$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sIxEzvbWUf77qxG4j5_aFKUCzp8.cer File: sIxEzvbWUf77qxG4j5_aFKUCzp8.cer (raw, json) Hash identifier: gOQFxTl4BuirfRtiU+5LYfDFslg9CZRofuvzJY9Qt4A= Subject key identifier: B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CE4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:13:51 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 151274 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52813 (0xce4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:13:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B08C44CEF6D651FEFBAB11B88F9FDA14A502CE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:c9:20:d2:1d:71:8c:50:5a:dd:f0:a5:f0: 4a:47:91:0e:c9:81:6e:f2:97:83:d5:25:99:22:f9: 56:9a:98:18:bc:d8:6b:17:d7:c1:fc:7c:c5:82:59: 0d:d2:93:af:7c:e9:85:72:d1:26:45:71:11:e1:d3: e6:79:b7:17:ea:2c:81:c1:f6:71:d4:fa:3e:7d:96: 7c:f3:7c:bc:fe:81:a9:cf:d9:a9:1e:65:67:60:09: de:92:55:ea:ad:18:ec:67:43:f0:b6:ed:37:07:16: 9b:1f:76:af:14:d7:e5:f5:6d:47:78:52:96:51:ce: b0:63:61:a9:92:ef:a4:5d:ef:17:29:e6:77:5d:1b: 6e:37:d0:da:8c:db:05:71:cb:f6:5f:d6:9f:33:fd: c4:ba:28:7e:31:e3:54:4e:a3:fd:2e:fd:63:9b:d9: f0:4f:83:6a:c7:20:ad:02:ad:47:4a:03:f3:02:d7: d3:f0:64:27:7f:ec:e4:47:39:6d:b1:89:e2:eb:ea: a3:5b:21:1f:0e:70:09:d9:7b:84:75:4f:3b:69:a4: 31:92:9b:dc:23:34:8c:f9:b5:f0:e5:e0:a7:a7:2d: c0:69:25:c0:c3:fb:49:36:34:fd:d0:c6:a2:59:b7: 6a:21:1a:18:39:21:64:96:ee:e5:ac:d6:98:9d:e0: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151274 Signature Algorithm: sha256WithRSAEncryption 9a:a6:9a:59:50:0c:fd:f3:4a:16:12:d1:64:93:69:d7:06:de: 82:07:dc:76:1e:3f:a6:c4:02:e8:82:8e:32:21:b7:c0:d1:78: 0d:20:38:2c:de:21:a5:c0:f6:81:f5:06:cd:24:f9:5c:92:bb: 82:a6:be:cd:b2:5a:20:f7:91:7c:a2:c2:9c:22:ab:4c:03:1b: 22:30:bc:ff:18:5d:1f:7e:f2:a2:69:38:9a:02:67:1a:fc:a9: 46:5d:8a:ea:b9:d2:ed:4f:26:c8:05:3c:ff:d4:86:33:82:33: 2a:20:02:b4:97:3f:97:bf:31:ee:61:c6:b7:b3:12:82:1e:08: 7e:ff:68:e6:27:48:91:ea:9e:13:4f:07:48:91:a3:c0:b1:7f: a6:b6:4d:a2:91:66:11:5d:05:53:f3:10:35:46:70:11:ae:99: d7:5d:69:87:83:d0:3b:54:17:7c:3c:ec:61:30:9a:21:0e:b5: 31:5c:ce:cc:63:19:a0:22:7c:33:c5:15:e1:e7:c3:d1:76:3d: 4a:52:dc:54:fc:e4:51:18:a4:fd:f3:10:58:f7:69:ad:e0:0d: 2c:c6:12:f0:f5:b9:ef:f4:88:ed:3e:50:11:50:64:92:ce:55: eb:db:9f:ec:3c:70:bc:a6:18:0f:8c:b0:40:a7:98:0b:72:4f: f8:b1:6f:18 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAM5NMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODEzNTFaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEIwOEM0NENFRjZENjUxRkVGQkFCMTFCODhGOUZEQTE0QTUwMkNF OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqnckg0h1xjFBa3fCl 8EpHkQ7JgW7yl4PVJZki+VaamBi82GsX18H8fMWCWQ3Sk6986YVy0SZFcRHh0+Z5 txfqLIHB9nHU+j59lnzzfLz+ganP2akeZWdgCd6SVeqtGOxnQ/C27TcHFpsfdq8U 1+X1bUd4UpZRzrBjYamS76Rd7xcp5nddG2430NqM2wVxy/Zf1p8z/cS6KH4x41RO o/0u/WOb2fBPg2rHIK0CrUdKA/MC19PwZCd/7ORHOW2xieLr6qNbIR8OcAnZe4R1 TztppDGSm9wjNIz5tfDl4KenLcBpJcDD+0k2NP3QxqJZt2ohGhg5IWSW7uWs1pid 4OeRAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUsIxEzvbWUf77qxG4j5/aFKUCzp8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MzMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMzMy9zSXhFenZiV1VmNzdxeEc0ajVfYUZLVUN6cDgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO6jANBgkqhkiG9w0BAQsFAAOCAQEA mqaaWVAM/fNKFhLRZJNp1wbeggfcdh4/psQC6IKOMiG3wNF4DSA4LN4hpcD2gfUG zST5XJK7gqa+zbJaIPeRfKLCnCKrTAMbIjC8/xhdH37yomk4mgJnGvypRl2K6rnS 7U8myAU8/9SGM4IzKiACtJc/l78x7mHGt7MSgh4Ifv9o5idIkeqeE08HSJGjwLF/ prZNopFmEV0FU/MQNUZwEa6Z111ph4PQO1QXfDzsYTCaIQ61MVzOzGMZoCJ8M8UV 4efD0XY9SlLcVPzkURik/fMQWPdpreANLMYS8PW57/SI7T5QEVBkks5V69uf7Dxw vKYYD4ywQKeYC3JP+LFvGA== -----END CERTIFICATE-----Generated at Fri Apr 4 02:05:29 2025 by rpki-client