$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33lDthlXGcWMANEetBElEP3_nJM.cer File: 33lDthlXGcWMANEetBElEP3_nJM.cer (raw, json) Hash identifier: uSeyQyNIjNsRqXHaSI7yAxEjaimJ+rTRpAlEv8vlGPo= Subject key identifier: DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AE37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:19:49 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 103.186.108.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 05:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44599 (0xae37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:19:49 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=DF7943B6195719C58C00D11EB4112510FDFF9C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:e6:af:6b:85:ba:b9:f1:48:9d:d4:e2:b2: f4:e8:f3:e6:61:d6:47:e1:d4:85:f8:b4:bb:80:23: 1d:23:41:19:95:5d:d1:88:27:5f:21:72:66:61:6d: 52:79:34:ea:45:28:8d:6b:8b:b1:fd:29:f1:0d:44: 2c:dd:7b:51:33:94:47:df:08:0e:f7:6d:c6:25:73: ac:39:2b:b2:7e:d8:47:01:d3:3d:0d:32:ba:27:00: fa:ae:ea:ad:49:f4:63:60:33:cb:f9:a5:e4:51:f1: 0c:99:6e:59:36:c3:72:62:13:72:07:6a:d8:b0:57: d8:65:5d:c8:12:94:47:f2:bc:db:de:1e:f9:37:6b: 00:05:bb:89:bc:78:f8:17:ae:23:a8:20:23:bb:ca: b0:ff:1a:6d:82:2d:0e:c7:4e:09:d7:d3:fc:78:24: 11:ce:21:e3:38:60:83:45:b0:fb:cd:9d:7d:85:bd: b6:47:c2:d6:75:9e:a9:d0:99:21:7c:4b:b6:fe:c1: 02:36:e7:0f:3d:2f:ab:5d:d8:03:18:c4:c0:e9:8a: 1d:34:a9:e1:1d:d7:1e:41:03:35:96:74:54:ef:aa: 8f:e7:2f:62:6d:bc:15:1d:85:b0:eb:12:c7:d6:ca: 57:86:9f:74:68:43:3e:99:21:76:00:a0:9d:f5:f5: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.108.0/23 Signature Algorithm: sha256WithRSAEncryption 71:be:52:21:ea:66:ea:64:16:84:1f:14:7f:b3:2b:f9:be:01: 54:38:04:7c:c9:04:ee:f4:72:41:1a:ae:bf:9d:9f:50:d7:f6: 96:3b:b7:3e:0b:50:58:5a:d0:22:0e:13:56:0b:87:8b:6d:a5: 4c:da:53:a9:e0:b0:af:c7:4e:21:df:99:ba:10:5c:a6:02:a2: cf:4f:a7:76:a7:f4:ce:34:03:c8:b1:90:c4:1b:fe:7f:b5:66: dc:dd:51:b2:16:14:0e:2f:0a:ae:28:68:56:70:96:1a:4c:31: aa:2d:6d:cf:f7:36:b7:b0:d1:1d:58:59:28:05:ca:9c:97:aa: 75:6e:a3:ad:2f:44:b9:64:2b:0f:0e:b0:19:20:73:de:dc:d8: f1:a0:48:ec:d9:45:ed:f2:2d:2b:ac:92:4a:28:07:7d:78:6f: 92:98:c6:b2:d7:cc:46:5f:6f:26:5d:24:d2:27:97:57:b7:06: 6c:4b:03:0d:8c:18:dd:59:d9:bf:7e:e2:3f:35:12:f7:bd:44: 38:82:50:2c:ad:d9:77:ee:99:5a:1a:39:ff:0c:e3:e0:ae:ac: 0a:f0:2e:fb:c3:f1:9d:4c:35:ef:69:af:cb:5e:e6:30:0b:be: bd:d2:c8:ae:5d:26:f5:4d:eb:4b:e5:a1:91:fc:f8:45:77:4b: e6:26:77:51 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAK43MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTE5NDlaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKERGNzk0M0I2MTk1NzE5QzU4QzAwRDExRUI0MTEyNTEwRkRGRjlD OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vuava4W6ufFIndTi svTo8+Zh1kfh1IX4tLuAIx0jQRmVXdGIJ18hcmZhbVJ5NOpFKI1ri7H9KfENRCzd e1EzlEffCA73bcYlc6w5K7J+2EcB0z0NMronAPqu6q1J9GNgM8v5peRR8QyZblk2 w3JiE3IHatiwV9hlXcgSlEfyvNveHvk3awAFu4m8ePgXriOoICO7yrD/Gm2CLQ7H TgnX0/x4JBHOIeM4YINFsPvNnX2FvbZHwtZ1nqnQmSF8S7b+wQI25w89L6td2AMY xMDpih00qeEd1x5BAzWWdFTvqo/nL2JtvBUdhbDrEsfWyleGn3RoQz6ZIXYAoJ31 9cJRAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU33lDthlXGcWMANEetBElEP3/nJMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx NDUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzE0NS8zM2xEdGhsWEdjV01BTkVldEJFbEVQM19uSk0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7psMA0GCSqGSIb3DQEBCwUA A4IBAQBxvlIh6mbqZBaEHxR/syv5vgFUOAR8yQTu9HJBGq6/nZ9Q1/aWO7c+C1BY WtAiDhNWC4eLbaVM2lOp4LCvx04h35m6EFymAqLPT6d2p/TONAPIsZDEG/5/tWbc 3VGyFhQOLwquKGhWcJYaTDGqLW3P9za3sNEdWFkoBcqcl6p1bqOtL0S5ZCsPDrAZ IHPe3NjxoEjs2UXt8i0rrJJKKAd9eG+SmMay18xGX28mXSTSJ5dXtwZsSwMNjBjd Wdm/fuI/NRL3vUQ4glAsrdl37plaGjn/DOPgrqwK8C77w/GdTDXvaa/LXuYwC769 0siuXSb1TetL5aGR/PhFd0vmJndR -----END CERTIFICATE-----Generated at Sun May 19 01:06:23 2024 by rpki-client on console-fra.rpki-client.org