$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer File: 2P0wEmBd2oDHj4k1lkjXtICZzc4.cer (raw, json) Hash identifier: 3JnCZWona0rH8ukuiWd8ck7HWvDxruzCscmzl4oz7MM= Subject key identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:33 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 160.20.18.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14275 (0x37c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:53:33 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D8FD3012605DDA80C78F89359648D7B48099CDCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:39:ab:c8:c3:d3:e4:47:bd:8b:c4:9d:59: ac:79:8a:07:a1:13:24:a9:ac:af:37:21:39:a9:6b: c1:88:8b:97:34:b6:6f:2c:c5:8f:34:38:f5:86:55: e2:a6:9b:19:77:86:6a:59:c7:ed:cf:c8:1a:be:cb: 36:fc:65:83:e1:da:73:0a:59:b6:5b:db:51:4c:6f: f5:bb:b2:09:cb:f0:bc:cc:11:9d:ab:d5:91:88:8a: 47:fe:5d:09:36:0d:ed:c3:bd:a0:f6:f4:a9:5c:4c: b5:2b:ae:90:5b:72:d8:a9:bf:2d:c6:3a:fe:c4:87: 6c:25:fb:f3:a4:08:7e:1f:41:c6:ae:a7:11:06:33: 90:f8:5d:71:64:11:6c:63:5f:8e:c0:a7:38:54:42: d3:75:b0:18:9d:1a:78:79:3b:67:18:ab:67:1a:c7: 3d:71:0a:17:c4:4a:e2:62:63:25:5c:4a:f5:86:75: 60:fd:22:03:47:b1:d8:ae:7c:86:b2:84:0a:78:72: 46:26:b2:ae:43:ed:b8:b5:2f:27:92:04:36:d1:e8: f5:54:62:93:c0:11:25:19:8d:8c:94:b3:2e:82:a9: a1:29:65:29:b4:17:24:c1:d9:21:64:1f:30:da:64: e7:cc:ee:4e:70:c6:77:ef:8e:00:94:b1:9c:6e:0d: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.20.18.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:a0:db:73:82:5d:8c:f3:16:1e:5f:78:84:10:d7:35:8b:d0: b5:be:6e:f2:dc:63:5f:b9:11:45:1c:5c:c3:ef:73:62:29:77: c3:14:fb:a3:77:e2:05:27:4e:0a:6a:b6:cb:59:76:26:e9:2d: 92:95:a5:de:ee:ce:26:75:cc:19:89:93:0b:dc:9d:17:93:e3: 38:7f:d2:a8:fd:c9:e3:e9:f8:e6:66:56:60:23:cb:76:86:fc: b2:48:cd:51:26:fd:0a:23:25:5b:c4:88:1c:fe:59:64:6b:92: 58:84:da:20:51:c1:7d:4a:e9:a9:52:45:b9:c9:bb:3f:7f:6c: 54:02:92:06:f9:47:ab:45:40:99:c1:9e:d9:4a:49:5a:4b:c5: e8:d5:41:6a:c0:04:86:0c:35:dd:e4:83:16:21:7b:5c:8c:f4: eb:32:56:7c:d9:20:4a:9f:3a:68:99:92:e8:d1:17:83:7a:79: d8:03:ee:1b:59:01:e2:bb:a6:86:7e:1b:e8:5d:e0:a5:f0:86: 0e:e3:83:9c:99:e5:d5:52:9f:c5:97:de:01:2a:44:71:ce:9a: 1b:dc:ca:b6:f5:83:cc:28:39:ee:4f:65:57:2b:55:f6:4b:6a: b3:c6:0d:2d:e5:c2:ed:4e:72:84:09:cf:8b:42:23:4a:39:fa: eb:58:d7:d8 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN8MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTMzM1oXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoRDhGRDMwMTI2MDVEREE4MEM3OEY4OTM1OTY0OEQ3QjQ4MDk5Q0RD RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfzOavIw9PkR72LxJ1Z rHmKB6ETJKmsrzchOalrwYiLlzS2byzFjzQ49YZV4qabGXeGalnH7c/IGr7LNvxl g+HacwpZtlvbUUxv9buyCcvwvMwRnavVkYiKR/5dCTYN7cO9oPb0qVxMtSuukFty 2Km/LcY6/sSHbCX786QIfh9Bxq6nEQYzkPhdcWQRbGNfjsCnOFRC03WwGJ0aeHk7 ZxirZxrHPXEKF8RK4mJjJVxK9YZ1YP0iA0ex2K58hrKECnhyRiayrkPtuLUvJ5IE NtHo9VRik8ARJRmNjJSzLoKpoSllKbQXJMHZIWQfMNpk58zuTnDGd++OAJSxnG4N J80CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTY/TASYF3agMePiTWWSNe0gJnNzjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjg0LzJQMHdFbUJkMm9ESGo0azFsa2pYdElDWnpjNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgFBIwDQYJKoZIhvcNAQELBQAD ggEBAG+g23OCXYzzFh5feIQQ1zWL0LW+bvLcY1+5EUUcXMPvc2Ipd8MU+6N34gUn TgpqtstZdibpLZKVpd7uziZ1zBmJkwvcnReT4zh/0qj9yePp+OZmVmAjy3aG/LJI zVEm/QojJVvEiBz+WWRrkliE2iBRwX1K6alSRbnJuz9/bFQCkgb5R6tFQJnBntlK SVpLxejVQWrABIYMNd3kgxYhe1yM9OsyVnzZIEqfOmiZkujRF4N6edgD7htZAeK7 poZ+G+hd4KXwhg7jg5yZ5dVSn8WX3gEqRHHOmhvcyrb1g8woOe5PZVcrVfZLarPG DS3lwu1OcoQJz4tCI0o5+utY19g= -----END CERTIFICATE-----Generated at Sat Nov 23 01:15:37 2024 by rpki-client on console-fra.rpki-client.org