$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer File: LTxBkfus18zT0-oZXlR0KTGatwI.cer (raw, json) Hash identifier: g5vG83+e3lhHq67Y/KUpPWppTYJ5WdThgMioYIX+t8s= Subject key identifier: 2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: B294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 10 May 2024 02:38:15 +0000 Certificate not after: Sat 10 May 2025 02:22:22 +0000 Subordinate resources: IP: 2401:9d20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Jun 2024 11:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45716 (0xb294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: May 10 02:38:15 2024 GMT Not After : May 10 02:22:22 2025 GMT Subject: CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:53:b3:25:67:77:db:ad:ad:f0:10:37:69: 66:4e:4a:2c:07:61:44:5c:85:e3:1e:d7:08:fc:8e: ce:18:f5:eb:03:ca:e4:75:de:bb:9f:34:85:26:89: 05:11:e0:99:c0:d1:03:73:d0:b2:00:17:bf:83:ec: 17:88:61:21:b0:7a:f7:97:c5:54:59:85:24:ca:0d: b6:1b:07:4d:2d:97:38:b7:db:6a:24:52:f3:bf:f8: db:df:a3:11:5f:01:d1:29:ab:4d:f2:f9:55:07:1b: f7:48:7f:18:47:a3:18:d4:a5:a4:b0:12:a1:17:58: b0:b7:bf:40:5d:47:7f:53:96:5b:e4:5f:2c:33:97: 28:24:3d:ca:b7:24:5a:e3:d0:fd:f2:69:0a:e3:59: a9:52:ec:82:3c:4e:20:fb:f4:b6:f4:1f:dd:92:5a: 9e:bb:75:0d:9b:64:2a:ec:32:3b:80:2c:7c:82:88: 25:6c:2b:49:59:a5:1c:cb:22:61:34:14:c1:a0:42: e8:22:52:46:f9:0e:2e:b3:28:69:12:d3:e1:ef:e8: d6:fc:05:d7:95:4d:d9:df:02:f5:a6:f9:16:6e:75: ee:74:59:72:df:3a:d3:70:e7:8f:89:e0:d8:43:52: 74:9b:6c:c5:d7:7f:08:68:fa:a5:11:b0:e5:cc:68: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:9d20::/32 Signature Algorithm: sha256WithRSAEncryption 1f:b2:32:08:20:dd:87:65:85:2a:0b:09:ca:d9:1a:6b:24:20: 8a:0f:d8:ec:09:2a:e2:98:c0:58:51:1e:96:10:35:dc:1f:83: 93:ef:15:25:2c:a2:26:82:0a:bc:7c:53:ac:aa:38:0f:82:8f: ef:5b:fb:1e:85:cb:2a:96:be:70:35:ce:81:b0:0c:d4:6e:04: 88:c8:46:e0:47:f8:d3:de:8e:18:65:46:f2:87:71:b9:81:0e: e5:9f:71:b9:de:34:2d:da:81:5f:ab:66:d8:35:a1:5e:b6:85: c1:a0:8f:ad:cc:bd:91:f3:08:35:d5:b6:d4:96:d1:3b:6c:2d: 40:ce:26:05:d6:2e:0d:b2:ab:6e:de:37:41:39:95:79:f0:ad: 5b:9c:b5:28:58:47:03:85:94:60:ef:23:dc:ca:c3:57:61:65: 08:dc:03:57:b9:e7:13:98:52:96:6a:3c:2a:f2:9f:b0:9c:c8: dd:d6:41:5b:d6:b5:d3:29:64:8a:6e:83:53:de:d6:7e:56:e0: 80:3a:bb:2d:d1:5a:89:b8:a4:07:9a:10:e3:5e:c3:c1:fb:6b: ed:69:a8:b4:bf:44:1a:2f:04:0a:3a:ac:b5:84:bd:c9:3a:28: dd:b3:18:9e:ca:8f:2c:90:26:d3:91:20:75:c4:d1:bf:35:79: 36:ed:d1:83 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALKUMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA1MTAwMjM4MTVaFw0yNTA1MTAwMjIyMjJaMDMx MTAvBgNVBAMTKDJEM0M0MTkxRkJBQ0Q3Q0NEM0QzRUExOTVFNTQ3NDI5MzE5QUI3 MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOlOzJWd3262t8BA3 aWZOSiwHYURcheMe1wj8js4Y9esDyuR13rufNIUmiQUR4JnA0QNz0LIAF7+D7BeI YSGweveXxVRZhSTKDbYbB00tlzi322okUvO/+NvfoxFfAdEpq03y+VUHG/dIfxhH oxjUpaSwEqEXWLC3v0BdR39TllvkXywzlygkPcq3JFrj0P3yaQrjWalS7II8TiD7 9Lb0H92SWp67dQ2bZCrsMjuALHyCiCVsK0lZpRzLImE0FMGgQugiUkb5Di6zKGkS 0+Hv6Nb8BdeVTdnfAvWm+RZude50WXLfOtNw54+J4NhDUnSbbMXXfwho+qURsOXM aLz/AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQULTxBkfus18zT0+oZXlR0KTGatwIw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4MC9MVHhCa2Z1czE4elQwLW9aWGxSMEtUR2F0d0kubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGdIDANBgkqhkiG9w0BAQsF AAOCAQEAH7IyCCDdh2WFKgsJytkaayQgig/Y7Akq4pjAWFEelhA13B+Dk+8VJSyi JoIKvHxTrKo4D4KP71v7HoXLKpa+cDXOgbAM1G4EiMhG4Ef4096OGGVG8odxuYEO 5Z9xud40LdqBX6tm2DWhXraFwaCPrcy9kfMINdW21JbRO2wtQM4mBdYuDbKrbt43 QTmVefCtW5y1KFhHA4WUYO8j3MrDV2FlCNwDV7nnE5hSlmo8KvKfsJzI3dZBW9a1 0ylkim6DU97WflbggDq7LdFaibikB5oQ417Dwftr7WmotL9EGi8ECjqstYS9yToo 3bMYnsqPLJAm05EgdcTRvzV5Nu3Rgw== -----END CERTIFICATE-----Generated at Sat Jun 15 06:51:38 2024 by rpki-client on console-fra.rpki-client.org