$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Fwt8oG9XNbekD5f_H1O64TNIqT4.cer File: Fwt8oG9XNbekD5f_H1O64TNIqT4.cer (raw, json) Hash identifier: FO6GxiNW65uuAJXCD4Z9yU+PBfkbghPhHPoqaPIlqUU= Subject key identifier: 17:0B:7C:A0:6F:57:35:B7:A4:0F:97:FF:1F:53:BA:E1:33:48:A9:3E Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3D0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 09 Apr 2025 06:30:47 +0000 Certificate not after: Thu 09 Apr 2026 06:27:19 +0000 Subordinate resources: IP: 157.15.94.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15631 (0x3d0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 9 06:30:47 2025 GMT Not After : Apr 9 06:27:19 2026 GMT Subject: CN=170B7CA06F5735B7A40F97FF1F53BAE13348A93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:e1:c8:5f:1e:af:a7:b0:a5:20:48:15:0d: 67:ca:c1:6c:0b:bd:92:dc:90:9d:a8:12:b0:af:8c: c6:c1:c3:b3:82:81:10:aa:50:5a:dc:70:70:5b:b9: b4:9f:ad:f1:c6:18:e1:ed:60:ce:8b:ff:22:4e:ab: 57:88:ae:cc:3a:ff:fc:5e:96:ef:0f:3d:0c:3f:8d: 96:fa:66:50:8c:e0:73:14:e3:af:dd:be:2a:28:5e: cb:d3:1c:21:71:b4:4e:fd:0d:dc:91:bd:6b:45:04: 25:5f:39:16:44:04:77:ab:36:39:02:fa:98:3a:a5: d4:70:76:7b:c2:6f:c1:7d:d5:cf:c5:c9:af:90:94: 32:24:1e:f2:c6:d3:ea:21:d4:56:c8:9c:19:c8:21: 7a:af:73:48:a3:69:85:11:66:91:1e:d9:53:19:bc: b9:bb:d1:99:99:72:10:26:d5:36:80:78:72:a9:05: 47:41:f6:e7:44:a9:5f:d3:69:89:3f:81:44:d4:2c: 85:2d:5a:d1:9f:77:23:77:ae:42:19:47:32:3e:7f: 38:b3:a6:63:ee:b0:35:f0:ea:de:5b:c6:8b:be:cd: e9:37:cf:bc:07:5d:db:74:a9:98:1d:b4:8d:5f:fd: 36:92:dc:aa:64:73:20:71:27:14:d7:dc:eb:80:5b: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:7C:A0:6F:57:35:B7:A4:0F:97:FF:1F:53:BA:E1:33:48:A9:3E X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/Fwt8oG9XNbekD5f_H1O64TNIqT4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.15.94.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:dc:79:da:b9:e4:2e:15:f3:b7:bc:84:e7:a8:4f:9e:9e:a9: c0:6a:08:64:db:4d:1d:6b:38:13:d6:16:5b:20:32:50:ab:c6: d9:eb:fb:34:ab:85:96:fb:9e:a7:59:c7:2d:36:fe:7b:e6:d5: ec:90:23:85:f7:54:39:d8:cb:73:8a:02:3a:ac:4c:ba:dd:37: c7:6e:2e:c9:06:1a:ae:fc:cf:4b:5e:2c:ae:93:b1:0b:b1:21: 9d:bd:3c:bf:3a:ac:3d:47:ed:c6:56:1d:dc:ab:5f:ef:4d:f0: 49:d9:2b:7d:cf:cf:47:57:0b:14:ea:1c:5b:76:52:29:da:7b: 1e:b8:c8:79:2c:53:a7:2b:63:d9:f9:87:13:9b:cf:99:e9:3f: f3:07:9c:66:ad:43:55:f7:2d:8a:f8:46:2b:1d:14:8a:87:fe: 9b:f3:2c:93:ff:30:fd:b3:09:1b:ee:cc:b9:2c:7a:b5:bc:bc: 63:3a:41:21:51:5f:7f:52:72:bc:e5:89:b3:90:e6:5f:18:f6: 6d:43:5e:ff:be:b9:03:50:36:36:ee:46:35:13:bf:f7:8e:d9: 95:50:fd:b9:79:79:d0:f1:f9:b3:f2:9e:ff:64:31:ba:1c:0f: 2d:15:0b:1b:4a:cf:a8:17:ab:03:57:7e:71:33:69:fe:e7:f0: 8a:81:d1:c4 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPQ8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwOTA2MzA0N1oXDTI2MDQwOTA2MjcxOVowMzEx MC8GA1UEAxMoMTcwQjdDQTA2RjU3MzVCN0E0MEY5N0ZGMUY1M0JBRTEzMzQ4QTkz RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcM4chfHq+nsKUgSBUN Z8rBbAu9ktyQnagSsK+MxsHDs4KBEKpQWtxwcFu5tJ+t8cYY4e1gzov/Ik6rV4iu zDr//F6W7w89DD+NlvpmUIzgcxTjr92+Kihey9McIXG0Tv0N3JG9a0UEJV85FkQE d6s2OQL6mDql1HB2e8JvwX3Vz8XJr5CUMiQe8sbT6iHUVsicGcgheq9zSKNphRFm kR7ZUxm8ubvRmZlyECbVNoB4cqkFR0H250SpX9NpiT+BRNQshS1a0Z93I3euQhlH Mj5/OLOmY+6wNfDq3lvGi77N6TfPvAdd23SpmB20jV/9NpLcqmRzIHEnFNfc64Bb essCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQXC3ygb1c1t6QPl/8fU7rhM0ipPjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjYyL0Z3dDhvRzlYTmJla0Q1Zl9IMU82NFROSXFUNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdD14wDQYJKoZIhvcNAQELBQAD ggEBAJrcedq55C4V87e8hOeoT56eqcBqCGTbTR1rOBPWFlsgMlCrxtnr+zSrhZb7 nqdZxy02/nvm1eyQI4X3VDnYy3OKAjqsTLrdN8duLskGGq78z0teLK6TsQuxIZ29 PL86rD1H7cZWHdyrX+9N8EnZK33Pz0dXCxTqHFt2Uinaex64yHksU6crY9n5hxOb z5npP/MHnGatQ1X3LYr4RisdFIqH/pvzLJP/MP2zCRvuzLkserW8vGM6QSFRX39S crzlibOQ5l8Y9m1DXv++uQNQNjbuRjUTv/eO2ZVQ/bl5edDx+bPynv9kMbocDy0V CxtKz6gXqwNXfnEzaf7n8IqB0cQ= -----END CERTIFICATE-----Generated at Wed Apr 16 00:07:03 2025 by rpki-client