPw/bux0pGJFKLpTGoDf2L D9LEWNt9XlRA+J+JImzVLJaqBjZ9Xjre3jEWLJvssxV89sCFnSy5dbD2IWmx5lIV BoO8aAckIP5AXjrKPEwWdxmAIB4Hd23yzGg6X3/lVB9BizVF9teOBmETiVVeuyLx 52mDB9SQOtkLV6twzx3QNCb9DccN7gVQTDboEoDDJWXeLeuG3EY7eBBuQutRiurx FdHcrgEvj0p9F/svLiU9Qtvf5WTEOuI+aEJbEXqpB1nV+zJokV05LFaMBpQdgx+R EI9XAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUfetUO9g1VViFIfIivviJGRdeExQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MjMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMyMy9mZXRVTzlnMVZWaUZJZklpdnZpSkdSZGVFeFEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3vIMA0GCSqGSIb3DQEBCwUA A4IBAQB3l+pOq0OlMtrjVu3yoJn4yLjLEOri/ifTjFMjWWqEMOoJqkmiL41ykAZ/ Mz3nFsVacFruSMztWMHa8WTjE+32rs473Fi5PCSflaZTMqHndmjDMakKDKqSa+cx VkPNqson4FXEx33vvqrhM3E1ecRaZqJ5pXpO/4xcBSB+E2TGi1dSYPzuzDiWRC3e xGTPVX30rWRk3OPfEZ13M4kMcEEvPmSdH60EsjgyxgklJGlRcXgBoNRb11pAwD/u JI/OSeFP2ozuIcGSB643K9SaS/L2dT9f4eeTx2uL4oqjyJO+isM+qhdgG1tNPhtY SucryzP/aat3LfV5g30eCSFReP9R -----END CERTIFICATE-----Generated at Sat Apr 26 08:21:21 2025 by rpki-client