$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5rA2up_FkYdletsFx2-HqmMpDDQ.cer File: 5rA2up_FkYdletsFx2-HqmMpDDQ.cer (raw, json) Hash identifier: mzCIRoqv/6bItsP39l/JbwD4Dq5q+uqKiPQV/gDmckE= Subject key identifier: E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CD57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:08:39 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:a620::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52567 (0xcd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:08:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=E6B036BA9FC59187657ADB05C76F87AA63290C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:ff:35:22:c4:3c:72:da:83:6a:09:a6:ce: 08:d7:2a:6a:ff:57:d2:1f:b0:10:3a:95:42:34:a8: 5c:cc:db:e7:0c:ff:36:83:38:87:4e:42:c4:79:cd: a8:1f:0d:66:40:b7:ed:0e:d2:6f:7d:65:18:9d:33: 71:83:8d:aa:7c:16:7e:48:f2:93:d7:78:b5:70:7b: 84:48:a4:44:b7:be:4d:3c:2e:a6:b7:b6:96:c7:e1: 16:11:99:b2:0f:8a:0e:cf:8e:05:17:ca:58:18:d6: f2:fd:13:1f:97:3a:8d:41:56:7a:ab:2c:ba:a8:00: b9:d5:8a:9f:aa:93:04:61:10:87:09:ad:13:98:9a: 1b:98:c7:21:7a:c1:cc:4a:6e:89:39:5e:a9:b2:f7: 02:dc:d3:f9:e4:24:dc:c9:f5:db:09:42:85:da:63: d4:33:c2:52:3e:50:56:66:c8:36:07:5c:d5:b3:9c: 63:ed:dc:47:b7:91:fc:91:1b:fc:cd:c3:ce:02:e8: cb:1c:7b:29:e4:23:f4:8c:96:78:1f:09:68:c8:b1: 84:09:3b:15:da:1a:64:dd:c4:32:5e:f0:68:32:ff: fb:4c:4f:a7:fc:2e:c9:0c:24:06:9b:4d:e1:da:a8: cc:c7:e1:e7:ef:80:a0:cc:79:fe:5c:e4:56:dc:62: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B0:36:BA:9F:C5:91:87:65:7A:DB:05:C7:6F:87:AA:63:29:0C:34 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3291/5rA2up_FkYdletsFx2-HqmMpDDQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:a620::/32 Signature Algorithm: sha256WithRSAEncryption a0:73:f0:5d:48:a8:fa:c4:1e:bc:92:f1:57:de:06:06:ea:74: 77:5c:ec:9a:9f:c7:6b:33:f5:e3:1a:f6:6b:4e:72:b0:d2:c5: c1:c6:fb:42:15:aa:2d:e0:9c:c6:f2:6b:6e:af:b5:74:95:75: 8b:ca:f8:d4:aa:4b:2f:21:ae:30:84:49:f2:f4:19:70:a5:65: f5:60:9d:e1:53:15:21:d3:73:e3:06:76:0a:f5:aa:62:80:13: 56:81:ff:cd:99:33:2e:cf:9f:b3:35:7f:e7:ab:3b:47:5f:85: 3b:9a:c4:ae:c4:68:0b:e9:c6:2b:8c:a8:91:55:85:72:4d:91: e9:48:f2:f0:a1:18:c2:e2:9c:0c:be:14:f3:3e:07:bb:7c:e5: 8e:0e:58:dd:0f:d8:a0:2c:b0:da:de:19:36:5e:54:00:f8:14: ab:88:4f:12:8f:63:b0:8f:ff:ee:bb:65:02:a1:f0:dc:9f:bb: 74:b7:0a:1f:48:8b:da:08:22:d1:72:00:32:d2:88:16:bf:53: c5:f0:fe:a8:2f:03:a6:c3:a9:19:8a:21:0f:dd:f8:89:63:33: db:de:cb:79:a3:44:c7:6a:b3:d9:8d:cd:7f:57:2a:35:68:b2: 1f:35:9e:90:db:15:12:78:4b:55:ce:04:2b:34:3d:e4:75:be: 61:3a:bc:c0 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAM1XMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA4MzlaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEU2QjAzNkJBOUZDNTkxODc2NTdBREIwNUM3NkY4N0FBNjMyOTBD MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRv81IsQ8ctqDagmm zgjXKmr/V9IfsBA6lUI0qFzM2+cM/zaDOIdOQsR5zagfDWZAt+0O0m99ZRidM3GD jap8Fn5I8pPXeLVwe4RIpES3vk08Lqa3tpbH4RYRmbIPig7PjgUXylgY1vL9Ex+X Oo1BVnqrLLqoALnVip+qkwRhEIcJrROYmhuYxyF6wcxKbok5Xqmy9wLc0/nkJNzJ 9dsJQoXaY9QzwlI+UFZmyDYHXNWznGPt3Ee3kfyRG/zNw84C6MsceynkI/SMlngf CWjIsYQJOxXaGmTdxDJe8Ggy//tMT6f8LskMJAabTeHaqMzH4efvgKDMef5c5Fbc Yv/5AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQU5rA2up/FkYdletsFx2+HqmMpDDQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy OTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI5MS81ckEydXBfRmtZZGxldHNGeDItSHFtTXBERFEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGmIDANBgkqhkiG9w0BAQsF AAOCAQEAoHPwXUio+sQevJLxV94GBup0d1zsmp/HazP14xr2a05ysNLFwcb7QhWq LeCcxvJrbq+1dJV1i8r41KpLLyGuMIRJ8vQZcKVl9WCd4VMVIdNz4wZ2CvWqYoAT VoH/zZkzLs+fszV/56s7R1+FO5rErsRoC+nGK4yokVWFck2R6Ujy8KEYwuKcDL4U 8z4Hu3zljg5Y3Q/YoCyw2t4ZNl5UAPgUq4hPEo9jsI//7rtlAqHw3J+7dLcKH0iL 2ggi0XIAMtKIFr9TxfD+qC8DpsOpGYohD934iWMz297LeaNEx2qz2Y3Nf1cqNWiy HzWekNsVEnhLVc4EKzQ95HW+YTq8wA== -----END CERTIFICATE-----Generated at Fri Apr 4 02:22:18 2025 by rpki-client