$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer File: COaEfe781aS_jvY6VWfs2gflVik.cer (raw, json) Hash identifier: 5RoEgoYo53zoHOxDG2oRdq1Po5/if/Nsp7qmdoEsrR8= Subject key identifier: 08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: C7B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 21 Mar 2025 02:57:32 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 131562 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51125 (0xc7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Mar 21 02:57:32 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=08E6847DEEFCD5A4BF8EF63A5567ECDA07E55629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:40:57:c6:f9:2f:ee:65:84:b3:37:9c:4e: 6d:94:70:e2:8a:63:62:4b:f8:a0:bd:96:b2:c6:9f: 1b:80:d3:d9:f9:97:14:09:20:37:2a:2d:7b:67:57: 94:5b:14:60:48:60:82:09:ba:75:57:32:ea:d8:a4: 01:9a:1d:f8:96:7e:0d:8e:15:04:52:38:c5:d4:46: 3f:3f:af:68:4b:09:a9:07:89:18:08:e9:2d:28:ae: 0e:55:91:36:dc:1e:fb:9a:a3:67:47:23:53:52:38: d1:d9:f7:78:30:1a:0f:4f:82:fd:eb:c4:59:a5:e7: 1f:c5:7d:6d:15:4d:5c:87:62:61:0f:44:da:64:35: 8b:32:0e:6c:ec:6d:f6:1c:2a:e3:37:bc:4c:a5:f1: ef:fc:de:bb:75:47:52:fc:e4:b5:7e:db:aa:a2:40: a1:71:c4:88:11:0c:5c:3a:cb:4c:00:b4:50:35:8b: c3:46:d2:46:97:12:16:18:87:e2:1f:3b:7b:c2:21: de:70:af:c0:6f:de:db:92:12:bc:bc:05:a3:60:7d: 59:a9:29:d1:7b:9d:4c:36:b0:0b:c5:64:1b:1a:ae: fc:2e:3d:c8:5a:f8:fa:87:ca:fa:e9:f9:d0:de:df: 67:85:7d:9f:20:fc:a6:ce:c9:5e:b6:ce:04:64:c3: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131562 Signature Algorithm: sha256WithRSAEncryption 83:8b:51:b3:32:31:95:7b:df:60:cd:bd:0f:50:79:b6:5e:94: 45:1f:95:99:e9:6f:8a:9c:8a:da:7b:54:9f:ba:ca:63:a6:7b: b3:c2:72:24:e4:f4:f9:5f:44:5d:6b:4e:56:c8:b4:e4:24:46: 68:68:ec:8c:fd:8c:12:b1:9e:eb:f9:aa:9e:57:a9:9f:2d:bf: e3:e1:e8:85:90:01:75:fd:45:8b:b3:8b:c7:2e:c7:98:b6:65: 57:a1:74:40:ae:ca:78:d8:22:12:a7:30:73:c9:b3:6a:e1:30: 8c:71:3d:7f:c2:b7:c0:99:93:eb:9c:13:3a:f8:e3:fd:b0:7a: d4:82:d3:a1:3d:a0:e7:6c:61:6c:a5:81:45:c5:67:3d:5b:c6: ee:83:ab:b7:6b:55:fd:a0:1d:70:8e:8d:b5:ce:4a:71:2d:40: 8a:c8:d3:0e:54:1d:80:2b:c6:f0:d3:d6:19:d5:29:17:75:4f: 14:2e:ec:ee:54:11:60:4b:3a:da:3c:8d:f4:9f:3f:db:fb:c6: 06:d1:40:fd:67:57:08:36:24:40:2a:86:54:6f:d0:46:5b:08: 79:0e:0d:b2:46:00:63:e2:c0:b0:db:ef:4c:7b:28:99:e3:d2: 2a:6b:4b:52:a2:e5:8e:51:fd:3a:0b:cb:45:dc:94:f2:a1:17: 22:49:0d:65 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAMe1MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMjU3MzJaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDA4RTY4NDdERUVGQ0Q1QTRCRjhFRjYzQTU1NjdFQ0RBMDdFNTU2 MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9UBXxvkv7mWEszec Tm2UcOKKY2JL+KC9lrLGnxuA09n5lxQJIDcqLXtnV5RbFGBIYIIJunVXMurYpAGa HfiWfg2OFQRSOMXURj8/r2hLCakHiRgI6S0org5VkTbcHvuao2dHI1NSONHZ93gw Gg9Pgv3rxFml5x/FfW0VTVyHYmEPRNpkNYsyDmzsbfYcKuM3vEyl8e/83rt1R1L8 5LV+26qiQKFxxIgRDFw6y0wAtFA1i8NG0kaXEhYYh+IfO3vCId5wr8Bv3tuSEry8 BaNgfVmpKdF7nUw2sAvFZBsarvwuPcha+PqHyvrp+dDe32eFfZ8g/KbOyV62zgRk w9j9AgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUCOaEfe781aS/jvY6VWfs2gflVikw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1 MjgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjUyOC9DT2FFZmU3ODFhU19qdlk2VldmczJnZmxWaWsubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIB6jANBgkqhkiG9w0BAQsFAAOCAQEA g4tRszIxlXvfYM29D1B5tl6URR+VmelvipyK2ntUn7rKY6Z7s8JyJOT0+V9EXWtO Vsi05CRGaGjsjP2MErGe6/mqnlepny2/4+HohZABdf1Fi7OLxy7HmLZlV6F0QK7K eNgiEqcwc8mzauEwjHE9f8K3wJmT65wTOvjj/bB61ILToT2g52xhbKWBRcVnPVvG 7oOrt2tV/aAdcI6Ntc5KcS1AisjTDlQdgCvG8NPWGdUpF3VPFC7s7lQRYEs62jyN 9J8/2/vGBtFA/WdXCDYkQCqGVG/QRlsIeQ4NskYAY+LAsNvvTHsomePSKmtLUqLl jlH9OgvLRdyU8qEXIkkNZQ== -----END CERTIFICATE-----Generated at Fri Apr 4 02:11:45 2025 by rpki-client