$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer File: d3C3Obnvzri8H9oFYOR4VWHyvL8.cer (raw, json) Hash identifier: jMuQoaws3Qw3wyUqkNuv4ZYNe+/5wuX8hlSGru469xg= Subject key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:45 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 113.31.0.0 -- 113.31.95.255 IP: 113.31.128.0/20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 10:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48131 (0xbc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:53:45 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:b7:96:4d:e0:e4:ac:14:e8:69:38:44:fd: 74:f7:fc:5c:ff:a0:46:89:1e:c0:95:56:f4:3d:4c: 3f:67:d5:0c:8c:6b:60:ee:77:69:65:de:57:fe:02: ef:79:6c:09:18:4d:62:25:6b:49:10:78:6c:a3:86: b4:79:73:de:22:53:af:5f:61:df:ee:c9:42:08:01: 3f:7c:5f:57:7c:9f:06:22:55:76:62:67:d2:b6:42: 2e:94:a5:04:36:72:63:8b:86:c0:49:c2:b3:48:49: 48:f3:4c:f2:cc:f8:57:73:1a:c7:1a:5d:91:a1:4a: 2e:f4:29:4d:b5:47:eb:d6:d5:33:b3:29:a9:94:a7: 86:85:9a:fa:61:e1:7b:a6:bb:a7:3d:e7:d3:20:5a: 32:54:bb:a4:ec:76:5f:d0:c2:52:1e:30:f9:9d:de: 12:f6:dd:6d:be:c7:3e:00:e6:26:c3:66:16:24:36: e9:7c:64:9c:4d:22:c9:f5:a8:0e:ea:aa:e6:f0:3f: c8:41:ff:b3:a2:90:14:c4:dc:d8:b0:09:ba:8e:0a: 17:1c:b5:fe:8d:b6:8f:05:d3:17:ab:9e:b1:19:b7: d8:96:28:c1:62:f7:ed:cf:a7:2b:25:fa:0c:67:7d: 11:7b:38:aa:a1:6b:bb:2e:02:43:a4:89:8b:fc:97: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.31.0.0-113.31.95.255 113.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 82:0c:53:34:70:49:20:86:5f:b2:c7:b3:a1:64:51:95:f7:7d: f5:d7:84:f5:0d:54:30:fc:2b:13:4a:34:fe:1c:ac:ce:48:b9: c1:e4:cd:64:69:df:2a:3b:f1:3b:ce:d3:07:4b:13:4f:20:b5: 4d:2b:bf:af:c4:cf:7b:e5:95:5b:35:35:e7:7d:cd:19:08:3c: 0d:d0:b8:bd:7b:f1:a1:f6:0c:21:df:99:56:de:fc:e0:c3:dd: 14:8c:74:e6:a5:94:67:4e:53:1e:ba:19:d3:26:c2:ea:ad:18: 57:eb:35:09:87:f1:62:ff:80:a7:f3:c7:80:d9:8e:b2:1f:91: c4:30:e0:66:37:59:8f:20:8a:e8:f1:25:95:47:fa:e7:c9:a9: a9:05:66:d7:18:01:04:79:e4:26:21:77:d9:28:4a:53:dd:79: 77:25:16:d8:32:73:95:6b:1a:80:b4:de:ea:a6:7d:4f:50:b8: 1a:97:f1:b0:4e:3d:a6:c7:1c:51:19:47:80:ea:55:df:3e:e7: 14:1f:b4:53:f2:66:2b:87:55:03:6c:53:7a:a4:ac:7d:59:37: 8a:27:af:9b:6f:3c:27:bb:90:1f:77:8a:c0:32:c0:d0:89:c3: ae:78:5e:a2:86:45:6f:47:54:fe:cf:e0:b3:ba:2b:8c:5a:09: 00:bb:03:c8 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIDALwDMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUzNDVaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDc3NzBCNzM5QjlFRkNFQjhCQzFGREEwNTYwRTQ3ODU1NjFGMkJD QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oLeWTeDkrBToaThE /XT3/Fz/oEaJHsCVVvQ9TD9n1QyMa2Dud2ll3lf+Au95bAkYTWIla0kQeGyjhrR5 c94iU69fYd/uyUIIAT98X1d8nwYiVXZiZ9K2Qi6UpQQ2cmOLhsBJwrNISUjzTPLM +FdzGscaXZGhSi70KU21R+vW1TOzKamUp4aFmvph4Xumu6c959MgWjJUu6Tsdl/Q wlIeMPmd3hL23W2+xz4A5ibDZhYkNul8ZJxNIsn1qA7qqubwP8hB/7OikBTE3Niw CbqOChcctf6Nto8F0xernrEZt9iWKMFi9+3Ppysl+gxnfRF7OKqha7suAkOkiYv8 lzZxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUd3C3Obnvzri8H9oFYOR4VWHyvL8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQx MC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC80MTAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAs BggrBgEFBQcBBwEB/wQdMBswGQQCAAEwEzALAwMAcR8DBAVxH0ADBARxH4AwDQYJ KoZIhvcNAQELBQADggEBAIIMUzRwSSCGX7LHs6FkUZX3ffXXhPUNVDD8KxNKNP4c rM5IucHkzWRp3yo78TvO0wdLE08gtU0rv6/Ez3vllVs1Ned9zRkIPA3QuL178aH2 DCHfmVbe/ODD3RSMdOallGdOUx66GdMmwuqtGFfrNQmH8WL/gKfzx4DZjrIfkcQw 4GY3WY8giujxJZVH+ufJqakFZtcYAQR55CYhd9koSlPdeXclFtgyc5VrGoC03uqm fU9QuBqX8bBOPabHHFEZR4DqVd8+5xQftFPyZiuHVQNsU3qkrH1ZN4onr5tvPCe7 kB93isAywNCJw654XqKGRW9HVP7P4LO6K4xaCQC7A8g= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:17 2024 by rpki-client on console-ams.rpki-client.org