$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.cer File: vpb1PBFCO2qE1Qs_q5_XF_uXeTI.cer (raw, json) Hash identifier: M3jH4Kmmd7Wp6Rs3sdr+8SUQb985PmWnGV7D9uOtlEI= Subject key identifier: BE:96:F5:3C:11:42:3B:6A:84:D5:0B:3F:AB:9F:D7:17:FB:97:79:32 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AE2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:19:43 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 151302 IP: 103.218.178.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 16:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44591 (0xae2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:19:43 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BE96F53C11423B6A84D50B3FAB9FD717FB977932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:05:64:9b:f2:a6:7a:79:34:70:2e:8e:a8: 4a:36:19:fa:83:31:ac:8f:4c:9a:bb:8d:28:e5:28: 00:02:ad:1e:6b:88:42:82:a6:7e:fa:93:ef:47:65: e7:b9:60:bc:04:1d:24:dc:d6:b2:19:32:17:51:9c: 88:50:fd:a5:78:13:b8:7c:15:db:cf:01:83:97:29: 60:ce:40:fb:43:62:54:71:eb:e6:bc:bb:dc:66:e8: 7f:e6:91:c7:60:18:30:22:79:a1:37:b5:50:36:0f: a1:28:a1:71:a7:47:19:6c:94:97:34:6f:cb:cb:e3: 7b:2c:b8:d9:73:33:b6:e3:c8:50:ca:6d:f9:d8:a1: 9d:85:a0:2e:e0:cb:bf:ff:60:ec:30:cf:ea:f3:47: 77:ae:13:8f:21:ca:63:a2:4e:c9:fd:7e:30:99:a6: 9d:a2:eb:5c:0e:03:b4:b9:60:b1:70:73:8a:0e:ea: 54:37:fc:dd:db:c4:b2:b4:cf:6d:d1:bc:d6:c8:d4: 43:21:b2:0b:41:67:a6:7e:66:38:0d:a5:79:da:d5: 5a:6a:25:a8:fd:59:e4:e1:81:8a:b0:b2:1d:2e:d9: 12:24:03:49:69:55:bf:5e:d8:fc:34:1b:74:a0:54: b9:70:5a:2f:fa:6b:d5:be:8f:36:44:0b:02:6a:e6: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:96:F5:3C:11:42:3B:6A:84:D5:0B:3F:AB:9F:D7:17:FB:97:79:32 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151302 sbgp-ipAddrBlock: critical IPv4: 103.218.178.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:9d:e5:b3:eb:5e:7e:2c:22:58:b9:6d:db:d6:06:24:45:a6: 29:64:b1:25:11:52:33:33:f7:9d:1a:00:60:74:d1:0c:5f:2a: cf:d7:f1:7a:9d:9d:cd:aa:b1:4d:81:fe:c2:ff:29:4f:8b:72: fa:b2:31:29:5e:6c:c3:e7:44:91:09:f1:3b:6d:80:08:fd:b1: 38:2e:3c:c0:38:36:b8:05:aa:35:ed:86:37:cc:ee:02:7c:97: 67:31:c0:75:a3:76:fc:43:e8:65:39:37:5b:22:80:0c:20:35: 1d:ac:9b:11:e8:39:fc:56:e3:a4:64:ae:7c:87:d2:20:0e:92: 38:11:cd:fe:a7:12:21:69:db:45:fb:76:c7:7f:79:3d:47:e0: 7c:23:47:ab:ea:21:66:af:07:55:4b:1b:13:0e:0f:6b:0b:e9: 7a:fc:81:c9:54:51:e3:d3:f6:ec:9b:8a:84:3e:1c:57:39:f0: f1:ea:97:15:97:7f:9a:a5:8c:18:0f:e2:54:a5:51:00:6a:d6: b7:dd:f1:25:fa:7e:a2:c9:86:c3:e5:a4:3a:64:13:da:00:4c: 5f:55:91:85:8a:49:6a:ec:74:e8:9e:19:40:05:8e:f5:ad:5e: 0c:b7:c9:bb:14:e5:e8:74:5d:12:07:43:ae:fb:1e:ca:9e:0a: 43:84:03:e6 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAK4vMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTE5NDNaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKEJFOTZGNTNDMTE0MjNCNkE4NEQ1MEIzRkFCOUZENzE3RkI5Nzc5 MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3QVkm/Kmenk0cC6O qEo2GfqDMayPTJq7jSjlKAACrR5riEKCpn76k+9HZee5YLwEHSTc1rIZMhdRnIhQ /aV4E7h8FdvPAYOXKWDOQPtDYlRx6+a8u9xm6H/mkcdgGDAieaE3tVA2D6EooXGn RxlslJc0b8vL43ssuNlzM7bjyFDKbfnYoZ2FoC7gy7//YOwwz+rzR3euE48hymOi Tsn9fjCZpp2i61wOA7S5YLFwc4oO6lQ3/N3bxLK0z23RvNbI1EMhsgtBZ6Z+ZjgN pXna1VpqJaj9WeThgYqwsh0u2RIkA0lpVb9e2Pw0G3SgVLlwWi/6a9W+jzZECwJq 5q45AgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUvpb1PBFCO2qE1Qs/q5/XF/uXeTIw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0MS92cGIxUEJGQ08ycUUxUXNfcTVfWEZfdVhlVEkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJPBjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfasjANBgkqhkiG9w0BAQsFAAOCAQEAip3ls+tefiwiWLlt29YG JEWmKWSxJRFSMzP3nRoAYHTRDF8qz9fxep2dzaqxTYH+wv8pT4ty+rIxKV5sw+dE kQnxO22ACP2xOC48wDg2uAWqNe2GN8zuAnyXZzHAdaN2/EPoZTk3WyKADCA1Hayb Eeg5/FbjpGSufIfSIA6SOBHN/qcSIWnbRft2x395PUfgfCNHq+ohZq8HVUsbEw4P awvpevyByVRR49P27JuKhD4cVznw8eqXFZd/mqWMGA/iVKVRAGrWt93xJfp+osmG w+WkOmQT2gBMX1WRhYpJaux06J4ZQAWO9a1eDLfJuxTl6HRdEgdDrvseyp4KQ4QD 5g== -----END CERTIFICATE-----Generated at Sat Jun 1 13:43:25 2024 by rpki-client on console-fra.rpki-client.org