$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jJMxBDzLH-EZ8cLr4BxWx982ErY.cer File: jJMxBDzLH-EZ8cLr4BxWx982ErY.cer (raw, json) Hash identifier: DIo/qg6C85z612lXiGR0LgwibyGfF6CUDi//64uqGTY= Subject key identifier: 8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CCB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:05:55 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 110.173.96.0/19 IP: 202.173.224.0/19 IP: 211.148.128.0/19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52409 (0xccb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:05:55 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=8C9331043CCB1FE119F1C2EBE01C56C7DF3612B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:8b:ea:85:4d:aa:e4:c7:13:27:38:a2:60: 25:f6:31:79:b5:03:71:85:15:6f:4e:7e:95:b2:96: 56:fb:6a:41:65:6f:07:d2:2c:80:04:67:e5:2a:61: e0:77:a3:3d:01:54:df:6c:7d:05:18:91:1e:43:7a: 23:cd:87:a0:b8:53:0c:c5:88:cd:61:20:34:40:f8: a0:1e:36:08:94:60:6c:00:13:49:f6:f7:a4:84:c8: ac:03:f2:fe:0f:27:16:d5:52:3b:a2:4e:49:8e:01: e6:ae:35:4d:b2:73:52:b6:4c:39:df:18:a8:21:22: b7:7e:60:dc:49:9d:c2:85:c8:10:37:5a:13:e5:22: 8d:57:dd:a7:80:c3:98:49:d3:82:c2:6e:58:7a:1d: 7c:0a:1d:ef:75:93:94:dd:23:6d:77:82:ec:88:66: a7:56:5a:18:c8:28:8c:84:23:9a:11:df:a1:7c:44: 5f:0b:f1:f4:ff:d6:9b:4f:8e:98:b4:90:97:2f:61: 4b:96:3a:ec:0e:ab:12:92:4a:5a:94:e9:b6:02:05: 63:62:9c:90:41:24:82:f8:83:b9:95:4a:35:1d:07: 93:06:c6:44:f7:98:69:fe:0c:d4:e8:85:3e:0b:df: 55:ae:7f:3a:4d:dd:77:dc:d3:68:43:d9:63:83:bf: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.173.96.0/19 202.173.224.0/19 211.148.128.0/19 Signature Algorithm: sha256WithRSAEncryption 84:49:a4:56:ed:dd:8f:dc:c1:dc:30:6f:11:62:50:2c:70:51: 0e:8b:c6:a5:5c:07:49:a3:3c:ac:f2:ef:d1:06:2d:43:08:a4: 0e:7b:e6:96:8f:24:fd:9b:c5:98:c6:a5:2d:77:b8:75:4e:27: eb:c7:e2:1e:11:7c:f5:d6:ed:b8:ce:e2:6d:35:20:69:47:ef: f9:0a:3d:52:37:95:6e:7f:12:e7:29:04:a3:be:fb:df:39:d6: 72:ba:dc:ab:51:a9:71:8f:80:b5:29:8d:4c:33:a2:12:29:7b: b6:f0:b7:05:c6:64:98:20:d5:e5:21:6b:ff:bb:9f:82:7b:e5: 65:a0:80:bf:e1:df:8e:b6:2d:e8:62:e8:d4:52:10:01:92:93: da:3e:56:8e:23:53:10:ef:77:65:74:dd:99:65:ea:29:a2:4d: 08:e8:9a:d9:cc:35:a2:01:9b:89:8d:bf:bd:2f:5c:85:91:10: 2e:b4:82:52:70:30:52:61:d5:7d:06:ed:9d:73:aa:a9:7e:7b: cc:a8:2e:dd:da:1b:64:25:5b:db:be:51:f2:6c:94:4a:9f:9d: 47:c2:f5:7a:79:f6:bf:eb:cd:af:fb:d5:89:71:3d:1a:44:8d: 8f:02:0f:98:6e:8c:74:9b:22:6f:44:be:59:f2:04:6f:49:bb: 16:45:3e:05 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDAMy5MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA1NTVaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDhDOTMzMTA0M0NDQjFGRTExOUYxQzJFQkUwMUM1NkM3REYzNjEy QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hIvqhU2q5McTJzii YCX2MXm1A3GFFW9OfpWyllb7akFlbwfSLIAEZ+UqYeB3oz0BVN9sfQUYkR5DeiPN h6C4UwzFiM1hIDRA+KAeNgiUYGwAE0n296SEyKwD8v4PJxbVUjuiTkmOAeauNU2y c1K2TDnfGKghIrd+YNxJncKFyBA3WhPlIo1X3aeAw5hJ04LCblh6HXwKHe91k5Td I213guyIZqdWWhjIKIyEI5oR36F8RF8L8fT/1ptPjpi0kJcvYUuWOuwOqxKSSlqU 6bYCBWNinJBBJIL4g7mVSjUdB5MGxkT3mGn+DNTohT4L31WufzpN3Xfc02hD2WOD v/AxAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUjJMxBDzLH+EZ8cLr4BxWx982ErYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1NC9qSk14QkR6TEgtRVo4Y0xyNEJ4V3g5ODJFclkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFbq1gAwQFyq3gAwQF05SAMA0G CSqGSIb3DQEBCwUAA4IBAQCESaRW7d2P3MHcMG8RYlAscFEOi8alXAdJozys8u/R Bi1DCKQOe+aWjyT9m8WYxqUtd7h1Tifrx+IeEXz11u24zuJtNSBpR+/5Cj1SN5Vu fxLnKQSjvvvfOdZyutyrUalxj4C1KY1MM6ISKXu28LcFxmSYINXlIWv/u5+Ce+Vl oIC/4d+Oti3oYujUUhABkpPaPlaOI1MQ73dldN2ZZeopok0I6JrZzDWiAZuJjb+9 L1yFkRAutIJScDBSYdV9Bu2dc6qpfnvMqC7d2htkJVvbvlHybJRKn51HwvV6efa/ 682v+9WJcT0aRI2PAg+Ybox0myJvRL5Z8gRvSbsWRT4F -----END CERTIFICATE-----Generated at Fri Apr 4 02:18:41 2025 by rpki-client