$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/lpPABd1I-3AAbT-K0ysiHRUe08w.cer File: lpPABd1I-3AAbT-K0ysiHRUe08w.cer (raw, json) Hash identifier: JVNv7nEaEVHWjIRgDEgZndO41EERDIMNs7v/g4QZp34= Subject key identifier: 96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CCED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:06:47 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:92a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52461 (0xcced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:06:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=9693C005DD48FB70006D3F8AD32B221D151ED3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:77:7f:fd:09:85:7f:98:fb:a8:80:53:4b: f2:4a:d9:a3:f7:5a:42:2e:1e:77:13:76:70:d5:6f: 5d:fa:57:13:82:2b:a8:05:dc:e8:9b:c4:13:7e:60: 47:a2:63:13:c1:c9:7c:20:20:01:96:08:32:13:57: 43:38:4f:59:97:bf:fd:82:d0:d4:a7:23:b7:32:da: 4b:64:36:f4:fa:8a:e9:2b:e6:5d:af:4e:4a:ed:b1: 61:af:76:cd:c4:e8:f8:4b:60:bc:e0:10:70:cc:86: 2a:fa:fe:e3:e1:23:8f:83:da:30:7e:74:76:76:04: a0:90:a9:c3:9f:0c:20:2c:3a:d1:5f:bb:a4:6f:19: b7:ec:b9:3e:a6:13:83:0c:26:48:23:76:9e:f8:b7: 97:9a:c2:e7:21:2d:cd:c0:5e:df:cb:ee:47:6a:04: de:84:37:a6:29:2a:a9:32:64:f0:08:00:cd:69:9a: f5:da:ad:6e:15:cf:dd:5e:67:3b:a1:bd:65:24:6c: 70:de:ae:62:74:8d:8a:30:4e:55:f0:3a:a9:9c:28: 37:71:2c:33:90:72:c4:6b:52:6f:14:67:47:2f:3b: b0:69:99:49:0b:2d:a0:0d:c8:c0:c2:b5:87:cb:0c: 50:d5:c6:5a:f1:15:23:bb:c8:66:c1:01:cc:24:08: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:92a0::/32 Signature Algorithm: sha256WithRSAEncryption 47:38:5a:04:8f:b2:ad:1c:19:fa:93:f6:0d:02:19:82:70:b2: e3:a2:ba:dd:2b:52:15:e3:9d:72:fa:a2:e8:ba:d1:1e:b0:48: 4d:25:a2:a6:ea:94:42:46:89:0b:de:cb:c3:3f:c6:7e:2f:c9: 86:33:f6:78:52:f6:d4:78:ab:a7:90:d3:16:51:d3:db:1f:c7: 39:02:ce:ce:dd:7a:bf:59:0d:28:0a:30:06:3d:4c:82:6d:4b: 49:43:30:02:98:8b:a5:ab:0f:27:9f:1b:c1:2f:be:95:ac:ba: 41:62:d6:c9:f7:ec:6d:cd:53:7a:52:83:31:19:95:b9:ef:14: c3:fd:0e:68:95:d4:4a:31:47:3f:c7:34:77:25:17:7b:d8:90: a7:92:22:d5:2b:2e:36:54:e8:16:8d:fe:40:db:60:fc:0a:1c: 84:dd:fb:65:52:c4:11:6a:45:28:66:93:48:c9:07:d4:b5:3e: 9d:75:68:08:16:51:39:84:32:b5:7f:fa:80:b2:47:2a:59:83: f7:52:58:cc:b6:48:09:a8:0c:e1:3c:c0:d9:57:ce:59:23:d1: d2:70:73:ab:dc:26:24:88:2f:74:f6:6b:aa:f4:c8:8c:1e:09: f1:79:62:45:a7:6b:9e:57:09:ca:14:98:3c:fc:1d:0e:0b:89: 5d:8e:9e:d1 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAMztMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA2NDdaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDk2OTNDMDA1REQ0OEZCNzAwMDZEM0Y4QUQzMkIyMjFEMTUxRUQz Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUHd//QmFf5j7qIBT S/JK2aP3WkIuHncTdnDVb136VxOCK6gF3OibxBN+YEeiYxPByXwgIAGWCDITV0M4 T1mXv/2C0NSnI7cy2ktkNvT6iukr5l2vTkrtsWGvds3E6PhLYLzgEHDMhir6/uPh I4+D2jB+dHZ2BKCQqcOfDCAsOtFfu6RvGbfsuT6mE4MMJkgjdp74t5eawuchLc3A Xt/L7kdqBN6EN6YpKqkyZPAIAM1pmvXarW4Vz91eZzuhvWUkbHDermJ0jYowTlXw OqmcKDdxLDOQcsRrUm8UZ0cvO7BpmUkLLaANyMDCtYfLDFDVxlrxFSO7yGbBAcwk CJ8FAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUlpPABd1I+3AAbT+K0ysiHRUe08ww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NC9scFBBQmQxSS0zQUFiVC1LMHlzaUhSVWUwOHcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGSoDANBgkqhkiG9w0BAQsF AAOCAQEARzhaBI+yrRwZ+pP2DQIZgnCy46K63StSFeOdcvqi6LrRHrBITSWipuqU QkaJC97Lwz/Gfi/JhjP2eFL21Hirp5DTFlHT2x/HOQLOzt16v1kNKAowBj1Mgm1L SUMwApiLpasPJ58bwS++lay6QWLWyffsbc1TelKDMRmVue8Uw/0OaJXUSjFHP8c0 dyUXe9iQp5Ii1SsuNlToFo3+QNtg/AochN37ZVLEEWpFKGaTSMkH1LU+nXVoCBZR OYQytX/6gLJHKlmD91JYzLZICagM4TzA2VfOWSPR0nBzq9wmJIgvdPZrqvTIjB4J 8XliRadrnlcJyhSYPPwdDguJXY6e0Q== -----END CERTIFICATE-----Generated at Sat Apr 26 08:23:20 2025 by rpki-client