$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer File: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer (raw, json) Hash identifier: 6uFWgYFepthjyng6kG1E13/F8JyG1GDVUKrLhVFWdiM= Subject key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CDCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:10:51 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:a720::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52683 (0xcdcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:10:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:ac:7b:83:c2:5c:5a:cd:e2:76:64:31:01: b6:81:2b:77:7b:7f:96:68:39:07:f3:31:75:86:f4: 95:ec:77:a2:6d:19:8d:8c:29:49:21:04:39:98:43: 2d:3c:6d:8d:eb:b3:08:c5:2a:7d:79:4e:63:22:38: fc:0a:8e:5a:e5:de:8a:8c:e9:61:d3:53:1b:76:38: f4:b9:18:98:b2:a1:8a:02:ba:fb:39:c8:3a:f4:ac: ed:73:e5:73:9a:35:45:10:26:b6:09:49:52:ec:29: 2a:ab:e8:cc:d4:df:6a:2a:d2:e3:56:61:76:69:26: b9:1a:0c:b9:b2:36:06:12:d3:40:d6:72:11:61:f7: ec:59:7e:dc:5b:9a:3d:0e:da:14:8e:40:da:68:37: a7:43:08:3f:d3:eb:7b:f2:7d:90:98:a4:c2:23:9a: a7:b1:d0:49:50:29:83:90:15:25:11:7d:20:90:72: 42:cf:cf:38:3d:76:a3:49:39:c1:f2:72:aa:39:ba: f3:cb:53:ed:ca:28:b3:74:6e:25:78:d6:02:e6:64: d8:24:92:82:34:f2:38:74:78:28:91:cf:f0:91:a7: d4:57:35:89:99:b8:83:e0:ed:a6:aa:64:30:18:36: 25:ac:36:65:dd:e4:ad:99:18:a0:fa:65:cb:81:a4: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:a720::/32 Signature Algorithm: sha256WithRSAEncryption 06:44:f9:58:f1:16:9e:e2:7a:24:ca:98:d1:a9:f1:7e:fc:53: 4a:4d:9e:04:eb:b6:24:af:a5:ab:93:d9:31:85:7b:d9:eb:7d: a5:6b:cb:8e:c8:60:6d:90:6b:f4:e9:6d:87:ee:c9:13:c0:d3: 41:ea:d8:2b:b8:ef:38:51:16:b6:66:f8:30:ae:0c:bd:c6:df: 12:1c:08:77:ff:46:b1:ac:38:6b:0c:b3:44:f2:d6:cf:6c:26: 5c:3d:2d:4c:2b:b0:26:70:30:26:28:ce:5a:64:3e:3a:ea:fc: 57:eb:49:ab:9c:38:3c:24:86:c3:3d:52:86:bb:4c:59:52:9c: ed:2e:d6:92:e3:57:19:70:23:30:f3:22:9b:a6:ec:64:01:54: e3:d8:2b:b0:26:25:f5:c5:9c:f3:ac:68:ab:2d:67:ce:10:66: 5e:cd:7b:f9:f4:ab:b5:56:85:76:d5:9d:7f:6e:a5:2a:e9:75: fa:b2:9c:70:f8:bd:20:3d:e9:d8:fa:20:b4:42:5c:5e:39:f2: 05:e5:f4:0f:6d:20:90:42:fa:14:88:8e:2b:2b:6e:79:dc:ad: a5:49:75:fc:16:dd:02:e7:14:79:22:4d:ab:b4:08:9e:cb:ef: b4:84:da:4e:b0:3e:91:86:04:20:9a:64:60:73:d9:87:c6:83: c8:7a:03:19 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAM3LMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODEwNTFaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEFGOEE1NzFDMEM3Q0JBMzE5M0M3RTk0MUNGNDYzMURDMzMwMjNG RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4Kx7g8JcWs3idmQx AbaBK3d7f5ZoOQfzMXWG9JXsd6JtGY2MKUkhBDmYQy08bY3rswjFKn15TmMiOPwK jlrl3oqM6WHTUxt2OPS5GJiyoYoCuvs5yDr0rO1z5XOaNUUQJrYJSVLsKSqr6MzU 32oq0uNWYXZpJrkaDLmyNgYS00DWchFh9+xZftxbmj0O2hSOQNpoN6dDCD/T63vy fZCYpMIjmqex0ElQKYOQFSURfSCQckLPzzg9dqNJOcHycqo5uvPLU+3KKLN0biV4 1gLmZNgkkoI08jh0eCiRz/CRp9RXNYmZuIPg7aaqZDAYNiWsNmXd5K2ZGKD6ZcuB pA5lAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUr4pXHAx8ujGTx+lBz0Yx3DMCP9kw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy OTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI5My9yNHBYSEF4OHVqR1R4LWxCejBZeDNETUNQOWsubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGnIDANBgkqhkiG9w0BAQsF AAOCAQEABkT5WPEWnuJ6JMqY0anxfvxTSk2eBOu2JK+lq5PZMYV72et9pWvLjshg bZBr9Olth+7JE8DTQerYK7jvOFEWtmb4MK4MvcbfEhwId/9Gsaw4awyzRPLWz2wm XD0tTCuwJnAwJijOWmQ+Our8V+tJq5w4PCSGwz1ShrtMWVKc7S7WkuNXGXAjMPMi m6bsZAFU49grsCYl9cWc86xoqy1nzhBmXs17+fSrtVaFdtWdf26lKul1+rKccPi9 ID3p2PogtEJcXjnyBeX0D20gkEL6FIiOKytuedytpUl1/BbdAucUeSJNq7QInsvv tITaTrA+kYYEIJpkYHPZh8aDyHoDGQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:15:54 2025 by rpki-client