$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer File: v53ECbEbmTO6Vq39mHrqjUQseeY.cer (raw, json) Hash identifier: xX/4VH2pigu5MMSx1a2IqGzwjzC+L5YHl7NyittP4kw= Subject key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CCC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:06:09 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 137760 IP: 163.223.28.0/23 IP: 2401:f3e0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52423 (0xccc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:06:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:55:e8:9c:cc:05:75:c8:d0:81:01:88:57: 30:f1:e4:9a:32:5b:3c:56:23:1c:c0:29:d5:69:d1: 7c:39:df:7a:9c:c9:97:9b:f8:39:71:93:38:8b:40: 74:fb:a8:57:4e:07:4d:7a:e5:f1:a9:f3:bd:d0:fb: 9a:d4:d7:05:e8:45:9c:ef:00:00:40:4e:77:97:df: bf:30:fb:4e:6a:3e:ec:ce:00:c4:3a:8b:c9:06:8d: b4:fd:10:cb:e7:6a:3b:4c:14:d4:8d:6b:62:16:e0: 1b:c1:a6:4a:2e:e4:2b:fb:41:c4:b1:bd:60:d3:5b: d1:e0:c8:4c:b8:d9:14:97:26:48:f7:fa:a1:ed:f8: 61:15:c1:18:bd:0f:62:35:f5:1c:ad:af:b7:d7:d8: 5b:1a:2f:4b:78:82:f9:46:87:79:f7:d4:5a:69:d4: f6:f4:b5:3b:c5:45:40:d5:39:4d:f8:af:18:33:5f: 77:d9:55:b5:96:ca:65:c0:89:e4:56:88:22:32:8a: 11:99:ed:93:cf:fc:0a:05:75:78:f6:0b:b7:87:74: 28:5c:5a:f6:61:1c:1e:83:44:9f:25:f2:11:a4:e0: 6b:01:1b:b2:a7:1f:ce:ad:1a:97:84:90:e3:22:5d: a0:9c:91:ab:54:df:8c:30:b9:c0:32:6a:98:65:7c: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137760 sbgp-ipAddrBlock: critical IPv4: 163.223.28.0/23 IPv6: 2401:f3e0::/32 Signature Algorithm: sha256WithRSAEncryption 49:01:66:e2:9a:8d:1f:58:4b:ef:53:c0:e2:0a:3d:61:04:b6: c1:b7:b8:18:a4:a7:a6:40:72:42:97:30:ca:b9:54:75:95:28: 9e:59:2e:8b:e9:d0:71:da:c2:9c:2b:6e:d4:6f:f6:e8:38:46: 2c:18:8a:e0:05:73:f7:1d:58:ac:ab:9e:e9:bb:7b:8c:3f:40: b3:de:48:3c:3f:20:22:3f:7a:fd:07:64:44:e5:4b:a2:bf:74: 92:86:0f:99:bd:7a:6a:d4:7d:cf:97:4a:44:c9:0e:4d:07:10: b7:2c:18:00:75:63:70:4e:85:f5:07:1e:e8:18:6b:a2:02:2f: 83:4e:40:bd:38:5c:69:4c:15:e9:c5:6d:f5:16:c7:f2:45:68: 62:cd:80:bb:48:84:20:18:ef:38:ee:81:c3:40:41:ae:11:9e: b5:7a:94:24:75:b3:b1:27:e0:e0:c7:9b:8d:da:63:f1:5e:02: 36:73:c9:9f:48:d2:e9:21:66:79:03:a8:38:83:85:52:29:f2: af:76:80:d9:ef:85:b0:78:3f:77:ed:ca:60:6b:66:a7:ed:3d: fe:a2:e0:52:07:b6:15:5c:40:21:74:4a:e2:d7:e9:99:80:53: 5c:fd:c1:69:8a:2d:20:ad:d9:53:7c:41:8f:aa:68:58:8f:17: 7e:44:fa:d6 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAMzHMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA2MDlaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEJGOURDNDA5QjExQjk5MzNCQTU2QURGRDk4N0FFQThENDQyQzc5 RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf1XonMwFdcjQgQGI VzDx5JoyWzxWIxzAKdVp0Xw533qcyZeb+DlxkziLQHT7qFdOB0165fGp873Q+5rU 1wXoRZzvAABATneX378w+05qPuzOAMQ6i8kGjbT9EMvnajtMFNSNa2IW4BvBpkou 5Cv7QcSxvWDTW9HgyEy42RSXJkj3+qHt+GEVwRi9D2I19Rytr7fX2FsaL0t4gvlG h3n31Fpp1Pb0tTvFRUDVOU34rxgzX3fZVbWWymXAieRWiCIyihGZ7ZPP/AoFdXj2 C7eHdChcWvZhHB6DRJ8l8hGk4GsBG7KnH86tGpeEkOMiXaCckatU34wwucAyaphl fHEJAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUv53ECbEbmTO6Vq39mHrqjUQseeYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1Ni92NTNFQ2JFYm1UTzZWcTM5bUhycWpVUXNlZVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaIDAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAaPfHDANBAIAAjAHAwUAJAHz4DANBgkqhkiG9w0BAQsFAAOCAQEA SQFm4pqNH1hL71PA4go9YQS2wbe4GKSnpkByQpcwyrlUdZUonlkui+nQcdrCnCtu 1G/26DhGLBiK4AVz9x1YrKue6bt7jD9As95IPD8gIj96/QdkROVLor90koYPmb16 atR9z5dKRMkOTQcQtywYAHVjcE6F9Qce6BhrogIvg05AvThcaUwV6cVt9RbH8kVo Ys2Au0iEIBjvOO6Bw0BBrhGetXqUJHWzsSfg4Mebjdpj8V4CNnPJn0jS6SFmeQOo OIOFUinyr3aA2e+FsHg/d+3KYGtmp+09/qLgUge2FVxAIXRK4tfpmYBTXP3BaYot IK3ZU3xBj6poWI8XfkT61g== -----END CERTIFICATE-----Generated at Sat Apr 26 08:22:13 2025 by rpki-client