$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer File: ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer (raw, json) Hash identifier: FNfXS4KQdSDySYApts+86YYDTLPif0sp8fKlYSqcWHQ= Subject key identifier: 7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CDF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:11:33 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 2401:9fa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52723 (0xcdf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:11:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:43:6c:b0:f1:d1:3f:73:f0:95:6e:5f:6e: 65:9a:47:b6:ee:04:58:d6:a4:76:56:ed:ed:a8:51: 49:d9:7b:64:5c:6a:3a:fc:3b:ae:d3:ab:9d:02:b4: 96:a5:6f:f6:33:58:d0:97:ca:09:d2:16:e9:22:2b: 75:d9:1f:45:f8:86:d9:60:a0:ec:d0:4d:8a:f3:e6: 07:96:09:2d:71:d8:27:c9:0f:63:fe:ec:a9:a7:71: 78:cd:eb:b0:16:5c:4f:21:f6:ad:48:85:a5:bf:fd: 8d:79:b3:36:cc:19:2d:25:18:5c:0a:29:37:c9:28: 85:7c:3c:4e:52:d2:53:5d:2f:ed:9f:f8:a8:c7:f2: b3:60:5f:5d:2a:3c:ce:dd:86:c8:ef:d7:c5:2c:9b: 12:ef:61:66:be:0c:d9:66:8e:e2:36:69:de:e3:c3: 6c:02:0f:a6:e8:7a:3a:bf:10:85:39:fe:13:1a:7a: 82:16:d5:7a:1c:a9:0f:d1:87:28:0c:49:80:ac:62: a8:43:38:e8:4e:7f:cc:c4:58:fe:8f:32:91:a7:39: 82:af:e1:e5:3a:62:01:e3:2c:d4:18:c5:38:eb:35: 55:2c:2f:99:80:72:d0:6a:2e:03:34:04:cd:a0:dc: 07:93:7a:61:d1:12:b0:5f:ee:af:be:5e:62:22:5a: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:9fa0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:f0:a5:dd:7b:7d:3c:d4:79:02:01:c3:e0:b8:5d:e4:76:17: 56:b5:a3:f9:55:49:e8:2d:86:eb:c9:77:15:3d:02:35:81:b7: 13:78:99:8e:02:8d:2b:02:82:7e:9c:64:39:b2:a5:75:50:ca: ff:32:d9:aa:64:1a:97:4c:0b:d2:e3:d5:42:32:f7:fb:38:a0: e3:01:fa:1a:91:61:d1:f4:d4:c5:78:64:78:55:6e:d2:fa:6a: af:ec:8a:12:5a:d5:5b:74:c4:c9:ad:17:ab:91:d2:7d:f0:fc: 4c:80:16:72:6c:4f:e8:18:75:b9:21:8a:a7:d8:7b:b4:ef:7b: 5a:fb:15:8c:72:0d:b8:69:38:fa:7f:ca:44:e9:e3:86:78:d7: 9d:bd:8b:35:2b:a3:c2:6c:c3:03:8d:cd:2e:b1:bf:f1:c8:a2: 1f:c6:7c:c2:a3:77:9b:70:b2:86:0e:3c:cf:74:5a:66:bb:ba: 2a:d5:cb:d6:8c:33:c3:7b:f1:ac:ec:36:78:b5:0b:40:2d:b9: 48:ae:5d:69:56:4f:0a:32:e8:ab:5d:2d:c3:08:8b:db:26:33: 06:4d:a9:02:ee:2d:46:31:fe:93:45:ec:d7:79:82:8f:74:3d: 0c:51:d3:0c:75:79:0d:3f:3e:cb:75:7f:52:86:c4:81:ca:4c: 49:29:38:8a -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAM3zMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODExMzNaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDdCMzZDQzMxMDY2MUJGQjk3RkYzMUVGRkQ0MjZCNDlBOUM4NDQ4 RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClw0NssPHRP3PwlW5f bmWaR7buBFjWpHZW7e2oUUnZe2Rcajr8O67Tq50CtJalb/YzWNCXygnSFukiK3XZ H0X4htlgoOzQTYrz5geWCS1x2CfJD2P+7KmncXjN67AWXE8h9q1IhaW//Y15szbM GS0lGFwKKTfJKIV8PE5S0lNdL+2f+KjH8rNgX10qPM7dhsjv18UsmxLvYWa+DNlm juI2ad7jw2wCD6boejq/EIU5/hMaeoIW1XocqQ/RhygMSYCsYqhDOOhOf8zEWP6P MpGnOYKv4eU6YgHjLNQYxTjrNVUsL5mActBqLgM0BM2g3AeTemHRErBf7q++XmIi WjdZAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUezbMMQZhv7l/8x7/1Ca0mpyESPIw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4My9lemJNTVFaaHY3bF84eDdfMUNhMG1weUVTUEkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGfoDANBgkqhkiG9w0BAQsF AAOCAQEADPCl3Xt9PNR5AgHD4Lhd5HYXVrWj+VVJ6C2G68l3FT0CNYG3E3iZjgKN KwKCfpxkObKldVDK/zLZqmQal0wL0uPVQjL3+zig4wH6GpFh0fTUxXhkeFVu0vpq r+yKElrVW3TEya0Xq5HSffD8TIAWcmxP6Bh1uSGKp9h7tO97WvsVjHINuGk4+n/K ROnjhnjXnb2LNSujwmzDA43NLrG/8ciiH8Z8wqN3m3Cyhg48z3RaZru6KtXL1owz w3vxrOw2eLULQC25SK5daVZPCjLoq10twwiL2yYzBk2pAu4tRjH+k0Xs13mCj3Q9 DFHTDHV5DT8+y3V/UobEgcpMSSk4ig== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:31 2025 by rpki-client on console.sobornost.net