$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer File: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer (raw, json) Hash identifier: 8DTNFvU+CKkr0AQYsVne8bz5TNpqjjY5ae6AQkHv2GE= Subject key identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3CC1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:13:00 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 160.250.18.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15553 (0x3cc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 3 08:13:00 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:9e:d0:a5:e8:89:a4:75:9a:77:bd:ae:17: 74:28:46:ff:5c:2c:70:c3:7c:49:7e:79:99:7d:59: 0f:27:4c:26:43:73:72:80:db:52:88:51:35:4f:2a: 27:a3:d4:57:f2:b2:b5:2b:3a:bd:ad:56:0d:12:f9: 25:3f:37:16:8a:ff:28:b3:a8:3c:64:82:7e:7b:f8: 0c:b7:0c:39:fb:e8:5f:19:49:89:9d:b5:f7:30:a3: c3:71:3d:73:5b:30:fd:86:ec:ae:e3:06:85:87:91: 46:a1:11:65:75:26:4e:21:19:48:47:40:69:2a:32: 43:76:0b:60:75:7b:c5:9a:9e:38:bd:bc:eb:c2:8d: 40:b7:64:1d:c0:d6:a8:10:76:e8:ef:3b:1f:d7:6f: 64:d3:f6:67:61:bc:d9:7c:c7:7e:07:80:ad:db:f6: 16:4f:48:a5:25:6b:e2:7e:d7:8f:e3:88:aa:61:d6: ef:e2:18:d2:2f:72:0b:aa:eb:23:7f:07:c8:81:19: f0:44:1f:5a:3d:53:27:ba:eb:0a:03:69:b7:c7:5b: 18:cd:67:0b:9d:3e:72:e5:65:d4:ec:0b:70:1d:e2: ef:2f:44:36:59:cb:b7:e0:59:2c:eb:d6:5c:34:c3: d6:42:d9:c4:40:78:0d:db:aa:b1:98:b0:87:42:b5: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.18.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:3c:fc:cb:47:0d:1e:cc:bf:8a:da:8e:62:3f:3d:15:dd:2e: e2:9a:51:76:13:79:9c:8d:cc:a9:b4:87:0e:17:d5:bd:44:e9: 8c:5d:3f:a2:4d:47:6e:6d:cc:d2:17:1e:06:57:6f:30:22:c5: 99:10:45:3c:97:6c:50:7b:ad:4d:86:39:46:64:67:11:c3:6e: 37:fc:7c:c9:a7:6f:1c:ca:18:9a:c7:26:3b:19:9e:a6:ca:4d: f1:ad:f7:21:78:aa:95:bb:be:9b:ce:39:01:cf:15:84:7d:ef: 27:47:6e:21:81:34:5a:40:6c:67:9f:91:ee:a8:59:94:b2:5a: 56:91:41:f6:42:fd:b1:1b:6d:aa:0c:a8:cb:0e:db:69:f9:77: d1:b5:db:18:ee:a0:39:dc:7b:37:99:f3:e6:e4:89:cc:d7:71: 35:50:6f:d3:ed:86:9e:0e:f9:8a:e7:14:1a:a1:b0:2f:9a:00: 3e:f1:57:93:75:cd:3a:9c:1c:80:da:cf:3a:0c:98:23:d7:1f: b9:54:28:b8:c2:a7:fd:77:8a:12:8f:d2:f0:39:21:d1:1f:1c: 61:a2:25:40:61:e7:ea:50:4c:89:0e:53:64:2d:90:9b:17:92: 38:4f:51:21:2a:1f:db:45:a2:54:4b:dc:cd:03:fe:3e:61:f1: 07:72:73:94 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICPMEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MTMwMFoXDTI2MDQwMzA4MDAwOVowMzEx MC8GA1UEAxMoQ0UwNDc4RkFCRTkxOTZCNTREMEJEMUFBODRDQjM5MDczRDZDRjlG OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAODsntCl6ImkdZp3va4X dChG/1wscMN8SX55mX1ZDydMJkNzcoDbUohRNU8qJ6PUV/KytSs6va1WDRL5JT83 For/KLOoPGSCfnv4DLcMOfvoXxlJiZ219zCjw3E9c1sw/YbsruMGhYeRRqERZXUm TiEZSEdAaSoyQ3YLYHV7xZqeOL2868KNQLdkHcDWqBB26O87H9dvZNP2Z2G82XzH fgeArdv2Fk9IpSVr4n7Xj+OIqmHW7+IY0i9yC6rrI38HyIEZ8EQfWj1TJ7rrCgNp t8dbGM1nC50+cuVl1OwLcB3i7y9ENlnLt+BZLOvWXDTD1kLZxEB4DduqsZiwh0K1 U98CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTOBHj6vpGWtU0L0aqEyzkHPWz5+TAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzI5L3pnUjQtcjZSbHJWTkM5R3FoTXM1Qnoxcy1may5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+hIwDQYJKoZIhvcNAQELBQAD ggEBAGo8/MtHDR7Mv4rajmI/PRXdLuKaUXYTeZyNzKm0hw4X1b1E6YxdP6JNR25t zNIXHgZXbzAixZkQRTyXbFB7rU2GOUZkZxHDbjf8fMmnbxzKGJrHJjsZnqbKTfGt 9yF4qpW7vpvOOQHPFYR97ydHbiGBNFpAbGefke6oWZSyWlaRQfZC/bEbbaoMqMsO 22n5d9G12xjuoDncezeZ8+bkiczXcTVQb9Pthp4O+YrnFBqhsC+aAD7xV5N1zTqc HIDazzoMmCPXH7lUKLjCp/13ihKP0vA5IdEfHGGiJUBh5+pQTIkOU2QtkJsXkjhP USEqH9tFolRL3M0D/j5h8Qdyc5Q= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:32 2025 by rpki-client on console.sobornost.net