$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer (raw, json) Hash identifier: YQhMnihBqexFpo7MbBuwUiqdVpizXpqTjdJ8nJAQ/lA= Subject key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CCC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:06:02 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 1.2.2.0/24 IP: 1.4.4.0/24 IP: 1.8.0.0 -- 1.8.17.255 IP: 1.8.19.0 -- 1.8.255.255 IP: 103.235.133.0 -- 103.235.135.255 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52417 (0xccc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:06:02 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:75:43:d4:7a:e8:35:5e:7b:47:4c:7d:01: 04:9e:4b:21:b1:31:b1:2d:38:97:07:43:4e:81:27: d9:e1:6a:69:ee:63:9c:33:aa:e5:ce:f8:61:73:2a: 6a:72:97:7e:1a:22:59:f5:a7:3a:fe:25:15:20:ce: 20:c4:49:40:66:b5:99:ea:e4:0f:c3:cd:25:16:a8: 72:1c:45:6e:ab:f8:70:b8:b8:9c:dc:89:fd:70:ac: 68:0f:dc:c8:2a:11:23:c6:f9:43:84:c4:11:ff:58: 6a:b5:3f:69:16:a3:8e:3b:3d:51:9c:82:ac:85:e0: 16:cb:a5:48:ed:46:e1:12:45:39:29:1b:0d:59:6e: e7:54:dc:b0:cf:22:f2:23:1e:1d:33:71:18:70:4e: ba:c5:9d:c5:f0:b5:43:f8:e7:dc:da:40:0b:58:3b: c9:3e:4b:b1:08:e0:f3:dc:19:c1:06:a7:3e:40:58: fc:9f:6f:2e:f5:38:f4:bc:1c:3f:ff:57:1b:16:28: 1b:6f:dc:55:b8:57:fd:5c:2e:7d:9c:bf:72:d1:a1: cf:e1:00:8e:ac:28:7b:71:8c:9e:f4:b7:25:14:7d: 39:57:0d:78:c1:70:05:15:82:82:e8:f3:61:8e:63: e4:65:65:88:17:a2:b7:05:b2:20:ce:7d:bd:ae:5b: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 1.2.2.0/24 1.4.4.0/24 1.8.0.0-1.8.17.255 1.8.19.0-1.8.255.255 103.235.133.0-103.235.135.255 Signature Algorithm: sha256WithRSAEncryption 46:e3:8d:a5:be:9f:45:bb:4c:a2:e9:a5:fe:17:06:e4:b0:0d: 90:ff:b1:e8:16:ae:09:c3:d2:ce:02:60:5c:e5:bb:ce:12:74: 5c:83:be:4b:7f:aa:d7:0f:2f:4e:9d:ed:2a:75:56:f5:93:19: 07:e9:b1:77:1a:45:26:9b:4d:3b:1d:a3:0b:83:37:59:bb:3a: c7:30:36:d1:bf:3b:1e:8f:eb:3f:71:cc:e5:df:83:9f:b1:bc: fb:9d:5c:33:09:4e:04:aa:c5:42:1b:35:7e:fc:12:0e:f0:6f: d0:bf:2d:d1:62:5f:af:ce:42:5a:b1:6a:e4:9f:3f:b9:52:93: 10:75:d4:98:1a:c9:84:94:ad:15:1e:95:59:03:f4:d6:f3:69: fa:b7:f8:fe:9e:bf:2f:ae:57:5c:d7:cb:d6:dc:4a:60:ce:89: 9e:25:8b:a3:c5:a4:40:20:30:f9:29:83:30:81:47:62:d5:1d: 0e:ec:f1:42:00:a2:a8:97:f6:a4:88:00:6d:d9:a8:40:fa:a1: 49:1b:6d:ef:af:09:7f:f5:e7:85:29:31:ba:c8:22:e0:09:94: c7:a7:79:58:08:6e:6c:53:cf:c1:6d:3b:4f:72:c0:05:0f:12: be:d5:5f:3d:ff:06:d4:00:a1:83:bd:e0:6f:69:70:d6:7e:71: ef:9b:83:bb -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIDAMzBMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA2MDJaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEYyRTg0ODJCRjEwQjRFRTY3MzZGNDAxQUZGRjM3MTJGQjQ0NkJG MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOnVD1HroNV57R0x9 AQSeSyGxMbEtOJcHQ06BJ9nhamnuY5wzquXO+GFzKmpyl34aIln1pzr+JRUgziDE SUBmtZnq5A/DzSUWqHIcRW6r+HC4uJzcif1wrGgP3MgqESPG+UOExBH/WGq1P2kW o447PVGcgqyF4BbLpUjtRuESRTkpGw1ZbudU3LDPIvIjHh0zcRhwTrrFncXwtUP4 59zaQAtYO8k+S7EI4PPcGcEGpz5AWPyfby71OPS8HD//VxsWKBtv3FW4V/1cLn2c v3LRoc/hAI6sKHtxjJ70tyUUfTlXDXjBcAUVgoLo82GOY+RlZYgXorcFsiDOfb2u WyvJAgMBAAGjggKBMIICfTAdBgNVHQ4EFgQU8uhIK/ELTuZzb0Aa//NxL7RGvy8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQz MC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC80MzAvOHVoSUtfRUxUdVp6YjBBYV9fTnhMN1JHdnk4Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDBN BggrBgEFBQcBBwEB/wQ+MDwwOgQCAAEwNAMEAAECAgMEAAEEBDALAwMDAQgDBAEB CBAwCwMEAAEIEwMDAAEIMAwDBABn64UDBANn64AwDQYJKoZIhvcNAQELBQADggEB AEbjjaW+n0W7TKLppf4XBuSwDZD/segWrgnD0s4CYFzlu84SdFyDvkt/qtcPL06d 7Sp1VvWTGQfpsXcaRSabTTsdowuDN1m7OscwNtG/Ox6P6z9xzOXfg5+xvPudXDMJ TgSqxUIbNX78Eg7wb9C/LdFiX6/OQlqxauSfP7lSkxB11JgayYSUrRUelVkD9Nbz afq3+P6evy+uV1zXy9bcSmDOiZ4li6PFpEAgMPkpgzCBR2LVHQ7s8UIAoqiX9qSI AG3ZqED6oUkbbe+vCX/154UpMbrIIuAJlMeneVgIbmxTz8FtO09ywAUPEr7VXz3/ BtQAoYO94G9pcNZ+ce+bg7s= -----END CERTIFICATE-----Generated at Fri Apr 4 02:20:41 2025 by rpki-client