$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer File: R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer (raw, json) Hash identifier: b2lpGzwyjoAg2MZ5wif2OTtPRN+cSCM0x7d1FqAXarg= Subject key identifier: 47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: B2BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 16 May 2024 01:22:54 +0000 Certificate not after: Fri 16 May 2025 01:11:55 +0000 Subordinate resources: IP: 2401:9fa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 16:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45757 (0xb2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: May 16 01:22:54 2024 GMT Not After : May 16 01:11:55 2025 GMT Subject: CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:63:ae:f2:aa:8b:06:62:ca:26:86:64:ef: 77:d0:ae:f6:2e:b9:cd:9c:41:8b:25:d1:c8:81:af: 5d:66:e2:28:23:60:8e:52:03:87:98:b3:9f:98:71: 3f:11:3c:10:fe:31:00:5b:b9:f5:47:b0:10:02:0e: 29:69:03:73:5b:c3:de:20:bb:3f:6f:b7:be:70:52: 82:41:0c:a9:9e:89:cc:14:bf:0e:1f:69:5a:80:d3: 16:b1:2b:e2:81:55:83:34:62:9a:8a:09:b9:0b:ae: 5c:b1:9a:38:00:62:17:c7:5a:55:73:35:e7:20:f8: 1e:ce:c1:c3:5e:03:72:eb:82:c1:7a:b6:f8:6b:70: 15:ed:13:56:ae:7b:a4:1b:f0:e9:78:42:37:60:d1: ec:cb:35:76:d9:57:c7:6d:22:cc:64:10:0e:28:9b: c3:14:f8:3e:db:08:26:08:66:7d:83:43:b3:0c:a8: 21:c2:fc:02:d5:3e:bb:fb:31:32:b2:35:88:a0:f2: 0a:3e:6a:1f:65:54:7e:5d:9a:ef:ec:11:28:bc:85: 25:f3:b5:53:88:ec:5a:f8:90:0a:b9:a9:30:d9:48: da:9c:ca:e8:27:f0:9f:f4:67:2d:55:2c:f8:4b:61: 81:8b:ce:b9:30:a4:87:1d:1f:7d:70:72:44:31:06: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:9fa0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:0e:c8:71:18:1f:44:be:19:59:6e:69:c8:3b:1c:d3:13:02: 7b:b8:0d:a7:27:19:b9:39:8f:05:4c:84:bd:8a:6a:6e:64:ea: c5:4d:e4:b6:2c:50:66:34:c4:96:76:f6:76:ae:c4:36:65:e1: e0:18:fe:52:65:12:99:61:e1:46:09:74:e2:05:54:5b:b0:3e: 72:e0:75:ae:7f:bb:b5:bb:ac:a1:8a:0a:f5:6d:fb:52:16:1e: 06:ac:1b:83:32:25:0b:a3:ea:b4:22:ff:4f:59:8f:0e:14:9a: bc:93:04:8b:4c:ff:e7:af:c3:0d:73:09:43:5f:fc:75:ee:18: 5b:33:11:b3:03:87:ec:0a:00:14:92:01:25:95:e7:56:0e:17: bb:ba:a8:17:ed:63:87:b3:ad:81:c3:c1:a5:13:84:29:be:dc: 73:e3:3b:f4:17:d4:4f:da:79:51:ab:69:04:19:28:64:7a:ea: 0a:dc:e9:e8:e3:6a:77:76:63:45:15:da:b5:92:fc:dd:50:33: ba:79:c3:07:dd:7b:7e:aa:1e:6c:d0:5e:97:d1:ff:0f:e3:99: fa:58:87:36:b2:db:bb:1c:5a:d1:0f:0b:f2:c6:03:99:54:04: 43:82:fe:42:ec:cf:a8:61:0e:2e:4c:50:73:24:ec:eb:70:8d: eb:a6:ae:2b -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALK9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA1MTYwMTIyNTRaFw0yNTA1MTYwMTExNTVaMDMx MTAvBgNVBAMTKDQ3RDlGQzU2MUFERTdENTZCQzc1Q0Q4N0YxOTVEQ0EwRTRBMEQw Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6GOu8qqLBmLKJoZk 73fQrvYuuc2cQYsl0ciBr11m4igjYI5SA4eYs5+YcT8RPBD+MQBbufVHsBACDilp A3Nbw94guz9vt75wUoJBDKmeicwUvw4faVqA0xaxK+KBVYM0YpqKCbkLrlyxmjgA YhfHWlVzNecg+B7OwcNeA3LrgsF6tvhrcBXtE1aue6Qb8Ol4Qjdg0ezLNXbZV8dt IsxkEA4om8MU+D7bCCYIZn2DQ7MMqCHC/ALVPrv7MTKyNYig8go+ah9lVH5dmu/s ESi8hSXztVOI7Fr4kAq5qTDZSNqcyugn8J/0Zy1VLPhLYYGLzrkwpIcdH31wckQx BtKLAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUR9n8VhrefVa8dc2H8ZXcoOSg0M8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4My9SOW44VmhyZWZWYThkYzJIOFpYY29PU2cwTTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGfoDANBgkqhkiG9w0BAQsF AAOCAQEAfQ7IcRgfRL4ZWW5pyDsc0xMCe7gNpycZuTmPBUyEvYpqbmTqxU3ktixQ ZjTElnb2dq7ENmXh4Bj+UmUSmWHhRgl04gVUW7A+cuB1rn+7tbusoYoK9W37UhYe BqwbgzIlC6PqtCL/T1mPDhSavJMEi0z/56/DDXMJQ1/8de4YWzMRswOH7AoAFJIB JZXnVg4Xu7qoF+1jh7OtgcPBpROEKb7cc+M79BfUT9p5UatpBBkoZHrqCtzp6ONq d3ZjRRXatZL83VAzunnDB917fqoebNBel9H/D+OZ+liHNrLbuxxa0Q8L8sYDmVQE Q4L+QuzPqGEOLkxQcyTs63CN66auKw== -----END CERTIFICATE-----Generated at Sat Jun 1 12:23:51 2024 by rpki-client on console-ams.rpki-client.org