$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer File: vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer (raw, json) Hash identifier: jPlB2/2n+FWZ7iSmfDeOYGzvb0gttBH4Ill20HqRdPo= Subject key identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CCFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:07:06 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 103.67.172.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52479 (0xccff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:07:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=BCF4017A6E2915F26147D419E5F7A7D164D04984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:62:fb:4f:f0:7b:64:a8:4b:02:5a:5d:25: 5c:6d:08:f9:5c:91:98:b7:58:4c:c9:46:d9:6f:95: 51:5a:75:50:cd:88:28:aa:32:a4:88:b3:a5:be:fc: 66:dd:eb:d2:b8:7c:57:c7:60:52:46:15:56:eb:84: ce:b9:22:3e:28:0c:5c:8e:ec:08:f8:07:80:8f:82: 1a:c5:6d:91:d9:ea:bf:d0:71:f3:f4:47:35:8f:bb: b5:1a:b4:2a:4c:53:30:6c:0e:18:94:dd:00:ff:8d: af:2a:b1:92:b5:6c:b0:3c:07:44:24:a6:ae:52:33: 9d:a9:c3:a8:cf:e5:60:dd:b0:51:d5:ac:75:3c:69: dc:53:3b:0f:4e:f2:b6:b4:0d:12:36:d9:fb:32:c2: 89:1e:7c:4e:1f:7c:31:c5:e2:c2:af:59:ca:6d:d9: 6b:f4:0a:78:52:74:5f:c8:53:71:75:df:6e:3a:21: 0f:bf:d7:4f:ff:1b:ae:2e:04:98:e9:02:39:24:77: 29:bd:0b:fa:1c:01:a5:85:f0:13:f5:a7:85:b2:cf: fb:2c:c9:0a:f3:5b:04:d1:52:af:42:4c:08:cf:5a: 0b:7a:f8:71:54:5c:b5:e5:89:28:99:42:76:5d:2d: ec:04:dd:2c:75:23:19:76:8e:1b:e2:27:8e:9c:31: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.172.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:f3:79:76:2d:4e:cf:a4:ab:c1:01:84:c9:76:53:99:17:92: c1:83:94:b9:7a:08:90:f6:cf:0d:62:f4:e0:1a:92:a5:a5:35: ec:78:ca:91:25:45:27:04:cc:b9:7f:ac:93:60:5b:7f:fa:5e: 78:bd:1f:47:bc:e1:56:49:23:64:28:4c:07:4c:2b:55:c5:1d: af:3f:0b:49:12:bb:b1:da:95:3d:16:39:a8:67:9f:12:e0:2f: 63:9b:3b:13:03:7c:2b:53:91:3d:1a:61:f8:29:e9:67:0b:28: c4:c4:6f:4b:7e:2d:ae:fc:25:65:8c:e0:ef:11:b1:d6:6c:01: 43:22:d5:2f:38:0c:a5:5d:15:0f:7c:de:96:d5:cd:31:b2:bb: 07:0b:96:00:45:1e:35:24:7d:a6:2e:8f:cb:61:ba:2a:b3:37: bd:84:64:09:06:47:c8:ba:f8:88:4c:84:06:ba:8d:9c:65:a0: 86:66:4d:ea:07:99:2f:31:92:63:b1:2a:53:2b:98:9c:14:de: ab:7e:0e:d1:bb:bf:8e:0f:b8:07:6b:3d:3b:12:54:ce:dc:14: 05:60:62:c2:5b:a9:b4:87:89:76:09:fc:46:37:d0:96:23:35: 68:2f:9f:e2:9b:74:ba:5c:d1:3f:64:90:5d:d1:62:06:a8:34: 09:a4:2e:fe -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAMz/MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA3MDZaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEJDRjQwMTdBNkUyOTE1RjI2MTQ3RDQxOUU1RjdBN0QxNjREMDQ5 ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FmL7T/B7ZKhLAlpd JVxtCPlckZi3WEzJRtlvlVFadVDNiCiqMqSIs6W+/Gbd69K4fFfHYFJGFVbrhM65 Ij4oDFyO7Aj4B4CPghrFbZHZ6r/QcfP0RzWPu7UatCpMUzBsDhiU3QD/ja8qsZK1 bLA8B0Qkpq5SM52pw6jP5WDdsFHVrHU8adxTOw9O8ra0DRI22fsywokefE4ffDHF 4sKvWcpt2Wv0CnhSdF/IU3F13246IQ+/10//G64uBJjpAjkkdym9C/ocAaWF8BP1 p4Wyz/ssyQrzWwTRUq9CTAjPWgt6+HFUXLXliSiZQnZdLewE3Sx1Ixl2jhviJ46c MZghAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUvPQBem4pFfJhR9QZ5fen0WTQSYQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3Mi92UFFCZW00cEZmSmhSOVFaNWZlbjBXVFFTWVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0OsMA0GCSqGSIb3DQEBCwUA A4IBAQCe83l2LU7PpKvBAYTJdlOZF5LBg5S5egiQ9s8NYvTgGpKlpTXseMqRJUUn BMy5f6yTYFt/+l54vR9HvOFWSSNkKEwHTCtVxR2vPwtJErux2pU9FjmoZ58S4C9j mzsTA3wrU5E9GmH4KelnCyjExG9Lfi2u/CVljODvEbHWbAFDItUvOAylXRUPfN6W 1c0xsrsHC5YARR41JH2mLo/LYboqsze9hGQJBkfIuviITIQGuo2cZaCGZk3qB5kv MZJjsSpTK5icFN6rfg7Ru7+OD7gHaz07ElTO3BQFYGLCW6m0h4l2CfxGN9CWIzVo L5/im3S6XNE/ZJBd0WIGqDQJpC7+ -----END CERTIFICATE-----Generated at Sat Apr 26 08:22:06 2025 by rpki-client