$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KiJnreDthkvp9oLDpe2qFRu6hmQ.cer File: KiJnreDthkvp9oLDpe2qFRu6hmQ.cer (raw, json) Hash identifier: g/WmLHExPW8x/P7F9vdWBkaWhM1Bzdbt7l1l00P9oTU= Subject key identifier: 2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CE07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:12:01 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:8720::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52743 (0xce07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:12:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=2A2267ADE0ED864BE9F682C3A5EDAA151BBA8664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:39:2c:1e:60:94:e1:90:53:d6:df:42:54: 82:4c:05:2d:e5:3a:82:40:67:3e:e8:35:e6:d3:19: 55:44:e4:18:51:80:61:b4:6a:47:1f:86:44:c1:19: 22:07:b0:d6:31:8e:02:3b:2d:89:5e:ed:6d:aa:56: 00:1c:3a:1d:4f:f7:e7:0e:02:5d:19:cd:ca:7d:71: 3a:f5:b1:53:a9:1c:a6:e1:7c:8b:69:ac:24:1b:78: eb:01:27:73:d6:64:77:13:2b:11:6e:0e:b9:0e:f8: 88:18:33:14:5b:01:d0:c6:97:39:df:fc:9f:a5:7f: 50:d1:77:93:1d:14:38:3b:77:26:60:12:76:90:61: 4d:bd:22:97:87:4b:5d:e1:9f:11:5a:e0:e3:16:40: 0b:42:bd:6d:24:7e:47:00:c7:a5:11:11:63:8a:a7: e6:99:fb:e1:92:07:46:19:c8:91:eb:f1:2a:db:ea: 06:0a:7a:ab:3e:6d:33:38:9c:8b:bf:6a:64:6f:7e: 58:e8:f5:ff:3d:a8:ca:95:b7:15:ef:b5:77:46:a7: ed:8d:d0:9d:db:74:7b:d0:69:0e:58:60:7b:ac:8c: 7f:6e:9c:19:01:90:88:a4:f6:33:5e:b9:29:91:b1: 98:75:6f:37:60:c5:64:65:58:00:17:ef:1c:5e:59: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:22:67:AD:E0:ED:86:4B:E9:F6:82:C3:A5:ED:AA:15:1B:BA:86:64 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3269/KiJnreDthkvp9oLDpe2qFRu6hmQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:8720::/32 Signature Algorithm: sha256WithRSAEncryption b5:fa:7e:8d:2f:82:28:8f:69:0a:a6:f7:6d:97:15:06:6f:4d: b3:60:15:06:03:c2:f3:7e:22:29:62:40:b7:73:65:02:43:89: 94:17:3a:fd:5f:ac:da:15:52:80:b0:09:1d:32:96:08:7d:c0: d2:86:75:00:5f:1c:dd:ff:4b:57:5d:b6:9b:d8:6d:03:3c:57: 9d:3c:b8:d7:2a:b7:f8:7f:c6:a5:95:aa:56:e1:eb:67:b2:08: 27:5d:6a:c7:9e:ca:62:0e:7c:a4:2e:81:11:9b:6e:e0:34:a2: 87:c4:43:3b:92:57:0b:9b:51:82:ef:fa:d6:d4:34:63:1e:c6: 57:11:5b:9f:a3:26:06:6b:fe:f0:14:4d:7d:4f:65:7c:71:f8: b0:17:4c:33:db:ea:1f:6b:01:c4:39:2e:31:f2:89:26:1a:9e: fb:40:15:9d:14:f1:83:5f:03:a6:70:27:92:29:86:2d:41:33: 36:47:a1:7d:1c:26:a1:b9:a0:3f:7c:64:3f:90:b1:2b:c0:af: 0f:70:3e:d9:5c:6a:94:57:11:f7:5a:75:d8:15:fa:38:9f:7d: fa:17:16:1f:c3:01:14:34:b2:f5:42:31:48:38:de:06:86:b9: 32:d9:d0:e9:27:b3:71:5b:cf:5c:39:2b:3d:f5:65:38:a0:06: d6:e2:f0:fc -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAM4HMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODEyMDFaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDJBMjI2N0FERTBFRDg2NEJFOUY2ODJDM0E1RURBQTE1MUJCQTg2 NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQTksHmCU4ZBT1t9C VIJMBS3lOoJAZz7oNebTGVVE5BhRgGG0akcfhkTBGSIHsNYxjgI7LYle7W2qVgAc Oh1P9+cOAl0Zzcp9cTr1sVOpHKbhfItprCQbeOsBJ3PWZHcTKxFuDrkO+IgYMxRb AdDGlznf/J+lf1DRd5MdFDg7dyZgEnaQYU29IpeHS13hnxFa4OMWQAtCvW0kfkcA x6UREWOKp+aZ++GSB0YZyJHr8Srb6gYKeqs+bTM4nIu/amRvfljo9f89qMqVtxXv tXdGp+2N0J3bdHvQaQ5YYHusjH9unBkBkIik9jNeuSmRsZh1bzdgxWRlWAAX7xxe WdNrAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUKiJnreDthkvp9oLDpe2qFRu6hmQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI2OS9LaUpucmVEdGhrdnA5b0xEcGUycUZSdTZobVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGHIDANBgkqhkiG9w0BAQsF AAOCAQEAtfp+jS+CKI9pCqb3bZcVBm9Ns2AVBgPC834iKWJAt3NlAkOJlBc6/V+s 2hVSgLAJHTKWCH3A0oZ1AF8c3f9LV122m9htAzxXnTy41yq3+H/GpZWqVuHrZ7II J11qx57KYg58pC6BEZtu4DSih8RDO5JXC5tRgu/61tQ0Yx7GVxFbn6MmBmv+8BRN fU9lfHH4sBdMM9vqH2sBxDkuMfKJJhqe+0AVnRTxg18DpnAnkimGLUEzNkehfRwm obmgP3xkP5CxK8CvD3A+2VxqlFcR91p12BX6OJ99+hcWH8MBFDSy9UIxSDjeBoa5 MtnQ6SezcVvPXDkrPfVlOKAG1uLw/A== -----END CERTIFICATE-----Generated at Fri Apr 4 02:20:44 2025 by rpki-client