$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33lDthlXGcWMANEetBElEP3_nJM.cer File: 33lDthlXGcWMANEetBElEP3_nJM.cer (raw, json) Hash identifier: FAys7aD/N8UAVbFVPa7b8WW2Hy6iuY560oHAN5kSEW4= Subject key identifier: DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BACB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:49:06 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 103.186.108.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47819 (0xbacb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:49:06 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DF7943B6195719C58C00D11EB4112510FDFF9C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:e6:af:6b:85:ba:b9:f1:48:9d:d4:e2:b2: f4:e8:f3:e6:61:d6:47:e1:d4:85:f8:b4:bb:80:23: 1d:23:41:19:95:5d:d1:88:27:5f:21:72:66:61:6d: 52:79:34:ea:45:28:8d:6b:8b:b1:fd:29:f1:0d:44: 2c:dd:7b:51:33:94:47:df:08:0e:f7:6d:c6:25:73: ac:39:2b:b2:7e:d8:47:01:d3:3d:0d:32:ba:27:00: fa:ae:ea:ad:49:f4:63:60:33:cb:f9:a5:e4:51:f1: 0c:99:6e:59:36:c3:72:62:13:72:07:6a:d8:b0:57: d8:65:5d:c8:12:94:47:f2:bc:db:de:1e:f9:37:6b: 00:05:bb:89:bc:78:f8:17:ae:23:a8:20:23:bb:ca: b0:ff:1a:6d:82:2d:0e:c7:4e:09:d7:d3:fc:78:24: 11:ce:21:e3:38:60:83:45:b0:fb:cd:9d:7d:85:bd: b6:47:c2:d6:75:9e:a9:d0:99:21:7c:4b:b6:fe:c1: 02:36:e7:0f:3d:2f:ab:5d:d8:03:18:c4:c0:e9:8a: 1d:34:a9:e1:1d:d7:1e:41:03:35:96:74:54:ef:aa: 8f:e7:2f:62:6d:bc:15:1d:85:b0:eb:12:c7:d6:ca: 57:86:9f:74:68:43:3e:99:21:76:00:a0:9d:f5:f5: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:43:B6:19:57:19:C5:8C:00:D1:1E:B4:11:25:10:FD:FF:9C:93 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/33lDthlXGcWMANEetBElEP3_nJM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.108.0/23 Signature Algorithm: sha256WithRSAEncryption 23:d5:d1:7f:53:21:d5:f4:b0:78:bb:0b:df:46:7e:35:c1:c4: b6:51:ec:41:cc:dc:a8:d7:3f:13:a6:07:37:17:f4:16:7e:44: f1:49:ff:72:5a:99:0f:80:a5:5d:3f:05:4b:21:28:25:72:e8: e5:d4:14:55:62:e1:c3:08:c4:1c:89:c8:e5:e9:38:00:fc:fc: 03:8c:99:6a:b1:9a:9f:02:00:82:80:c2:b3:93:73:14:a9:cc: 24:33:b2:a0:eb:47:f9:53:37:83:ed:25:0b:a1:84:bb:64:8a: ab:60:e1:f3:c3:7a:36:78:5a:2d:ec:22:cb:11:2c:12:3f:42: 08:be:e2:67:18:2b:00:c6:ce:25:3f:31:c1:b9:ee:d4:22:08: 13:39:42:cb:a5:8d:8b:b5:34:8b:99:be:86:e4:7c:2a:6f:6b: 4a:8b:96:ec:3f:54:76:7b:51:4c:15:6d:a4:f0:2f:54:2e:7d: 39:9f:12:67:94:8e:86:b5:aa:fb:c6:ad:30:c6:74:51:0f:0f: 09:23:27:ad:3d:f3:a3:b9:8d:4a:b8:7c:cc:fc:cf:a8:5d:28: 0a:04:2f:c5:53:1c:19:bb:42:47:93:e4:32:59:0c:3f:1a:80: 55:2c:d7:92:6a:01:0c:71:1f:ba:ae:9f:27:5c:78:d4:01:2c: 58:1f:49:41 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDALrLMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ5MDZaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKERGNzk0M0I2MTk1NzE5QzU4QzAwRDExRUI0MTEyNTEwRkRGRjlD OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vuava4W6ufFIndTi svTo8+Zh1kfh1IX4tLuAIx0jQRmVXdGIJ18hcmZhbVJ5NOpFKI1ri7H9KfENRCzd e1EzlEffCA73bcYlc6w5K7J+2EcB0z0NMronAPqu6q1J9GNgM8v5peRR8QyZblk2 w3JiE3IHatiwV9hlXcgSlEfyvNveHvk3awAFu4m8ePgXriOoICO7yrD/Gm2CLQ7H TgnX0/x4JBHOIeM4YINFsPvNnX2FvbZHwtZ1nqnQmSF8S7b+wQI25w89L6td2AMY xMDpih00qeEd1x5BAzWWdFTvqo/nL2JtvBUdhbDrEsfWyleGn3RoQz6ZIXYAoJ31 9cJRAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU33lDthlXGcWMANEetBElEP3/nJMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx NDUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzE0NS8zM2xEdGhsWEdjV01BTkVldEJFbEVQM19uSk0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7psMA0GCSqGSIb3DQEBCwUA A4IBAQAj1dF/UyHV9LB4uwvfRn41wcS2UexBzNyo1z8Tpgc3F/QWfkTxSf9yWpkP gKVdPwVLISglcujl1BRVYuHDCMQcicjl6TgA/PwDjJlqsZqfAgCCgMKzk3MUqcwk M7Kg60f5UzeD7SULoYS7ZIqrYOHzw3o2eFot7CLLESwSP0IIvuJnGCsAxs4lPzHB ue7UIggTOULLpY2LtTSLmb6G5Hwqb2tKi5bsP1R2e1FMFW2k8C9ULn05nxJnlI6G tar7xq0wxnRRDw8JIyetPfOjuY1KuHzM/M+oXSgKBC/FUxwZu0JHk+QyWQw/GoBV LNeSagEMcR+6rp8nXHjUASxYH0lB -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:32 2024 by rpki-client on console-ams.rpki-client.org