$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer File: VLX_ts-oeeTrWK4gq9ls2cvgcnA.cer (raw, json) Hash identifier: G+KHiGh0sBvp3ddPgRqNnAiVZpqO8UZaxGJ8cplkDc8= Subject key identifier: 54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CDFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:11:48 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 202.38.8.0/21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52731 (0xcdfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:11:48 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=54B5FFB6CFA879E4EB58AE20ABD96CD9CBE07270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:2d:0f:4c:24:30:33:7c:48:55:e3:c0:94: 31:1b:77:98:a5:12:8a:ff:03:14:b7:9e:26:f4:3f: ff:d0:66:07:e9:8e:c7:5a:96:70:90:62:98:25:53: bf:38:f8:71:9c:c2:19:9e:5a:87:02:36:e2:d4:96: 2d:15:f8:6b:e8:3c:5a:43:17:53:df:09:73:02:82: 3b:a9:58:59:c3:78:42:6c:7c:57:4f:b8:4a:39:d2: ed:85:10:28:96:32:0d:bf:7e:91:e1:a0:03:84:42: ea:51:57:c6:c1:e5:a0:52:51:e6:bf:46:4a:bc:89: b4:64:fd:b4:aa:74:b1:68:fd:4d:04:e0:15:c5:9f: 2e:7a:cd:94:5c:b7:f2:ec:53:93:76:c3:df:60:b8: 68:9a:d6:98:14:c7:c0:cc:ed:84:56:8c:ef:fd:95: 97:d0:0d:2c:96:8c:c9:9e:37:d6:e0:80:9d:e5:7a: 00:20:69:50:ce:ad:90:f1:48:c0:c1:3a:e7:0c:e0: 94:a6:78:01:5b:c2:d3:00:e0:0a:96:6f:1f:ed:3a: 43:87:31:95:26:b8:01:30:9d:92:36:48:3e:44:42: 66:0d:8a:c8:82:1f:44:9e:ca:19:eb:94:79:af:84: 61:b7:b5:80:a3:12:a8:69:f4:d9:67:29:fb:3e:7f: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B5:FF:B6:CF:A8:79:E4:EB:58:AE:20:AB:D9:6C:D9:CB:E0:72:70 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3213/VLX_ts-oeeTrWK4gq9ls2cvgcnA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.38.8.0/21 Signature Algorithm: sha256WithRSAEncryption 59:a2:bf:74:e0:69:71:73:06:31:c4:2b:44:a1:9b:a9:03:11: b8:9c:4b:44:f4:c8:b8:8c:5b:16:8d:8b:f8:73:72:db:5a:8f: 29:42:4e:24:25:90:72:b4:2b:70:84:81:38:54:24:b2:6d:70: 82:cb:53:6e:bb:86:b0:af:7e:24:08:4f:6e:07:94:7d:b6:0d: dd:ca:59:5b:dc:c7:08:d6:2a:a0:82:33:de:9d:0d:b2:ca:f5: 5c:2a:9e:fc:8a:e4:63:2a:8a:63:ef:b7:78:73:01:59:c8:7f: ea:e1:6c:91:36:15:21:90:44:aa:fe:38:f8:6d:66:cc:b6:8f: a7:4d:4d:7a:f9:9e:db:72:14:fe:c5:3a:55:f2:aa:2a:f6:a2: 5c:a7:3f:27:95:78:a1:2f:f0:ac:6c:1d:f6:40:72:7a:ec:eb: b8:63:30:e4:79:ce:de:94:fc:16:0c:01:c1:af:f9:03:32:70: 46:38:21:e4:6f:4a:f2:f7:51:1b:ba:a9:42:ff:09:1a:ca:61: a5:e1:08:1c:8c:8e:a4:e5:61:42:4d:64:72:b0:ca:0a:a6:4e: f8:08:c9:7d:d8:9f:fa:94:f1:25:37:e0:bb:af:ef:7d:61:80: 95:2e:bd:54:da:5c:16:4b:af:b9:45:9b:3f:be:f2:b5:87:89: 3e:36:d4:9b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAM37MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODExNDhaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDU0QjVGRkI2Q0ZBODc5RTRFQjU4QUUyMEFCRDk2Q0Q5Q0JFMDcy NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9S0PTCQwM3xIVePA lDEbd5ilEor/AxS3nib0P//QZgfpjsdalnCQYpglU784+HGcwhmeWocCNuLUli0V +GvoPFpDF1PfCXMCgjupWFnDeEJsfFdPuEo50u2FECiWMg2/fpHhoAOEQupRV8bB 5aBSUea/Rkq8ibRk/bSqdLFo/U0E4BXFny56zZRct/LsU5N2w99guGia1pgUx8DM 7YRWjO/9lZfQDSyWjMmeN9bggJ3legAgaVDOrZDxSMDBOucM4JSmeAFbwtMA4AqW bx/tOkOHMZUmuAEwnZI2SD5EQmYNisiCH0SeyhnrlHmvhGG3tYCjEqhp9NlnKfs+ f5tDAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUVLX/ts+oeeTrWK4gq9ls2cvgcnAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIxMy9WTFhfdHMtb2VlVHJXSzRncTlsczJjdmdjbkEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyiYIMA0GCSqGSIb3DQEBCwUA A4IBAQBZor904GlxcwYxxCtEoZupAxG4nEtE9Mi4jFsWjYv4c3LbWo8pQk4kJZBy tCtwhIE4VCSybXCCy1Nuu4awr34kCE9uB5R9tg3dyllb3McI1iqggjPenQ2yyvVc Kp78iuRjKopj77d4cwFZyH/q4WyRNhUhkESq/jj4bWbMto+nTU16+Z7bchT+xTpV 8qoq9qJcpz8nlXihL/CsbB32QHJ67Ou4YzDkec7elPwWDAHBr/kDMnBGOCHkb0ry 91EbuqlC/wkaymGl4QgcjI6k5WFCTWRysMoKpk74CMl92J/6lPElN+C7r+99YYCV Lr1U2lwWS6+5RZs/vvK1h4k+NtSb -----END CERTIFICATE-----Generated at Fri Apr 4 02:17:45 2025 by rpki-client