$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer (raw, json) Hash identifier: JyX7p4mTQYYE/Pzi3fNr3UY6WIiasTc0sTWC6N/hKAo= Subject key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CDB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:14:36 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 160.187.223.0/24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15579 (0x3cdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:14:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:ee:63:a1:78:e3:a3:c7:43:c5:17:6b:b0: f7:c7:9f:b2:aa:9e:5f:ea:63:0b:c3:9d:82:04:05: c2:0c:e7:d2:fa:6d:72:3d:e5:13:e7:65:ce:8a:10: 8b:59:63:53:ea:7f:9e:56:61:2a:90:04:1d:91:ce: 8e:58:c8:6b:5b:77:f5:f4:32:54:78:07:68:8c:56: 14:43:ed:c3:e7:b4:4d:3d:c3:ac:72:03:17:27:7f: 8a:da:36:87:22:2d:ce:59:63:d8:d5:33:5f:11:66: ad:dc:86:d6:f3:a4:11:ca:10:cc:59:3c:2c:bb:fd: 85:3b:2d:f6:a4:9e:be:16:28:cb:b8:71:c8:59:aa: 06:3f:40:f2:20:fc:0a:12:26:1c:7f:0b:14:07:9f: 22:f8:2d:00:21:bd:ea:c9:59:85:98:28:b7:16:fb: 18:81:64:7e:e3:5d:da:cb:1a:63:92:9b:ad:0d:a5: 0b:b1:09:ea:f8:ad:d7:c6:71:69:6f:ed:67:31:d3: 4b:86:91:4d:56:91:27:5c:e3:31:98:58:f2:9a:cd: 73:eb:bb:55:66:fe:bb:ce:91:5f:3b:f2:24:88:01: 95:a8:d0:c0:9e:e4:cc:c1:18:cd:be:39:71:03:29: 2c:94:78:67:cb:f9:99:06:ec:84:0e:0c:77:8b:a3: 44:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.223.0/24 Signature Algorithm: sha256WithRSAEncryption 62:9e:28:f6:46:85:8e:37:c5:ec:98:e1:6b:48:23:b5:00:16: 9e:c0:8f:21:b8:de:4e:81:ab:e6:19:27:d4:aa:34:ec:a8:1a: a7:1c:1a:bb:a9:71:10:da:25:2e:14:df:30:17:b4:29:7b:4e: 6a:a2:f5:13:b4:43:ff:7c:8a:c1:59:19:7f:46:fa:24:71:33: fe:95:93:a0:cd:ec:ab:f7:5d:06:8b:cd:fb:15:b7:3b:e8:54: 04:b9:6d:c8:f8:d9:50:0f:d3:d2:bb:b2:31:35:4e:f8:e9:5a: 9a:23:ff:15:e0:5f:36:26:85:c7:ac:87:c3:dd:48:84:b7:1a: 48:46:d6:ce:79:e2:26:3b:cd:e7:9a:eb:64:94:1e:bf:0c:60: 69:91:6b:14:07:54:94:66:83:01:c0:f3:c9:6b:e6:70:bb:d3: a4:5e:43:f6:bb:65:53:58:90:61:c8:f1:dd:75:05:0b:35:cf: fb:ec:13:59:1e:dd:d2:32:3a:cf:44:aa:5c:aa:df:49:15:6f: e3:69:08:7d:f3:ce:aa:b1:ef:9d:aa:5e:30:2a:38:87:aa:dc: 82:00:18:46:4c:e8:5e:d2:8c:27:58:72:17:23:f1:c6:14:71: f4:46:f7:55:85:68:08:77:93:43:0b:b2:14:e5:ee:c2:ef:c0: ce:23:ce:91 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPNswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTQzNloXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoQTM4RDVGM0VBNjU0QUQ4QzZENjU0REE1QkU5MDhBNjU4RjI2NkU2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSE7mOheOOjx0PFF2uw 98efsqqeX+pjC8OdggQFwgzn0vptcj3lE+dlzooQi1ljU+p/nlZhKpAEHZHOjljI a1t39fQyVHgHaIxWFEPtw+e0TT3DrHIDFyd/ito2hyItzllj2NUzXxFmrdyG1vOk EcoQzFk8LLv9hTst9qSevhYoy7hxyFmqBj9A8iD8ChImHH8LFAefIvgtACG96slZ hZgotxb7GIFkfuNd2ssaY5KbrQ2lC7EJ6vit18ZxaW/tZzHTS4aRTVaRJ1zjMZhY 8prNc+u7VWb+u86RXzvyJIgBlajQwJ7kzMEYzb45cQMpLJR4Z8v5mQbshA4Md4uj RMECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSjjV8+plStjG1lTaW+kIpljyZuZDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzE5L280MWZQcVpVcll4dFpVMmx2cENLWlk4bWJtUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu98wDQYJKoZIhvcNAQELBQAD ggEBAGKeKPZGhY43xeyY4WtII7UAFp7AjyG43k6Bq+YZJ9SqNOyoGqccGrupcRDa JS4U3zAXtCl7Tmqi9RO0Q/98isFZGX9G+iRxM/6Vk6DN7Kv3XQaLzfsVtzvoVAS5 bcj42VAP09K7sjE1TvjpWpoj/xXgXzYmhcesh8PdSIS3GkhG1s554iY7zeea62SU Hr8MYGmRaxQHVJRmgwHA88lr5nC706ReQ/a7ZVNYkGHI8d11BQs1z/vsE1ke3dIy Os9Eqlyq30kVb+NpCH3zzqqx752qXjAqOIeq3IIAGEZM6F7SjCdYchcj8cYUcfRG 91WFaAh3k0MLshTl7sLvwM4jzpE= -----END CERTIFICATE-----Generated at Sat Apr 26 09:39:43 2025 by rpki-client