$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer File: 0eqai1ElBZBymdo4zqW8zmEJh8s.cer (raw, json) Hash identifier: clcSWIAb0eKG006lHYQQKJ3E+vhhvpIkeUJriB0Bw9w= Subject key identifier: D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AED3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:21:34 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 103.104.152.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 00:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44755 (0xaed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:21:34 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:31:94:39:59:c8:11:0c:b8:47:cb:4e:8e: 23:5e:e5:ce:ce:69:fe:9c:73:5a:1d:44:e2:12:bd: 2f:db:d3:15:26:50:4b:5e:9e:7f:ec:60:34:2f:35: fc:eb:61:57:f9:ed:cf:f4:23:0d:aa:8f:7c:4c:b9: 85:bd:38:c8:a6:e1:90:c1:e6:59:b9:2a:a8:50:9f: 79:16:d3:1a:02:40:86:c3:8e:e8:f2:5a:88:0f:30: 5a:ec:11:40:35:0f:7d:d1:d3:c6:c2:51:ce:0d:ac: 9a:b9:28:25:ec:3f:8a:fb:d9:9f:87:2a:55:70:f0: 75:96:49:5c:e9:6a:59:0d:cd:b6:da:a4:3c:50:77: 2e:f5:57:36:2a:55:6f:62:fb:46:f3:7c:fa:ed:68: 3f:0e:da:24:b8:62:1a:d7:d3:e5:e8:2a:7c:4b:4c: c5:c8:69:04:01:f6:ff:54:c8:cb:b8:a9:6e:72:51: d6:fc:f3:a4:a3:b6:da:29:34:64:29:3a:35:81:06: 10:3d:78:18:1d:db:b9:28:f1:f3:80:6a:c9:a9:27: 21:ab:cd:ce:d9:75:a0:1d:36:98:a7:8b:d7:fc:e6: fd:b9:c1:fb:c9:bd:88:5f:70:fb:5a:eb:36:ae:26: 6f:d9:02:9b:4e:97:71:5b:c5:c0:4b:fd:15:ee:51: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.152.0/22 Signature Algorithm: sha256WithRSAEncryption 49:f0:61:07:1a:44:55:a3:16:bd:c3:6e:84:f5:66:13:ba:b1: 99:a1:6f:29:d3:bf:92:1c:39:e4:92:43:5d:43:d4:15:d0:7b: cb:59:a4:df:f9:20:cf:50:13:59:5b:59:25:7d:f5:d3:b8:44: 97:8f:9d:50:a8:18:03:f7:b7:94:a5:af:6f:1f:2e:dc:ca:c1: a5:f4:ff:b1:3d:5b:8c:1e:60:60:f8:86:37:d1:ff:ce:30:30: a8:50:9a:04:02:a6:20:7c:74:27:1d:7a:e8:04:d0:f6:85:55: 66:fc:4f:ec:b3:d5:4e:c5:cd:c0:2e:8e:a0:1e:d9:07:9a:38: 53:3a:57:3b:cb:84:e0:f2:51:c0:ed:65:b3:59:76:e1:ec:c2: 81:81:d5:ca:f2:ef:58:39:9f:a0:ac:1e:d0:49:51:40:69:2d: a3:dd:c0:8d:98:bb:08:43:d0:58:03:4d:da:d4:80:07:71:d6: 09:42:6a:5c:30:f7:68:4c:54:ab:91:62:2b:34:c2:d8:ef:19: ac:43:45:ff:3a:8d:3c:09:9b:68:2e:8b:52:75:a2:19:5e:cd: fe:b3:49:ad:b4:88:29:c7:f4:28:0c:00:92:14:5f:65:af:e9: ab:fc:93:a4:34:46:39:7e:ab:e1:6e:d8:55:4c:4d:41:10:24: 58:3f:83:3c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAK7TMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIxMzRaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKEQxRUE5QThCNTEyNTA1OTA3Mjk5REEzOENFQTVCQ0NFNjEwOTg3 Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7DGUOVnIEQy4R8tO jiNe5c7Oaf6cc1odROISvS/b0xUmUEtenn/sYDQvNfzrYVf57c/0Iw2qj3xMuYW9 OMim4ZDB5lm5KqhQn3kW0xoCQIbDjujyWogPMFrsEUA1D33R08bCUc4NrJq5KCXs P4r72Z+HKlVw8HWWSVzpalkNzbbapDxQdy71VzYqVW9i+0bzfPrtaD8O2iS4YhrX 0+XoKnxLTMXIaQQB9v9UyMu4qW5yUdb886SjttopNGQpOjWBBhA9eBgd27ko8fOA asmpJyGrzc7ZdaAdNpini9f85v25wfvJvYhfcPta6zauJm/ZAptOl3FbxcBL/RXu UfKfAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU0eqai1ElBZBymdo4zqW8zmEJh8sw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 MzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjYzOS8wZXFhaTFFbEJaQnltZG80enFXOHptRUpoOHMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2iYMA0GCSqGSIb3DQEBCwUA A4IBAQBJ8GEHGkRVoxa9w26E9WYTurGZoW8p07+SHDnkkkNdQ9QV0HvLWaTf+SDP UBNZW1klffXTuESXj51QqBgD97eUpa9vHy7cysGl9P+xPVuMHmBg+IY30f/OMDCo UJoEAqYgfHQnHXroBND2hVVm/E/ss9VOxc3ALo6gHtkHmjhTOlc7y4Tg8lHA7WWz WXbh7MKBgdXK8u9YOZ+grB7QSVFAaS2j3cCNmLsIQ9BYA03a1IAHcdYJQmpcMPdo TFSrkWIrNMLY7xmsQ0X/Oo08CZtoLotSdaIZXs3+s0mttIgpx/QoDACSFF9lr+mr /JOkNEY5fqvhbthVTE1BECRYP4M8 -----END CERTIFICATE-----Generated at Sat May 18 19:21:06 2024 by rpki-client on console-fra.rpki-client.org