$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer File: 2P0wEmBd2oDHj4k1lkjXtICZzc4.cer (raw, json) Hash identifier: L1JSTsUw9GYCjbNgsNmzUxMuxWkOBYMn2XqoOmngJ/g= Subject key identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3434 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 16 May 2024 01:32:18 +0000 Certificate not after: Fri 16 May 2025 01:25:41 +0000 Subordinate resources: IP: 160.20.18.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 01:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13364 (0x3434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: May 16 01:32:18 2024 GMT Not After : May 16 01:25:41 2025 GMT Subject: CN=D8FD3012605DDA80C78F89359648D7B48099CDCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:39:ab:c8:c3:d3:e4:47:bd:8b:c4:9d:59: ac:79:8a:07:a1:13:24:a9:ac:af:37:21:39:a9:6b: c1:88:8b:97:34:b6:6f:2c:c5:8f:34:38:f5:86:55: e2:a6:9b:19:77:86:6a:59:c7:ed:cf:c8:1a:be:cb: 36:fc:65:83:e1:da:73:0a:59:b6:5b:db:51:4c:6f: f5:bb:b2:09:cb:f0:bc:cc:11:9d:ab:d5:91:88:8a: 47:fe:5d:09:36:0d:ed:c3:bd:a0:f6:f4:a9:5c:4c: b5:2b:ae:90:5b:72:d8:a9:bf:2d:c6:3a:fe:c4:87: 6c:25:fb:f3:a4:08:7e:1f:41:c6:ae:a7:11:06:33: 90:f8:5d:71:64:11:6c:63:5f:8e:c0:a7:38:54:42: d3:75:b0:18:9d:1a:78:79:3b:67:18:ab:67:1a:c7: 3d:71:0a:17:c4:4a:e2:62:63:25:5c:4a:f5:86:75: 60:fd:22:03:47:b1:d8:ae:7c:86:b2:84:0a:78:72: 46:26:b2:ae:43:ed:b8:b5:2f:27:92:04:36:d1:e8: f5:54:62:93:c0:11:25:19:8d:8c:94:b3:2e:82:a9: a1:29:65:29:b4:17:24:c1:d9:21:64:1f:30:da:64: e7:cc:ee:4e:70:c6:77:ef:8e:00:94:b1:9c:6e:0d: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.20.18.0/23 Signature Algorithm: sha256WithRSAEncryption 02:68:e5:72:7f:7f:df:4c:dc:61:06:9f:8b:44:d2:0e:6e:85: 34:fb:f7:a3:3b:9d:24:f6:f7:0b:91:b3:23:44:07:b2:cd:66: 33:f2:74:03:e7:ec:e3:1f:37:f9:0c:6b:01:2f:81:2e:76:8b: d5:f0:27:0b:97:f5:44:7d:e6:08:70:b9:d3:61:17:45:ad:ff: 7a:64:b2:4d:50:4f:44:46:65:91:34:20:80:9f:8b:e5:c8:ac: 0b:19:4f:73:f7:96:de:e3:0e:77:0c:06:88:28:db:60:dc:ef: 7f:c1:db:ba:35:65:a3:d1:09:65:a0:48:31:f1:0f:9c:6e:58: 4a:75:4f:bd:08:54:25:11:2a:c0:e4:e2:41:ac:8e:ed:5c:5a: 6f:3e:bf:30:36:53:eb:10:75:2d:34:e2:d5:22:e1:0d:83:02: 37:c8:c0:71:46:89:bc:00:85:dd:07:3e:08:44:62:60:ea:b4: 95:00:5a:66:5a:70:a7:60:64:c9:bf:32:e0:3c:96:88:52:45: 9c:95:ef:36:b3:12:55:b7:6d:f1:34:a8:c4:e6:5c:7d:af:9f: b4:75:da:bf:ae:cb:90:88:a5:ee:d9:a3:ad:12:2d:9c:b6:fb: e5:48:ae:a8:ea:fa:4e:05:5b:3e:68:6c:b8:17:78:29:ff:f6: 27:a9:f0:d7 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICNDQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDUxNjAxMzIxOFoXDTI1MDUxNjAxMjU0MVowMzEx MC8GA1UEAxMoRDhGRDMwMTI2MDVEREE4MEM3OEY4OTM1OTY0OEQ3QjQ4MDk5Q0RD RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfzOavIw9PkR72LxJ1Z rHmKB6ETJKmsrzchOalrwYiLlzS2byzFjzQ49YZV4qabGXeGalnH7c/IGr7LNvxl g+HacwpZtlvbUUxv9buyCcvwvMwRnavVkYiKR/5dCTYN7cO9oPb0qVxMtSuukFty 2Km/LcY6/sSHbCX786QIfh9Bxq6nEQYzkPhdcWQRbGNfjsCnOFRC03WwGJ0aeHk7 ZxirZxrHPXEKF8RK4mJjJVxK9YZ1YP0iA0ex2K58hrKECnhyRiayrkPtuLUvJ5IE NtHo9VRik8ARJRmNjJSzLoKpoSllKbQXJMHZIWQfMNpk58zuTnDGd++OAJSxnG4N J80CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTY/TASYF3agMePiTWWSNe0gJnNzjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjg0LzJQMHdFbUJkMm9ESGo0azFsa2pYdElDWnpjNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgFBIwDQYJKoZIhvcNAQELBQAD ggEBAAJo5XJ/f99M3GEGn4tE0g5uhTT796M7nST29wuRsyNEB7LNZjPydAPn7OMf N/kMawEvgS52i9XwJwuX9UR95ghwudNhF0Wt/3pksk1QT0RGZZE0IICfi+XIrAsZ T3P3lt7jDncMBogo22Dc73/B27o1ZaPRCWWgSDHxD5xuWEp1T70IVCURKsDk4kGs ju1cWm8+vzA2U+sQdS004tUi4Q2DAjfIwHFGibwAhd0HPghEYmDqtJUAWmZacKdg ZMm/MuA8lohSRZyV7zazElW3bfE0qMTmXH2vn7R12r+uy5CIpe7Zo60SLZy2++VI rqjq+k4FWz5obLgXeCn/9iep8Nc= -----END CERTIFICATE-----Generated at Sun Jun 2 21:19:35 2024 by rpki-client on console-ams.rpki-client.org