$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer File: xTr0BD_E0rAIWIIimrJ1BLaoIjg.cer (raw, json) Hash identifier: wAyrqCSP9ZHOuF6iSR9ckt5LBr+zaHeo8E/rc+M4nLg= Subject key identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CCB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:13:43 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 161.248.20.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15563 (0x3ccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Apr 3 08:13:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C53AF4043FC4D2B0085882229AB27504B6A82238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:54:61:49:96:17:ce:8e:17:55:49:68:93: aa:59:19:be:09:9a:17:4e:e5:a2:03:91:7a:06:80: b7:29:57:18:60:10:05:f6:32:33:82:47:c3:fe:f8: 00:d2:6c:24:1f:c6:1a:f1:e9:8e:6d:8b:0a:3a:48: ee:5d:9e:41:e6:76:1d:c2:6b:11:ee:83:09:de:60: e4:9e:4d:8f:f0:db:59:9a:6a:b2:de:3b:b6:6d:cf: 97:85:9b:3a:ad:75:16:7d:5a:84:43:d4:32:ae:09: f6:0c:b8:e5:50:e7:d7:b8:40:49:93:78:b6:3c:66: 15:70:f3:2d:fc:e6:fa:60:56:a0:9f:02:48:90:9a: c5:3a:63:be:1d:e8:5e:b3:27:b6:0e:d1:08:dc:36: 96:c4:25:b7:f8:4c:44:a1:5d:26:da:43:f7:92:97: af:53:a2:3e:c2:cc:a2:2a:c1:82:7e:2f:54:5a:1e: be:ae:4f:31:2e:75:9b:be:7b:53:9a:e3:ef:db:1e: 62:b3:ab:a1:fa:15:61:fd:e1:2b:2d:61:28:0c:e7: 31:73:ed:77:83:da:7f:78:b7:55:74:5b:94:9b:68: 12:0e:26:42:36:06:27:0e:75:05:11:5b:3c:17:87: cc:3c:70:bf:07:49:35:4d:28:d4:e1:7d:15:4a:c2: b5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3A:F4:04:3F:C4:D2:B0:08:58:82:22:9A:B2:75:04:B6:A8:22:38 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/xTr0BD_E0rAIWIIimrJ1BLaoIjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.20.0/23 Signature Algorithm: sha256WithRSAEncryption 09:61:94:af:60:b3:5b:f6:83:0a:89:f7:19:a6:e5:e8:57:c5: 46:4b:4a:da:b8:a3:ac:fe:a0:ca:2d:0e:c0:be:fb:85:9c:5e: fd:20:3a:db:bb:68:fc:71:ab:ee:21:74:fb:3c:1a:dc:5a:40: e4:ee:a6:0a:c2:0a:2d:dd:6b:eb:60:27:cf:e3:34:6d:4b:67: c8:fa:b1:8b:f9:48:16:c0:31:c8:58:fb:c7:14:37:48:d9:86: ac:c3:3e:6c:27:a3:19:5e:02:f8:22:8e:fa:26:e8:7e:e4:a3: 7f:bf:54:76:cd:42:0e:66:ea:28:56:7b:47:17:44:1e:22:fd: 9d:38:0f:00:07:76:6b:12:5e:98:0a:33:78:c1:7d:b8:1f:ad: b6:6e:20:9c:a6:14:35:79:25:95:bb:d1:70:de:3d:28:8e:77: a7:5e:11:cc:d3:d0:c6:88:91:48:21:e2:64:cf:7f:17:1e:f2: 3b:cd:7a:c2:af:1d:c2:91:39:97:8a:62:15:b5:b0:4c:38:92: 2b:ee:67:3a:90:16:eb:1f:ee:ce:7f:2c:0d:c1:58:1f:74:fe: 60:5f:67:42:db:9f:2d:c9:0e:a4:d1:c5:4f:57:e3:3f:2b:84: 47:a8:6e:eb:25:00:40:b4:22:6b:51:16:c6:e7:7b:0a:f7:c4: 33:52:b2:02 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPMswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTM0M1oXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoQzUzQUY0MDQzRkM0RDJCMDA4NTg4MjIyOUFCMjc1MDRCNkE4MjIz ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALs2VGFJlhfOjhdVSWiT qlkZvgmaF07logORegaAtylXGGAQBfYyM4JHw/74ANJsJB/GGvHpjm2LCjpI7l2e QeZ2HcJrEe6DCd5g5J5Nj/DbWZpqst47tm3Pl4WbOq11Fn1ahEPUMq4J9gy45VDn 17hASZN4tjxmFXDzLfzm+mBWoJ8CSJCaxTpjvh3oXrMntg7RCNw2lsQlt/hMRKFd JtpD95KXr1OiPsLMoirBgn4vVFoevq5PMS51m757U5rj79seYrOrofoVYf3hKy1h KAznMXPtd4Paf3i3VXRblJtoEg4mQjYGJw51BRFbPBeHzDxwvwdJNU0o1OF9FUrC tdkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTFOvQEP8TSsAhYgiKasnUEtqgiODAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzQxL3hUcjBCRF9FMHJBSVdJSWltckoxQkxhb0lqZy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGh+BQwDQYJKoZIhvcNAQELBQAD ggEBAAlhlK9gs1v2gwqJ9xmm5ehXxUZLStq4o6z+oMotDsC++4WcXv0gOtu7aPxx q+4hdPs8GtxaQOTupgrCCi3da+tgJ8/jNG1LZ8j6sYv5SBbAMchY+8cUN0jZhqzD PmwnoxleAvgijvom6H7ko3+/VHbNQg5m6ihWe0cXRB4i/Z04DwAHdmsSXpgKM3jB fbgfrbZuIJymFDV5JZW70XDePSiOd6deEczT0MaIkUgh4mTPfxce8jvNesKvHcKR OZeKYhW1sEw4kivuZzqQFusf7s5/LA3BWB90/mBfZ0Lbny3JDqTRxU9X4z8rhEeo buslAEC0ImtRFsbnewr3xDNSsgI= -----END CERTIFICATE-----Generated at Fri Apr 4 02:18:51 2025 by rpki-client