$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer File: wrEFUbAKIe7r4enJQLSZntFcIfM.cer (raw, json) Hash identifier: fSS4QtZyRp22d8eDSDP0TGIr4YXpa/iyxjsLnL9jVqY= Subject key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D0FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 27 Apr 2025 20:06:29 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 103.139.212.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Jun 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53503 (0xd0ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 27 20:06:29 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:9d:04:1f:9e:de:e4:73:40:95:02:89:42: db:15:f6:fc:d8:87:13:01:a4:56:b6:d4:92:f0:85: 74:6f:c2:56:f5:35:16:2e:d7:a6:3b:2f:14:23:be: e3:1e:58:48:3f:ba:38:aa:44:4a:1c:f0:39:02:e2: 9f:cd:7d:73:b4:6e:4e:43:11:c3:ab:2c:dc:b4:f9: 9b:1a:2a:fb:f0:c9:19:a7:be:40:05:c4:94:ff:8c: 6e:22:51:7c:27:30:19:b1:9f:67:ff:43:2f:ab:30: a2:7e:6c:cd:72:c0:6d:d6:15:1a:45:fc:68:6c:9c: b8:bc:fa:e5:fd:8d:88:f4:79:5e:7e:03:55:7a:cd: e8:a1:20:c8:69:b3:62:b9:b0:dc:47:72:65:40:a2: 6d:41:c1:5e:b2:e2:45:91:0e:27:58:ec:e3:5a:66: f9:9b:14:20:70:f1:4c:81:35:b7:05:fd:7b:8d:ff: 55:44:67:ad:6f:d8:59:63:52:e2:a9:92:a6:11:5f: 66:e8:22:43:97:68:41:16:b2:07:81:0f:e1:e6:5f: a8:a6:af:78:b6:a7:df:6d:d5:f5:bd:ae:ce:f6:2d: 60:f3:c0:a3:5f:e6:4d:ee:45:bb:1d:10:8d:f7:0f: 5c:83:2c:bd:4f:bc:75:b9:b0:e7:4a:93:79:a7:90: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.212.0/23 Signature Algorithm: sha256WithRSAEncryption 81:62:d8:51:6e:65:0e:27:09:c4:51:99:dd:21:c1:08:1d:74: 5a:47:e1:0c:cd:3f:d3:19:8a:05:ca:25:82:f0:49:76:04:79: d4:3a:0b:aa:b5:9d:17:4b:75:84:65:f6:f7:79:89:b8:52:6b: b9:a0:bc:b4:66:d8:54:00:eb:26:13:ed:b1:c6:c8:d8:61:e4: 92:2f:ad:01:ed:fa:10:11:1b:92:e8:a1:b2:57:18:78:73:c5: e7:a7:7b:87:48:9a:c6:f3:1c:cc:5a:a2:5b:e6:1e:9c:af:55: ab:06:90:7a:4d:bd:cb:08:ed:fb:42:cc:31:84:36:8c:05:8b: 64:81:31:74:44:93:83:fa:b8:76:f7:19:59:b3:f3:5a:c8:b4: d1:12:be:5f:e9:81:e8:45:48:e4:5b:f1:a0:8a:71:76:96:51: e2:b0:8f:a1:2f:cd:6d:93:59:88:28:02:7c:a3:5c:da:14:46: 29:40:f4:a0:f4:78:bc:d9:03:b8:dc:50:0c:61:e4:34:1a:97: 62:73:b6:cc:ca:ff:2e:85:2e:5b:42:47:13:9e:4b:cf:61:50: 52:c0:9c:50:a7:90:05:76:c5:17:31:20:ae:07:4a:89:32:d4: 6a:4c:e5:93:c1:b8:6f:55:1d:e6:02:27:60:c8:88:d3:9e:fa: 37:54:d1:29 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAND/MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MjcyMDA2MjlaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEMyQjEwNTUxQjAwQTIxRUVFQkUxRTlDOTQwQjQ5OTlFRDE1QzIx RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxp0EH57e5HNAlQKJ QtsV9vzYhxMBpFa21JLwhXRvwlb1NRYu16Y7LxQjvuMeWEg/ujiqREoc8DkC4p/N fXO0bk5DEcOrLNy0+ZsaKvvwyRmnvkAFxJT/jG4iUXwnMBmxn2f/Qy+rMKJ+bM1y wG3WFRpF/GhsnLi8+uX9jYj0eV5+A1V6zeihIMhps2K5sNxHcmVAom1BwV6y4kWR DidY7ONaZvmbFCBw8UyBNbcF/XuN/1VEZ61v2FljUuKpkqYRX2boIkOXaEEWsgeB D+HmX6imr3i2p99t1fW9rs72LWDzwKNf5k3uRbsdEI33D1yDLL1PvHW5sOdKk3mn kAtbAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUwrEFUbAKIe7r4enJQLSZntFcIfMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4 OTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjg5Ny93ckVGVWJBS0llN3I0ZW5KUUxTWm50RmNJZk0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4vUMA0GCSqGSIb3DQEBCwUA A4IBAQCBYthRbmUOJwnEUZndIcEIHXRaR+EMzT/TGYoFyiWC8El2BHnUOguqtZ0X S3WEZfb3eYm4Umu5oLy0ZthUAOsmE+2xxsjYYeSSL60B7foQERuS6KGyVxh4c8Xn p3uHSJrG8xzMWqJb5h6cr1WrBpB6Tb3LCO37QswxhDaMBYtkgTF0RJOD+rh29xlZ s/NayLTREr5f6YHoRUjkW/GginF2llHisI+hL81tk1mIKAJ8o1zaFEYpQPSg9Hi8 2QO43FAMYeQ0Gpdic7bMyv8uhS5bQkcTnkvPYVBSwJxQp5AFdsUXMSCuB0qJMtRq TOWTwbhvVR3mAidgyIjTnvo3VNEp -----END CERTIFICATE-----Generated at Mon Jun 2 07:15:17 2025 by rpki-client