$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer File: kOpMYj8LihBi2qgOqaj0R49Z3oU.cer (raw, json) Hash identifier: 2b6XEco5rc0O40IFxXe4QY2pFe6X13jaWTrzxN3HMu8= Subject key identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D06A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 23 Apr 2025 19:38:52 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 151225 IP: 113.31.136.0/21 IP: 2401:90a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53354 (0xd06a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 23 19:38:52 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:00:5c:6a:e8:b9:e6:7d:20:e0:a9:d6:e2: a3:17:09:2e:d2:25:3d:52:2f:8f:1d:f4:27:b7:cd: 35:a1:47:6b:c5:c5:68:3a:81:59:a3:5d:d1:f6:3d: 40:15:59:f4:c0:b0:61:d0:bb:cf:87:bf:89:e1:3d: 01:78:e2:b4:36:81:f1:b4:22:28:f7:da:c0:5f:dd: f7:8b:ca:d6:c8:85:2b:2d:fc:2e:29:12:f5:66:c2: 46:29:15:fa:83:88:25:48:e0:f4:de:bf:da:6b:29: cb:67:3b:c9:5b:01:ae:8e:58:8d:aa:5c:ac:c1:e8: cb:e9:bd:39:7c:7c:a0:72:39:e3:bb:b1:23:1b:ea: 1f:b6:d5:4c:e9:6a:de:eb:23:9c:0d:05:da:f7:64: 1f:6f:bb:85:76:15:14:23:f1:a9:e3:1d:0a:ca:c5: 9a:35:56:fb:7d:65:f5:93:6d:c6:61:0f:ac:af:95: 3f:9c:06:9c:76:63:7d:43:59:53:31:6d:32:ce:8e: fc:1f:8f:22:91:ee:7b:7f:40:d2:86:dd:1f:9e:77: 72:57:07:c1:ab:ca:28:7a:bc:4f:f1:d8:ad:a6:4e: 02:c7:8e:50:59:e0:ef:bc:54:ac:ab:0e:bd:72:26: 4b:91:a7:07:df:ae:74:f5:45:d4:d3:8f:29:b7:36: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151225 sbgp-ipAddrBlock: critical IPv4: 113.31.136.0/21 IPv6: 2401:90a0::/32 Signature Algorithm: sha256WithRSAEncryption a4:60:94:3d:e0:2a:4b:ea:23:47:90:be:f9:f2:61:43:19:f3: 02:9f:e6:3b:18:9c:fc:ed:22:1d:59:76:96:0e:a2:8b:e3:07: ef:8f:55:83:33:50:4a:7c:73:1e:7a:be:38:4b:00:0d:31:d9: 33:86:c5:fa:17:b0:4f:2e:f9:1c:12:8f:82:5b:65:10:da:ff: 3b:10:d6:0c:ed:a0:2e:b5:6e:6c:40:f1:f1:63:35:5a:8a:a2: ec:01:09:20:a5:b7:53:7e:67:28:f3:d4:cc:72:d7:00:20:c5: 1a:2f:db:8e:34:c2:d0:62:e2:2b:c7:41:a5:60:46:4c:42:01: 5d:2e:44:87:51:a6:35:d3:a7:6f:15:f8:f5:e1:ed:96:a0:6d: 42:19:13:d4:2c:78:26:fa:37:f2:09:90:cc:74:db:f4:26:9c: ff:13:22:1e:93:5c:02:ef:2a:89:ac:c8:2b:ee:61:22:5a:e4: 9d:9d:48:35:bf:2a:c8:82:8b:de:62:08:8a:4e:da:32:a6:db: 78:3d:60:b7:13:62:cc:b6:72:ad:3a:f6:62:dc:a5:e1:f0:fd: cd:ef:9d:db:07:1c:65:52:c4:12:6c:25:99:83:9f:c6:cf:b2: 3b:75:e2:05:4b:7c:ec:05:d9:b0:ad:d1:9a:f2:9b:1d:0c:15: f5:9c:e5:de -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDANBqMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MjMxOTM4NTJaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDkwRUE0QzYyM0YwQjhBMTA2MkRBQTgwRUE5QThGNDQ3OEY1OURF ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtgBcaui55n0g4KnW 4qMXCS7SJT1SL48d9Ce3zTWhR2vFxWg6gVmjXdH2PUAVWfTAsGHQu8+Hv4nhPQF4 4rQ2gfG0Iij32sBf3feLytbIhSst/C4pEvVmwkYpFfqDiCVI4PTev9prKctnO8lb Aa6OWI2qXKzB6MvpvTl8fKByOeO7sSMb6h+21Uzpat7rI5wNBdr3ZB9vu4V2FRQj 8anjHQrKxZo1Vvt9ZfWTbcZhD6yvlT+cBpx2Y31DWVMxbTLOjvwfjyKR7nt/QNKG 3R+ed3JXB8Gryih6vE/x2K2mTgLHjlBZ4O+8VKyrDr1yJkuRpwffrnT1RdTTjym3 NqdDAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUkOpMYj8LihBi2qgOqaj0R49Z3oUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NS9rT3BNWWo4TGloQmkycWdPcWFqMFI0OVozb1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOuTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEA3EfiDANBAIAAjAHAwUAJAGQoDANBgkqhkiG9w0BAQsFAAOCAQEA pGCUPeAqS+ojR5C++fJhQxnzAp/mOxic/O0iHVl2lg6ii+MH749VgzNQSnxzHnq+ OEsADTHZM4bF+hewTy75HBKPgltlENr/OxDWDO2gLrVubEDx8WM1Woqi7AEJIKW3 U35nKPPUzHLXACDFGi/bjjTC0GLiK8dBpWBGTEIBXS5Eh1GmNdOnbxX49eHtlqBt QhkT1Cx4Jvo38gmQzHTb9Cac/xMiHpNcAu8qiazIK+5hIlrknZ1INb8qyIKL3mII ik7aMqbbeD1gtxNizLZyrTr2Ytyl4fD9ze+d2wccZVLEEmwlmYOfxs+yO3XiBUt8 7AXZsK3RmvKbHQwV9Zzl3g== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:31 2025 by rpki-client on console.sobornost.net