$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SAMQHPS71ffgKuM42Mmazfe2CGU.cer File: SAMQHPS71ffgKuM42Mmazfe2CGU.cer (raw, json) Hash identifier: /iKS5gNU/9vw/SmRQ+f7BS++IjvnlA3PqJyDThk/5lY= Subject key identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D1B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sat 03 May 2025 20:08:15 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:5c60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53686 (0xd1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: May 3 20:08:15 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4803101CF4BBD5F7E02AE338D8C99ACDF7B60865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:5c:c3:2d:53:30:01:ef:3a:50:01:98:6a: cc:3b:92:18:78:7c:fe:3c:f9:a0:46:86:1e:4c:ef: 0d:d4:ca:53:b1:32:fd:89:7c:f3:7c:63:0a:38:40: f0:1f:04:dd:b8:ec:41:91:3a:f8:2d:c5:6e:f2:9d: 21:12:0a:65:a4:79:eb:3e:77:21:90:d5:26:da:13: 68:6a:19:0d:8f:7d:d9:e8:6f:e1:33:4f:8c:85:46: 1a:68:41:b9:16:e2:56:de:8f:9f:87:0d:c8:c9:67: b2:81:ab:fa:1b:3d:c2:15:b6:10:22:4c:32:0e:b2: 40:b0:47:8a:16:9c:18:37:b7:9a:d2:89:06:2d:f9: fd:2c:bc:e6:3b:d5:b0:f4:8e:ad:6d:4b:4e:82:43: 4d:1a:e3:e6:62:8e:1c:9a:3c:6e:9e:83:66:8b:42: de:72:1c:c2:f3:9c:0f:d7:8b:24:ab:e8:47:2a:bc: 45:ff:23:3b:3c:8d:02:5a:d9:9b:42:e1:22:c4:77: f6:25:d7:12:25:e2:31:3d:f9:c8:6c:0e:cb:82:af: a6:d9:65:67:97:74:f8:93:62:35:75:ae:09:2f:53: 15:76:02:7a:c1:f5:7b:60:45:e7:f3:f2:d7:2c:39: eb:6c:77:7e:45:f4:dd:6e:68:57:01:b9:de:7b:45: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5c60::/32 Signature Algorithm: sha256WithRSAEncryption 7d:a5:3b:b6:27:d1:07:e2:b3:d3:a0:61:36:fb:6a:1a:00:dc: 47:96:28:3a:85:78:56:84:f5:f5:8d:a6:73:b2:32:33:39:a6: b7:dc:8f:51:11:3d:2a:a5:00:e9:59:aa:6c:75:b3:2d:d2:36: 50:41:05:2b:cc:d2:0c:9a:14:2b:60:b8:39:f5:20:9e:75:6b: 0b:78:4b:a0:32:a5:4f:e2:96:97:b7:98:cf:56:a6:29:29:3a: 71:19:43:68:28:c5:f4:40:e7:cc:4f:95:61:ed:e7:31:58:5c: ad:74:86:5a:0a:1e:00:93:d6:cc:64:27:37:f3:bc:e8:37:9f: 68:5e:dd:33:d3:7f:61:c4:04:63:94:c2:00:da:35:05:4a:85: da:4a:21:f8:f4:cc:f0:ee:0c:cf:ea:b7:43:99:00:b3:81:5a: 83:e4:76:fe:e2:2f:e1:4a:2e:63:dc:37:6f:5c:15:79:c3:06: 33:9e:25:74:0b:a8:6b:7a:84:66:21:40:fd:b3:6b:d1:aa:73: 84:36:07:56:38:35:f9:a7:d4:3c:cb:88:54:2b:25:ec:27:fe: 49:44:17:97:ea:41:c5:1f:5f:1d:99:bf:9a:50:13:6a:e8:7a: cf:08:41:47:e7:12:0d:3a:fc:c6:96:54:cb:61:f1:26:cf:cc: 7e:e6:54:f5 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANG2MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA1MDMyMDA4MTVaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDQ4MDMxMDFDRjRCQkQ1RjdFMDJBRTMzOEQ4Qzk5QUNERjdCNjA4 NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oFzDLVMwAe86UAGY asw7khh4fP48+aBGhh5M7w3UylOxMv2JfPN8Ywo4QPAfBN247EGROvgtxW7ynSES CmWkees+dyGQ1SbaE2hqGQ2Pfdnob+EzT4yFRhpoQbkW4lbej5+HDcjJZ7KBq/ob PcIVthAiTDIOskCwR4oWnBg3t5rSiQYt+f0svOY71bD0jq1tS06CQ00a4+Zijhya PG6eg2aLQt5yHMLznA/XiySr6EcqvEX/Izs8jQJa2ZtC4SLEd/Yl1xIl4jE9+chs DsuCr6bZZWeXdPiTYjV1rgkvUxV2AnrB9XtgRefz8tcsOetsd35F9N1uaFcBud57 RbCZAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUSAMQHPS71ffgKuM42Mmazfe2CGUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0OS9TQU1RSFBTNzFmZmdLdU00Mk1tYXpmZTJDR1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAFcYDANBgkqhkiG9w0BAQsF AAOCAQEAfaU7tifRB+Kz06BhNvtqGgDcR5YoOoV4VoT19Y2mc7IyMzmmt9yPURE9 KqUA6VmqbHWzLdI2UEEFK8zSDJoUK2C4OfUgnnVrC3hLoDKlT+KWl7eYz1amKSk6 cRlDaCjF9EDnzE+VYe3nMVhcrXSGWgoeAJPWzGQnN/O86DefaF7dM9N/YcQEY5TC ANo1BUqF2koh+PTM8O4Mz+q3Q5kAs4Fag+R2/uIv4UouY9w3b1wVecMGM54ldAuo a3qEZiFA/bNr0apzhDYHVjg1+afUPMuIVCsl7Cf+SUQXl+pBxR9fHZm/mlATauh6 zwhBR+cSDTr8xpZUy2HxJs/MfuZU9Q== -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:03 2025 by rpki-client