$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-owMyhaYvyIusPXJ1jDjlZgfj2Q.cer File: -owMyhaYvyIusPXJ1jDjlZgfj2Q.cer (raw, json) Hash identifier: MkPjSI0lYPJHDr0GutXZYkPfcgNIAE8fTCUcRRgffH0= Subject key identifier: FA:8C:0C:CA:16:98:BF:22:2E:B0:F5:C9:D6:30:E3:95:98:1F:8F:64 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 336C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 09 Apr 2024 10:00:20 +0000 Certificate not after: Tue 01 Apr 2025 07:51:53 +0000 Subordinate resources: IP: 157.66.92.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 17:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13164 (0x336c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Apr 9 10:00:20 2024 GMT Not After : Apr 1 07:51:53 2025 GMT Subject: CN=FA8C0CCA1698BF222EB0F5C9D630E395981F8F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:c5:42:3d:54:40:a8:d9:52:62:28:17:da: 4d:a5:89:b4:4e:6d:1d:a4:c7:c9:86:11:da:62:cb: 69:50:d1:ac:08:24:80:e8:81:cb:6a:bc:f7:51:1a: fe:0a:40:40:c2:a7:78:53:4a:f5:4e:84:7e:cd:82: e0:e3:70:7c:65:4d:02:73:32:54:af:e2:f9:ea:50: 78:d2:31:d3:f2:36:73:d9:09:f4:93:55:a3:86:f4: c3:51:d3:b5:c8:77:94:84:6a:02:13:8d:11:30:89: c2:0b:25:e7:c0:ac:68:3e:f0:d4:59:52:14:50:fc: 94:b6:2f:13:67:da:74:c0:43:27:7d:cd:ae:e4:6f: bc:96:ff:96:f8:15:2e:98:de:9f:3e:eb:3f:de:fa: da:98:a4:4c:a8:77:c9:72:c0:3f:b7:ad:f1:d7:f2: ae:d5:45:69:00:9b:d7:d4:ce:f6:a6:8c:8d:02:5e: 36:8a:fb:c0:41:92:55:a3:43:86:c4:f5:4c:f0:02: 8b:87:40:17:0d:4b:90:12:a8:5b:f9:66:e7:36:95: 09:28:d2:e8:c7:89:01:a6:ea:11:d3:0e:db:04:4c: 10:1c:38:66:bc:ad:d7:32:68:54:53:28:a1:3a:20: 4d:92:ba:cf:61:e8:5e:9c:23:1f:c7:db:85:9b:e2: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:0C:CA:16:98:BF:22:2E:B0:F5:C9:D6:30:E3:95:98:1F:8F:64 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.92.0/23 Signature Algorithm: sha256WithRSAEncryption 26:72:00:eb:19:d9:0f:78:62:6e:3f:9e:d1:ce:77:73:0b:de: f1:2f:00:0d:ff:95:9e:07:d0:85:1c:4c:9f:28:9d:b7:ed:2a: ed:74:26:99:fb:08:e2:60:a9:35:72:9c:ec:75:77:1e:f8:ba: 8a:7b:7b:47:fd:43:4b:77:d0:11:03:14:eb:fa:8a:54:e9:22: 4a:89:c0:13:88:43:9f:b3:20:d4:95:24:86:86:47:f9:8d:ec: af:02:24:d2:7e:40:fd:b3:4a:92:74:aa:1d:5d:95:12:cb:6e: 20:ef:51:e8:ad:4c:85:39:06:d1:eb:e1:6b:84:98:45:30:f5: bc:59:c2:d8:7f:2f:0a:67:6d:95:c8:f2:f0:5c:83:75:cb:27: e8:39:21:87:00:fe:d0:31:14:3d:9e:8c:90:fa:82:b2:60:99: 04:53:39:a6:75:fb:51:09:71:6e:1a:f0:01:66:6c:d8:33:7b: 33:02:7c:17:be:72:53:4f:b9:c2:c5:7d:40:74:cc:a2:26:7f: f2:10:0d:e6:26:b8:f1:26:86:ce:35:ad:01:7d:d4:a3:d2:10: ff:6b:dc:5d:c5:65:c7:eb:09:65:6e:09:a2:68:2f:32:04:53: 3a:be:3b:d9:ec:48:bc:32:bb:5d:6f:55:f6:18:e4:e8:b6:f6: 5c:9c:85:dc -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICM2wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDQwOTEwMDAyMFoXDTI1MDQwMTA3NTE1M1owMzEx MC8GA1UEAxMoRkE4QzBDQ0ExNjk4QkYyMjJFQjBGNUM5RDYzMEUzOTU5ODFGOEY2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOHQxUI9VECo2VJiKBfa TaWJtE5tHaTHyYYR2mLLaVDRrAgkgOiBy2q891Ea/gpAQMKneFNK9U6Efs2C4ONw fGVNAnMyVK/i+epQeNIx0/I2c9kJ9JNVo4b0w1HTtch3lIRqAhONETCJwgsl58Cs aD7w1FlSFFD8lLYvE2fadMBDJ33NruRvvJb/lvgVLpjenz7rP9762pikTKh3yXLA P7et8dfyrtVFaQCb19TO9qaMjQJeNor7wEGSVaNDhsT1TPACi4dAFw1LkBKoW/lm 5zaVCSjS6MeJAabqEdMO2wRMEBw4Zryt1zJoVFMooTogTZK6z2HoXpwjH8fbhZvi l4UCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBT6jAzKFpi/Ii6w9cnWMOOVmB+PZDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjczLy1vd015aGFZdnlJdXNQWEoxakRqbFpnZmoyUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQlwwDQYJKoZIhvcNAQELBQAD ggEBACZyAOsZ2Q94Ym4/ntHOd3ML3vEvAA3/lZ4H0IUcTJ8onbftKu10Jpn7COJg qTVynOx1dx74uop7e0f9Q0t30BEDFOv6ilTpIkqJwBOIQ5+zINSVJIaGR/mN7K8C JNJ+QP2zSpJ0qh1dlRLLbiDvUeitTIU5BtHr4WuEmEUw9bxZwth/LwpnbZXI8vBc g3XLJ+g5IYcA/tAxFD2ejJD6grJgmQRTOaZ1+1EJcW4a8AFmbNgzezMCfBe+clNP ucLFfUB0zKImf/IQDeYmuPEmhs41rQF91KPSEP9r3F3FZcfrCWVuCaJoLzIEUzq+ O9nsSLwyu11vVfYY5Oi29lychdw= -----END CERTIFICATE-----Generated at Tue May 28 16:02:54 2024 by rpki-client on console-ams.rpki-client.org