$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer File: 7lk_rFPTQyBXbYgPZFcGz7eXwjE.cer (raw, json) Hash identifier: Qvvn6Uva8hTgn2+naj6g99G6ByyJywL8XZTkmS0x73A= Subject key identifier: EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CE75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:14:43 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 103.108.196.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52853 (0xce75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:14:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=EE593FAC53D34320576D880F645706CFB797C231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:30:64:2c:2c:dc:8e:c1:85:fc:4c:7a:b0: 83:a4:b8:d2:5b:ac:c8:3c:02:ac:03:cf:db:e2:c3: 94:af:ed:09:60:03:fa:3e:be:ec:1c:83:46:fe:72: 34:a5:d8:13:4e:d2:fa:33:b9:4a:37:0e:a7:b9:39: 8c:84:de:fd:af:6b:a5:8d:34:cd:be:5b:15:d4:50: 9f:69:34:bb:d3:30:d2:41:13:5f:42:f0:6c:6b:9d: 95:e3:35:13:41:08:2c:c5:9f:23:85:3f:ee:8d:77: f4:36:8c:e0:52:00:92:25:ea:dd:ac:74:29:b6:e0: 82:ba:47:14:d4:bf:d9:c2:f9:bf:1e:96:bc:33:5c: 6d:9c:d8:97:fb:3f:79:b3:4e:de:6a:f7:60:9e:5e: 0f:43:80:5a:75:40:b9:56:5d:95:41:f5:43:f0:ac: 0c:23:b4:0a:41:49:b3:38:e9:52:84:8a:f9:eb:1a: 9e:f9:11:76:b8:e8:4b:d4:a5:5f:15:18:db:c1:9e: 90:f1:e7:cd:6f:43:28:6b:b9:e4:78:d3:e3:3b:9b: 7d:6c:dd:b9:1d:e9:ec:e3:76:7c:83:84:9f:ba:0f: b7:ea:ff:de:3b:f1:a9:7d:f4:d6:2b:be:52:83:d3: 45:49:30:2a:26:59:8b:35:a2:ad:ee:2a:a7:5e:7f: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:59:3F:AC:53:D3:43:20:57:6D:88:0F:64:57:06:CF:B7:97:C2:31 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/7lk_rFPTQyBXbYgPZFcGz7eXwjE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.108.196.0/22 Signature Algorithm: sha256WithRSAEncryption 75:78:b9:ed:19:19:70:48:b1:5e:7c:1e:c8:5f:ce:1c:64:3c: 66:df:70:07:fb:67:9d:5f:e4:66:f0:88:04:b0:d2:43:68:58: 6f:aa:bb:b1:4a:1d:47:24:9f:b8:c7:9b:1c:97:b9:87:f3:e4: e1:0f:0d:11:58:82:d9:ca:f6:f6:ff:f8:3e:78:9c:76:ba:a2: 37:0e:75:ef:d2:6e:2a:55:2e:c2:1c:d2:4a:20:8b:6e:9d:dd: 68:ac:ec:73:4c:c6:0e:90:7a:f4:c6:f8:95:c2:c7:45:fc:09: 04:41:b8:84:56:8e:0b:51:b3:c1:24:94:34:98:15:72:6e:fb: f5:16:b6:c5:45:0d:34:e6:04:76:0a:68:31:b9:86:be:59:86: 26:42:0f:59:d9:db:a2:40:d0:9b:1c:c1:81:3b:94:cd:57:25: cf:db:33:97:5a:8b:90:4d:10:72:13:86:19:94:38:68:64:c0: c4:15:61:2c:e1:49:ef:34:eb:81:4f:05:4a:b1:51:d7:aa:c0: 75:af:8e:05:e5:25:c7:d2:ff:02:32:01:bc:18:54:f6:48:c4: d4:02:24:7d:10:d3:36:be:f6:99:70:c4:8c:9c:68:71:83:fb: 9d:16:af:02:7c:e3:fb:dc:49:85:e3:ca:52:9f:d4:d7:22:81: 3b:e0:53:57 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAM51MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODE0NDNaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEVFNTkzRkFDNTNEMzQzMjA1NzZEODgwRjY0NTcwNkNGQjc5N0My MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWzBkLCzcjsGF/Ex6 sIOkuNJbrMg8AqwDz9viw5Sv7QlgA/o+vuwcg0b+cjSl2BNO0vozuUo3Dqe5OYyE 3v2va6WNNM2+WxXUUJ9pNLvTMNJBE19C8GxrnZXjNRNBCCzFnyOFP+6Nd/Q2jOBS AJIl6t2sdCm24IK6RxTUv9nC+b8elrwzXG2c2Jf7P3mzTt5q92CeXg9DgFp1QLlW XZVB9UPwrAwjtApBSbM46VKEivnrGp75EXa46EvUpV8VGNvBnpDx581vQyhrueR4 0+M7m31s3bkd6ezjdnyDhJ+6D7fq/9478al99NYrvlKD00VJMComWYs1oq3uKqde f6tjAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU7lk/rFPTQyBXbYgPZFcGz7eXwjEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjY3NC83bGtfckZQVFF5QlhiWWdQWkZjR3o3ZVh3akUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2zEMA0GCSqGSIb3DQEBCwUA A4IBAQB1eLntGRlwSLFefB7IX84cZDxm33AH+2edX+Rm8IgEsNJDaFhvqruxSh1H JJ+4x5scl7mH8+ThDw0RWILZyvb2//g+eJx2uqI3DnXv0m4qVS7CHNJKIItund1o rOxzTMYOkHr0xviVwsdF/AkEQbiEVo4LUbPBJJQ0mBVybvv1FrbFRQ005gR2Cmgx uYa+WYYmQg9Z2duiQNCbHMGBO5TNVyXP2zOXWouQTRByE4YZlDhoZMDEFWEs4Unv NOuBTwVKsVHXqsB1r44F5SXH0v8CMgG8GFT2SMTUAiR9ENM2vvaZcMSMnGhxg/ud Fq8CfOP73EmF48pSn9TXIoE74FNX -----END CERTIFICATE-----Generated at Fri Apr 4 02:19:57 2025 by rpki-client