$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fgidRjtgd0CTGkB3zrNM010DlrM.cer File: fgidRjtgd0CTGkB3zrNM010DlrM.cer (raw, json) Hash identifier: yAc5aVTdhjaGfHBZi9cevkP0JKRdh74u2DOFh4zf4Ps= Subject key identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 29 Apr 2025 20:07:58 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:3c20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53635 (0xd183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 29 20:07:58 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7E089D463B607740931A4077CEB34CD35D0396B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:91:cf:e9:bf:d3:2e:e4:9f:00:d8:bc:3f: d5:d3:33:0a:43:7c:53:d4:f4:fc:72:b8:ae:ac:3d: b7:ce:ff:94:1a:63:27:e0:c0:e7:8e:e5:b5:d3:e4: 41:b2:bd:22:5c:bc:ce:48:a2:b1:a4:96:09:33:c0: 34:05:52:b7:e7:19:0d:7c:d1:d1:4d:1a:86:2e:89: 13:4c:48:ee:12:08:5e:ea:d3:b5:3a:9a:88:eb:a5: d0:fa:db:ff:10:2d:ce:59:8e:de:27:31:85:0d:1b: a9:bc:53:3a:dc:be:fb:31:3e:21:fb:81:3a:47:36: 0a:87:62:6c:3e:34:7e:41:2c:ca:22:a0:69:a2:71: 86:da:69:dd:6e:1c:8a:4e:83:9d:a4:e4:11:67:03: d9:9c:54:d7:32:53:1e:fa:1e:9c:a6:dc:3a:8c:0c: 74:91:74:ce:68:4c:a6:8d:0c:3a:ce:c5:dc:55:ae: 3a:dc:c8:78:29:45:89:d4:21:4a:1a:cf:4f:2c:48: d2:18:87:3f:ad:c3:99:25:78:20:1f:c0:da:cf:38: 2a:8e:51:97:99:f4:3b:7e:55:d0:6e:09:d0:bf:dc: 2f:cc:d0:9f:7a:a8:d1:d2:bd:74:c7:3b:66:98:32: 1a:95:ce:d0:be:2f:37:80:6c:28:58:e6:85:3f:d9: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:08:9D:46:3B:60:77:40:93:1A:40:77:CE:B3:4C:D3:5D:03:96:B3 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3242/fgidRjtgd0CTGkB3zrNM010DlrM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3c20::/32 Signature Algorithm: sha256WithRSAEncryption a3:0a:4e:3b:07:cc:27:50:8a:d5:37:5f:8e:c1:2a:eb:d6:8f: 2d:58:ea:a2:36:51:03:ab:31:a3:9e:8f:95:ac:20:c3:e8:ce: 03:d7:e5:a7:43:7d:13:e2:0c:58:9a:b6:ba:8b:72:c7:ef:ed: 5a:e8:af:53:bd:e9:a1:01:be:67:28:d4:fb:b5:71:89:d1:e6: 9d:27:a8:b1:7f:25:20:9a:e3:7b:3d:88:7f:a7:91:fa:5f:cf: 08:dd:37:b3:27:89:d8:97:4b:72:e6:3b:a3:fa:0c:d9:01:4c: 32:ad:5e:d9:e7:d4:ea:b1:c0:3a:83:12:28:d3:e7:54:55:d7: 39:08:c8:11:0d:9f:20:d7:48:9c:41:2e:63:09:d2:56:7f:c9: f2:30:ed:ba:b4:02:0a:0b:24:84:6f:a9:d1:59:69:79:23:8b: f7:8c:61:fa:ea:04:41:b9:d8:ea:85:99:e5:86:cf:21:dd:84: 17:74:07:c6:84:be:1b:34:84:9b:34:89:13:76:d7:17:bb:2d: 62:5c:eb:16:75:91:cb:ef:d7:35:78:48:d8:67:dc:32:ce:48: cd:20:45:7b:82:d3:1d:db:69:a0:45:1c:e8:de:45:98:a6:27: 5c:48:19:13:fe:d9:6e:ad:bb:af:78:5f:3e:44:fd:93:dc:7f: 6a:cc:cd:62 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANGDMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MjkyMDA3NThaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDdFMDg5RDQ2M0I2MDc3NDA5MzFBNDA3N0NFQjM0Q0QzNUQwMzk2 QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlpHP6b/TLuSfANi8 P9XTMwpDfFPU9PxyuK6sPbfO/5QaYyfgwOeO5bXT5EGyvSJcvM5IorGklgkzwDQF UrfnGQ180dFNGoYuiRNMSO4SCF7q07U6mojrpdD62/8QLc5Zjt4nMYUNG6m8Uzrc vvsxPiH7gTpHNgqHYmw+NH5BLMoioGmicYbaad1uHIpOg52k5BFnA9mcVNcyUx76 Hpym3DqMDHSRdM5oTKaNDDrOxdxVrjrcyHgpRYnUIUoaz08sSNIYhz+tw5kleCAf wNrPOCqOUZeZ9Dt+VdBuCdC/3C/M0J96qNHSvXTHO2aYMhqVztC+LzeAbChY5oU/ 2Ry9AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUfgidRjtgd0CTGkB3zrNM010DlrMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Mi9mZ2lkUmp0Z2QwQ1RHa0IzenJOTTAxMERsck0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAE8IDANBgkqhkiG9w0BAQsF AAOCAQEAowpOOwfMJ1CK1TdfjsEq69aPLVjqojZRA6sxo56Plawgw+jOA9flp0N9 E+IMWJq2uotyx+/tWuivU73poQG+ZyjU+7VxidHmnSeosX8lIJrjez2If6eR+l/P CN03syeJ2JdLcuY7o/oM2QFMMq1e2efU6rHAOoMSKNPnVFXXOQjIEQ2fINdInEEu YwnSVn/J8jDturQCCgskhG+p0VlpeSOL94xh+uoEQbnY6oWZ5YbPId2EF3QHxoS+ GzSEmzSJE3bXF7stYlzrFnWRy+/XNXhI2GfcMs5IzSBFe4LTHdtpoEUc6N5FmKYn XEgZE/7Zbq27r3hfPkT9k9x/aszNYg== -----END CERTIFICATE-----Generated at Sun May 18 16:40:45 2025 by rpki-client