$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer File: 3Vi43ud7iv5uKRpbggWxMTFpeE8.cer (raw, json) Hash identifier: Iw2+otmK0jxQtPVnrVr7zYuHtmmu0nj653BRQBhJ64g= Subject key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AF5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:23:53 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 45112 IP: 103.108.164.0/22 IP: 2402:6bc0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 19:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44895 (0xaf5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:23:53 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:af:0f:bd:e6:83:80:03:bf:0c:81:cc:d3: 84:07:6f:bd:f0:e3:ca:ae:61:ad:f0:ca:68:82:cb: a0:5d:8f:6e:b3:2d:38:67:3e:62:d9:9c:23:b0:ac: 27:f5:72:89:a0:8a:d8:2a:6b:2e:a5:ae:a6:d1:04: b4:d4:ca:ae:1d:59:15:f8:30:19:c2:46:cc:49:71: 44:34:a6:9d:97:42:44:e8:80:02:46:cf:5e:9b:ae: bd:b0:97:10:d7:80:8c:29:b7:60:48:93:ab:71:ac: 3a:1e:b9:2d:e5:61:f7:fa:1c:c0:f6:d8:35:a7:41: 36:55:f6:c6:95:5b:c1:aa:83:c8:e6:ec:71:dc:0d: ee:0d:ad:b1:99:6b:64:59:b4:6e:84:62:0f:0a:19: 02:f3:62:fb:3a:49:54:0a:7a:06:59:80:f1:a5:bb: c1:ac:0f:4b:68:21:be:09:5d:39:8b:7a:e7:af:8c: ba:7a:03:bb:db:8e:fd:1a:7d:61:23:9e:99:db:ba: 2e:48:b8:08:9d:d4:54:b6:97:ee:35:f7:63:db:ee: 67:7a:fe:94:29:67:ab:63:21:c9:b7:7a:de:a8:a8: b3:69:c1:0f:02:0a:49:a3:67:64:97:59:52:b4:fa: ad:87:7b:88:3c:fa:a2:6a:2b:52:70:ff:d8:07:dc: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45112 sbgp-ipAddrBlock: critical IPv4: 103.108.164.0/22 IPv6: 2402:6bc0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:5d:c9:c1:67:4d:37:52:a4:10:4c:e4:c2:58:4d:db:00:39: b1:dc:7f:03:46:c7:f1:c4:fe:fe:56:98:c0:cd:c4:f9:89:ca: 98:e8:eb:1f:c4:15:c9:d3:74:3f:62:33:b0:e2:9f:cd:bd:f3: 6b:96:f0:31:d4:8b:ad:ed:13:cc:cb:84:fd:01:48:c5:86:a7: e9:68:de:f0:d7:bd:9c:b9:e7:6b:45:d8:1c:40:50:36:88:c1: 68:ae:a4:51:9d:54:e2:ef:68:4d:4d:f9:4e:f6:1b:ca:a9:1f: 55:df:cd:d6:b9:f2:5f:3c:8b:da:59:19:33:9a:e7:f1:a9:fb: 88:4c:57:65:b0:08:fc:67:ad:7b:c7:dd:cd:b8:56:fd:1d:e3: 2e:b3:d7:39:92:c9:5b:f0:84:d4:de:ff:4b:22:a5:5b:cb:44: 20:63:78:9a:61:db:ab:5b:73:26:7f:96:2c:fc:13:89:a2:63: f4:91:3c:1f:2d:e6:2b:0a:9a:37:f0:41:e0:44:aa:2b:a5:8e: 01:26:5e:f5:a6:37:f1:52:cb:f3:03:07:c6:14:17:f6:ff:7e: ce:fa:80:f7:59:e2:73:27:d7:6d:74:ea:dd:fe:1f:72:93:38: 94:91:6c:3f:f6:20:e8:5c:67:34:e8:0d:fb:04:3c:b0:1e:f8: 6e:de:03:e2 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAK9fMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIzNTNaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKERENThCOERFRTc3QjhBRkU2RTI5MUE1QjgyMDVCMTMxMzE2OTc4 NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOK8PveaDgAO/DIHM 04QHb73w48quYa3wymiCy6Bdj26zLThnPmLZnCOwrCf1comgitgqay6lrqbRBLTU yq4dWRX4MBnCRsxJcUQ0pp2XQkTogAJGz16brr2wlxDXgIwpt2BIk6txrDoeuS3l Yff6HMD22DWnQTZV9saVW8Gqg8jm7HHcDe4NrbGZa2RZtG6EYg8KGQLzYvs6SVQK egZZgPGlu8GsD0toIb4JXTmLeuevjLp6A7vbjv0afWEjnpnbui5IuAid1FS2l+41 92Pb7md6/pQpZ6tjIcm3et6oqLNpwQ8CCkmjZ2SXWVK0+q2He4g8+qJqK1Jw/9gH 3PcxAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQU3Vi43ud7iv5uKRpbggWxMTFpeE8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 NzEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjY3MS8zVmk0M3VkN2l2NXVLUnBiZ2dXeE1URnBlRTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCwODAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdspDANBAIAAjAHAwUAJAJrwDANBgkqhkiG9w0BAQsFAAOCAQEA Kl3JwWdNN1KkEEzkwlhN2wA5sdx/A0bH8cT+/laYwM3E+YnKmOjrH8QVydN0P2Iz sOKfzb3za5bwMdSLre0TzMuE/QFIxYan6Wje8Ne9nLnna0XYHEBQNojBaK6kUZ1U 4u9oTU35TvYbyqkfVd/N1rnyXzyL2lkZM5rn8an7iExXZbAI/Gete8fdzbhW/R3j LrPXOZLJW/CE1N7/SyKlW8tEIGN4mmHbq1tzJn+WLPwTiaJj9JE8Hy3mKwqaN/BB 4ESqK6WOASZe9aY38VLL8wMHxhQX9v9+zvqA91nicyfXbXTq3f4fcpM4lJFsP/Yg 6FxnNOgN+wQ8sB74bt4D4g== -----END CERTIFICATE-----Generated at Sun May 19 14:41:53 2024 by rpki-client on console-ams.rpki-client.org