$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TKnrtNTELADG1a1ccPtrRXZYMXc.cer File: TKnrtNTELADG1a1ccPtrRXZYMXc.cer (raw, json) Hash identifier: asEu4ElbHV2ZKWdLD33NHPcfVv2fOCxewwYnpX3Yc7g= Subject key identifier: 4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D32D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 21 May 2025 02:32:21 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 151261 IP: 2402:c60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54061 (0xd32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: May 21 02:32:21 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=4CA9EBB4D4C42C00C6D5AD5C70FB6B4576583177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c4:29:19:b9:85:d3:4e:14:7b:5f:51:96:69: ac:ea:00:6e:99:76:37:fe:81:9a:f2:fa:14:d9:25: 2b:d4:6f:9d:3c:61:54:56:dc:a9:64:44:3d:76:01: 61:86:83:13:82:82:88:5f:f1:a0:af:eb:2e:44:b6: f5:ff:db:c8:42:e9:7b:7c:78:a4:e1:33:75:b2:5c: 57:dc:64:01:3d:f7:ae:54:db:41:7c:83:b7:a2:48: 8d:da:d6:3e:e5:d9:5c:87:89:64:b2:15:0a:69:7d: 54:d3:57:a4:6a:20:fa:59:c4:78:17:a1:e5:51:23: cc:a9:d7:be:d9:ea:fd:14:5c:04:73:13:eb:3e:dd: 19:bf:46:a4:32:a0:6e:f8:3c:8a:e5:b8:cf:c0:eb: 62:81:d2:ff:94:64:2e:52:43:03:72:5e:5a:e3:ec: 80:cc:6b:97:ab:ac:24:1b:cc:d6:78:56:ac:19:7a: 4e:8b:34:da:4a:db:42:89:9d:cb:d5:9b:14:0f:19: 6c:b8:a4:8a:ff:c8:37:87:2d:30:44:55:75:df:5e: 22:b1:fb:0e:35:8b:1f:1c:0a:a6:5a:74:b4:ef:6e: a5:e7:f4:3f:1d:19:44:a6:4d:60:8b:36:77:67:0e: 86:7a:c0:d9:df:32:3f:e9:57:3b:f4:87:b2:4d:15: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A9:EB:B4:D4:C4:2C:00:C6:D5:AD:5C:70:FB:6B:45:76:58:31:77 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TKnrtNTELADG1a1ccPtrRXZYMXc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151261 sbgp-ipAddrBlock: critical IPv6: 2402:c60::/32 Signature Algorithm: sha256WithRSAEncryption 8b:e4:76:46:57:83:4d:5b:81:9d:19:7b:38:19:fe:e8:0a:f7: 5c:bb:0a:d3:fd:06:9b:c6:fe:f4:e4:26:e6:49:4c:9d:71:3d: 6c:f3:75:7a:70:5f:1e:be:dd:2a:50:66:b4:e8:d8:f4:7c:e7: 4c:8f:74:25:2b:68:60:c3:48:0c:2a:24:43:f3:be:9c:29:8e: 4f:bd:2b:6b:69:a7:c9:5c:15:96:3f:aa:bb:6f:21:a7:8a:c1: 7d:79:5e:e8:e9:07:33:c4:d0:a5:02:f5:e1:87:05:93:4c:1b: e7:5c:d1:98:0d:ea:6b:a4:a4:fa:f9:40:0a:1a:2b:a6:26:6b: 25:6c:ef:31:fe:6c:ea:e7:3d:b0:2c:a7:1a:24:21:33:8c:76: 3f:b2:c4:7d:f4:11:6b:68:4c:95:7b:5b:14:03:9b:7c:8a:8c: c4:fa:56:ed:38:ce:6f:fd:0c:17:71:fc:10:58:0d:0b:56:37: b6:45:5c:bd:af:85:c8:4d:6c:71:04:c7:d7:37:cf:52:fc:0e: c5:fa:24:a8:ad:4f:27:8c:c0:75:0e:c7:87:7a:92:e3:0d:75: f0:85:e7:53:75:f1:ee:3f:1b:69:e4:49:87:f1:2a:f3:f2:55: ac:d1:11:6e:ae:d4:92:cf:e5:4d:46:4e:be:2b:a1:a3:0e:fe: 15:e1:32:58 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDANMtMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA1MjEwMjMyMjFaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDRDQTlFQkI0RDRDNDJDMDBDNkQ1QUQ1QzcwRkI2QjQ1NzY1ODMx NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxCkZuYXTThR7X1GW aazqAG6Zdjf+gZry+hTZJSvUb508YVRW3KlkRD12AWGGgxOCgohf8aCv6y5EtvX/ 28hC6Xt8eKThM3WyXFfcZAE9965U20F8g7eiSI3a1j7l2VyHiWSyFQppfVTTV6Rq IPpZxHgXoeVRI8yp177Z6v0UXARzE+s+3Rm/RqQyoG74PIrluM/A62KB0v+UZC5S QwNyXlrj7IDMa5errCQbzNZ4VqwZek6LNNpK20KJncvVmxQPGWy4pIr/yDeHLTBE VXXfXiKx+w41ix8cCqZadLTvbqXn9D8dGUSmTWCLNndnDoZ6wNnfMj/pVzv0h7JN Ff6/AgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUTKnrtNTELADG1a1ccPtrRXZYMXcw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4Mi9US25ydE5URUxBREcxYTFjY1B0clJYWllNWGMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO3TAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQCDGAwDQYJKoZIhvcNAQELBQADggEBAIvkdkZXg01bgZ0ZezgZ /ugK91y7CtP9BpvG/vTkJuZJTJ1xPWzzdXpwXx6+3SpQZrTo2PR850yPdCUraGDD SAwqJEPzvpwpjk+9K2tpp8lcFZY/qrtvIaeKwX15XujpBzPE0KUC9eGHBZNMG+dc 0ZgN6mukpPr5QAoaK6YmayVs7zH+bOrnPbAspxokITOMdj+yxH30EWtoTJV7WxQD m3yKjMT6Vu04zm/9DBdx/BBYDQtWN7ZFXL2vhchNbHEEx9c3z1L8DsX6JKitTyeM wHUOx4d6kuMNdfCF51N18e4/G2nkSYfxKvPyVazREW6u1JLP5U1GTr4roaMO/hXh Mlg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:46:06 2025 by rpki-client