$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-DfclmpQcbs64qfxU-0kRUEyris.cer File: -DfclmpQcbs64qfxU-0kRUEyris.cer (raw, json) Hash identifier: 6OFvA79ntSaiSBPm9dJbjS+0agE8HNVAOMDNa6KtuV0= Subject key identifier: F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BBDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:05 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2403:5280::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48091 (0xbbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:53:05 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F837DC966A5071BB3AE2A7F153ED24454132AE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:08:2d:92:8d:8a:6f:96:80:07:c9:ef:b6: 2d:10:33:35:f7:06:cf:53:bd:52:a7:fc:9d:f8:d2: 39:9a:1b:66:85:6d:68:13:2b:2b:4f:3b:10:38:21: 2d:57:11:e3:be:68:d9:c2:73:ce:ad:4f:f2:c9:72: f7:be:1f:0f:70:d1:c4:74:37:b8:57:47:ff:7f:c6: 2c:66:c5:46:31:f5:b1:75:31:69:60:ac:20:a4:0e: 0a:44:d8:7a:07:57:9a:34:35:4d:72:4b:02:20:fe: af:d6:ee:04:62:1f:38:89:03:dc:32:ee:64:31:5f: 2f:88:fc:24:3e:a8:40:b3:88:11:fa:1c:24:88:99: 06:22:a6:85:c4:ab:85:9e:0d:27:c9:2a:da:4f:1a: be:93:46:84:2c:d7:4c:b9:87:5a:3e:5e:68:53:fd: 99:ca:ad:cf:7a:9c:99:69:73:53:d8:61:6d:1d:7b: b4:5c:74:da:33:48:c0:83:ca:9b:cf:fe:dc:96:8e: 33:57:50:2b:ff:d1:b5:ab:0a:d0:12:35:94:bb:d5: 9b:f6:09:9a:8f:e5:5e:f0:e7:a6:ea:70:6f:3d:59: 08:4c:34:9b:d5:52:46:90:b6:1e:a6:f8:01:9e:15: b0:17:a7:7f:eb:22:4e:52:7f:ad:1c:15:74:5b:9c: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:37:DC:96:6A:50:71:BB:3A:E2:A7:F1:53:ED:24:45:41:32:AE:2B X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/-DfclmpQcbs64qfxU-0kRUEyris.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:5280::/32 Signature Algorithm: sha256WithRSAEncryption b5:7e:17:18:6c:27:03:db:e2:15:64:00:2d:96:de:a7:c1:52: 7e:43:3c:c1:90:34:54:3d:cc:ed:2c:7b:46:f2:3a:ab:43:1c: 14:ea:cd:ab:49:66:de:98:1d:c4:0f:20:21:36:6a:77:0f:05: 07:a6:78:30:a9:10:b3:d5:38:4e:46:60:63:ee:53:0a:1c:20: 32:48:ab:a9:01:b4:31:15:da:65:9d:c7:bb:20:f5:9e:40:ea: 68:73:9b:14:23:62:89:3f:90:0c:54:01:94:64:f2:0a:57:85: 51:b6:00:ba:ac:7e:84:b1:b8:80:c4:8e:df:a0:12:f8:8e:53: a1:33:55:92:68:d7:3d:05:85:8f:ff:da:43:b2:94:48:84:ac: 19:32:31:3c:a0:61:fd:6c:d4:3c:49:e9:d7:32:a3:d0:ce:e2: be:46:06:ae:b7:ac:e3:c2:97:4d:52:c7:43:b0:e6:66:01:b8: 46:ac:f9:91:8e:77:34:26:c9:22:a6:d3:9a:91:53:20:aa:45: 64:04:c1:8f:ab:8c:69:7c:95:f9:a3:52:70:0f:72:bb:dd:c9: 35:30:31:2f:12:7c:b5:f7:b4:33:8b:a6:6d:cc:c7:a6:9a:3c: 92:c8:82:78:9f:9c:66:90:f1:c7:42:52:69:e7:b9:ac:d8:f3: 35:3a:3e:9a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIDALvbMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUzMDVaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEY4MzdEQzk2NkE1MDcxQkIzQUUyQTdGMTUzRUQyNDQ1NDEzMkFF MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIAgtko2Kb5aAB8nv ti0QMzX3Bs9TvVKn/J340jmaG2aFbWgTKytPOxA4IS1XEeO+aNnCc86tT/LJcve+ Hw9w0cR0N7hXR/9/xixmxUYx9bF1MWlgrCCkDgpE2HoHV5o0NU1ySwIg/q/W7gRi HziJA9wy7mQxXy+I/CQ+qECziBH6HCSImQYipoXEq4WeDSfJKtpPGr6TRoQs10y5 h1o+XmhT/ZnKrc96nJlpc1PYYW0de7RcdNozSMCDypvP/tyWjjNXUCv/0bWrCtAS NZS71Zv2CZqP5V7w56bqcG89WQhMNJvVUkaQth6m+AGeFbAXp3/rIk5Sf60cFXRb nLwnAgMBAAGjggJUMIICUDAdBgNVHQ4EFgQU+DfclmpQcbs64qfxU+0kRUEyrisw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0 My8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC82NDMvLURmY2xtcFFjYnM2NHFmeFUtMGtSVUV5cmlzLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAg BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQDUoAwDQYJKoZIhvcNAQELBQAD ggEBALV+FxhsJwPb4hVkAC2W3qfBUn5DPMGQNFQ9zO0se0byOqtDHBTqzatJZt6Y HcQPICE2ancPBQemeDCpELPVOE5GYGPuUwocIDJIq6kBtDEV2mWdx7sg9Z5A6mhz mxQjYok/kAxUAZRk8gpXhVG2ALqsfoSxuIDEjt+gEviOU6EzVZJo1z0FhY//2kOy lEiErBkyMTygYf1s1DxJ6dcyo9DO4r5GBq63rOPCl01Sx0Ow5mYBuEas+ZGOdzQm ySKm05qRUyCqRWQEwY+rjGl8lfmjUnAPcrvdyTUwMS8SfLX3tDOLpm3Mx6aaPJLI gnifnGaQ8cdCUmnnuazY8zU6Ppo= -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:19 2024 by rpki-client on console-ams.rpki-client.org