$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1jfzzebYbvkaDKnPorWwML7sCUA.cer File: 1jfzzebYbvkaDKnPorWwML7sCUA.cer (raw, json) Hash identifier: RnDfvZJYDuPh2T/7WQrudFEVpe+jl+du3PoTno2uGo0= Subject key identifier: D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:55:25 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 160.30.196.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14305 (0x37e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:55:25 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D637F3CDE6D86EF91A0CA9CFA2B5B030BEEC0940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:ac:02:10:02:a2:e5:49:e2:1c:fd:49:b2: ab:e3:31:96:92:50:79:2d:b6:14:3e:58:06:46:92: d3:fe:9a:75:b9:4a:79:e3:9b:b7:a8:c6:4d:dc:d4: 96:12:c3:8b:c9:9b:45:66:13:eb:d1:f4:44:38:cb: a8:c5:a0:07:54:f3:46:df:b9:90:6e:62:e3:c9:22: 3e:b6:cc:b1:f7:84:0e:8e:31:2d:57:d9:7a:d6:49: 9f:c9:de:70:75:96:d8:1f:c1:33:b3:fe:8d:cc:17: e9:05:a6:ab:1b:45:62:30:41:ba:2f:aa:04:f5:57: 4b:98:d1:d1:2a:54:5f:7f:65:f8:98:3a:65:eb:fe: 1e:68:1a:57:b9:d5:0d:63:27:55:3d:20:5f:97:90: a2:c8:a4:e6:27:cf:82:02:3d:37:ff:40:2c:94:34: 8b:1f:e3:fd:cc:f2:24:0a:d6:65:f6:83:33:48:cf: 06:71:11:64:94:b8:dd:93:9d:45:9e:38:72:a3:5c: ad:ea:79:62:2a:08:20:f3:5d:39:f1:13:74:34:a5: 34:5e:e3:1a:ca:ce:9f:7c:ca:1a:3a:e2:42:f2:e0: 60:8f:6b:03:a7:91:34:f0:b4:1d:14:37:cd:2b:4b: e3:48:36:71:b8:db:51:e9:3b:0d:83:2c:e2:8f:cf: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:37:F3:CD:E6:D8:6E:F9:1A:0C:A9:CF:A2:B5:B0:30:BE:EC:09:40 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/1jfzzebYbvkaDKnPorWwML7sCUA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.196.0/23 Signature Algorithm: sha256WithRSAEncryption 32:6d:2e:a4:78:b3:7c:d3:53:cc:84:ed:c9:65:f1:80:d0:95: 3d:5d:c8:91:35:fe:41:dc:48:a6:f5:e1:0c:be:ed:3f:0b:6c: f7:be:c1:75:8c:0e:92:d2:5d:6b:c0:85:12:d1:ff:e9:9b:23: 61:b0:6b:11:46:eb:d1:8c:e3:3c:74:dd:80:47:88:e8:ce:7f: 87:03:71:5f:20:92:da:9b:ac:9f:e2:be:0d:56:a3:23:b4:67: 98:b6:15:d4:2b:41:26:9a:09:5b:e7:76:a6:a9:24:20:e0:a7: c0:cd:c8:89:b0:01:2e:22:eb:93:8d:25:42:8a:25:25:52:86: 74:26:31:ff:7c:03:c4:e6:2e:f6:28:1c:eb:e1:d0:35:d8:fd: 44:fd:d1:f5:bf:d6:97:3e:04:20:a2:a9:60:1a:9b:87:06:1a: ae:2c:83:f9:6b:1b:6e:48:c9:9f:e6:9f:75:9e:79:eb:8a:81: b1:77:d3:13:c0:2b:c5:54:5e:7a:70:4d:cb:3d:1e:97:f9:8e: 33:23:9b:0a:ed:6a:a8:dc:65:9f:09:bf:39:84:6f:d4:06:75: af:90:32:ac:c1:c8:06:f0:b1:0b:5d:f3:f6:03:4c:69:0b:d1: 1f:a9:5a:23:86:99:55:1f:f4:0f:df:f3:de:91:e7:1c:84:5d: 97:42:10:c7 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN+EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTUyNVoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoRDYzN0YzQ0RFNkQ4NkVGOTFBMENBOUNGQTJCNUIwMzBCRUVDMDk0 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALByrAIQAqLlSeIc/Umy q+MxlpJQeS22FD5YBkaS0/6adblKeeObt6jGTdzUlhLDi8mbRWYT69H0RDjLqMWg B1TzRt+5kG5i48kiPrbMsfeEDo4xLVfZetZJn8necHWW2B/BM7P+jcwX6QWmqxtF YjBBui+qBPVXS5jR0SpUX39l+Jg6Zev+HmgaV7nVDWMnVT0gX5eQosik5ifPggI9 N/9ALJQ0ix/j/czyJArWZfaDM0jPBnERZJS43ZOdRZ44cqNcrep5YioIIPNdOfET dDSlNF7jGsrOn3zKGjriQvLgYI9rA6eRNPC0HRQ3zStL40g2cbjbUek7DYMs4o/P s5ECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTWN/PN5thu+RoMqc+itbAwvuwJQDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzEzLzFqZnp6ZWJZYnZrYURLblBvcld3TUw3c0NVQS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHsQwDQYJKoZIhvcNAQELBQAD ggEBADJtLqR4s3zTU8yE7cll8YDQlT1dyJE1/kHcSKb14Qy+7T8LbPe+wXWMDpLS XWvAhRLR/+mbI2GwaxFG69GM4zx03YBHiOjOf4cDcV8gktqbrJ/ivg1WoyO0Z5i2 FdQrQSaaCVvndqapJCDgp8DNyImwAS4i65ONJUKKJSVShnQmMf98A8TmLvYoHOvh 0DXY/UT90fW/1pc+BCCiqWAam4cGGq4sg/lrG25IyZ/mn3WeeeuKgbF30xPAK8VU XnpwTcs9Hpf5jjMjmwrtaqjcZZ8JvzmEb9QGda+QMqzByAbwsQtd8/YDTGkL0R+p WiOGmVUf9A/f896R5xyEXZdCEMc= -----END CERTIFICATE-----Generated at Mon Nov 25 04:45:21 2024 by rpki-client on console-ams.rpki-client.org