$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-owMyhaYvyIusPXJ1jDjlZgfj2Q.cer File: -owMyhaYvyIusPXJ1jDjlZgfj2Q.cer (raw, json) Hash identifier: O4CE1YdCTFWOpLUru7IXeVXqaa9FLOvVbAPxiUpQn0E= Subject key identifier: FA:8C:0C:CA:16:98:BF:22:2E:B0:F5:C9:D6:30:E3:95:98:1F:8F:64 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 378B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:48:39 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 157.66.92.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14219 (0x378b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:48:39 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FA8C0CCA1698BF222EB0F5C9D630E395981F8F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:c5:42:3d:54:40:a8:d9:52:62:28:17:da: 4d:a5:89:b4:4e:6d:1d:a4:c7:c9:86:11:da:62:cb: 69:50:d1:ac:08:24:80:e8:81:cb:6a:bc:f7:51:1a: fe:0a:40:40:c2:a7:78:53:4a:f5:4e:84:7e:cd:82: e0:e3:70:7c:65:4d:02:73:32:54:af:e2:f9:ea:50: 78:d2:31:d3:f2:36:73:d9:09:f4:93:55:a3:86:f4: c3:51:d3:b5:c8:77:94:84:6a:02:13:8d:11:30:89: c2:0b:25:e7:c0:ac:68:3e:f0:d4:59:52:14:50:fc: 94:b6:2f:13:67:da:74:c0:43:27:7d:cd:ae:e4:6f: bc:96:ff:96:f8:15:2e:98:de:9f:3e:eb:3f:de:fa: da:98:a4:4c:a8:77:c9:72:c0:3f:b7:ad:f1:d7:f2: ae:d5:45:69:00:9b:d7:d4:ce:f6:a6:8c:8d:02:5e: 36:8a:fb:c0:41:92:55:a3:43:86:c4:f5:4c:f0:02: 8b:87:40:17:0d:4b:90:12:a8:5b:f9:66:e7:36:95: 09:28:d2:e8:c7:89:01:a6:ea:11:d3:0e:db:04:4c: 10:1c:38:66:bc:ad:d7:32:68:54:53:28:a1:3a:20: 4d:92:ba:cf:61:e8:5e:9c:23:1f:c7:db:85:9b:e2: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:0C:CA:16:98:BF:22:2E:B0:F5:C9:D6:30:E3:95:98:1F:8F:64 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/-owMyhaYvyIusPXJ1jDjlZgfj2Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.92.0/23 Signature Algorithm: sha256WithRSAEncryption 31:a4:0a:99:be:5f:e2:87:fd:07:af:86:c8:52:bb:5e:98:d4: 36:9c:a8:d9:09:cd:60:4d:f6:7c:9c:46:df:d9:aa:91:ef:c4: 7e:c2:59:91:7f:c8:7f:ba:34:c1:9d:74:88:52:fa:1d:1f:d1: 4b:e1:b9:56:1b:87:9e:29:3d:1c:71:33:2e:9a:46:15:b0:a9: 2f:c5:10:76:c1:8c:84:e7:84:5b:57:b9:37:24:d7:b7:a9:e2: b2:49:c0:b3:c6:65:6a:12:60:7c:a8:3e:28:71:02:0f:70:1a: 07:2a:4c:89:1f:3c:ee:ec:c2:8a:77:ac:5d:f4:76:7e:49:e0: d9:5e:9c:a0:13:eb:bd:6a:75:16:7f:78:ac:2c:6a:47:c1:bc: 35:cc:d1:f5:55:95:ae:dc:cc:b3:73:b6:48:6c:02:b0:e0:f6: f6:55:eb:6e:bb:9b:1b:c0:14:2c:d6:8e:61:bd:4f:9a:9c:8a: 02:03:c3:c3:c3:e5:de:85:e4:24:78:a8:b8:54:4c:50:ef:eb: 0b:9a:b8:0d:ac:32:8d:b0:fa:6c:bc:34:6d:b4:50:04:6a:88: f7:4e:29:a0:d4:5c:74:be:ca:0a:3a:dc:a1:72:d0:d8:f7:51: f8:dd:99:3a:d2:71:91:5e:94:e2:3a:02:1d:0f:4c:3e:f2:40: 17:c5:66:96 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN4swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNDgzOVoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoRkE4QzBDQ0ExNjk4QkYyMjJFQjBGNUM5RDYzMEUzOTU5ODFGOEY2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOHQxUI9VECo2VJiKBfa TaWJtE5tHaTHyYYR2mLLaVDRrAgkgOiBy2q891Ea/gpAQMKneFNK9U6Efs2C4ONw fGVNAnMyVK/i+epQeNIx0/I2c9kJ9JNVo4b0w1HTtch3lIRqAhONETCJwgsl58Cs aD7w1FlSFFD8lLYvE2fadMBDJ33NruRvvJb/lvgVLpjenz7rP9762pikTKh3yXLA P7et8dfyrtVFaQCb19TO9qaMjQJeNor7wEGSVaNDhsT1TPACi4dAFw1LkBKoW/lm 5zaVCSjS6MeJAabqEdMO2wRMEBw4Zryt1zJoVFMooTogTZK6z2HoXpwjH8fbhZvi l4UCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBT6jAzKFpi/Ii6w9cnWMOOVmB+PZDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjczLy1vd015aGFZdnlJdXNQWEoxakRqbFpnZmoyUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQlwwDQYJKoZIhvcNAQELBQAD ggEBADGkCpm+X+KH/QevhshSu16Y1DacqNkJzWBN9nycRt/ZqpHvxH7CWZF/yH+6 NMGddIhS+h0f0UvhuVYbh54pPRxxMy6aRhWwqS/FEHbBjITnhFtXuTck17ep4rJJ wLPGZWoSYHyoPihxAg9wGgcqTIkfPO7swop3rF30dn5J4NlenKAT671qdRZ/eKws akfBvDXM0fVVla7czLNztkhsArDg9vZV6267mxvAFCzWjmG9T5qcigIDw8PD5d6F 5CR4qLhUTFDv6wuauA2sMo2w+my8NG20UARqiPdOKaDUXHS+ygo63KFy0Nj3Ufjd mTrScZFelOI6Ah0PTD7yQBfFZpY= -----END CERTIFICATE-----Generated at Sat Nov 23 01:15:32 2024 by rpki-client on console-fra.rpki-client.org