$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3hutsfIS28F3LKbWTXSCp76C5Sc.cer File: 3hutsfIS28F3LKbWTXSCp76C5Sc.cer (raw, json) Hash identifier: sTdr/E01pf4mqDNpL09u/Bhh1pZ/w2Y7RjQoTgAaO9M= Subject key identifier: DE:1B:AD:B1:F2:12:DB:C1:77:2C:A6:D6:4D:74:82:A7:BE:82:E5:27 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AE65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/3hutsfIS28F3LKbWTXSCp76C5Sc.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:20:18 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 43.226.116.0/22 IP: 103.45.164.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 19:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44645 (0xae65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:20:18 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=DE1BADB1F212DBC1772CA6D64D7482A7BE82E527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:10:bb:ce:7f:09:0f:6e:15:07:b4:45:39: 5b:26:8f:49:47:2a:a8:37:1b:72:d3:1e:dd:df:4e: 74:0d:14:ff:fe:37:86:d3:4f:13:42:52:29:9d:42: 03:57:67:86:99:6a:ce:df:b8:04:1a:74:b7:c4:6e: 16:2a:6f:19:cc:65:12:c9:f1:ca:aa:39:1e:00:3c: 83:5b:c9:f3:f9:23:14:71:6d:19:ab:56:48:b5:d1: ab:cc:1c:12:9e:12:9d:aa:da:af:ab:83:1d:2e:5e: 61:e5:2b:83:21:f6:a9:4b:71:c8:a3:29:f3:ce:af: a5:c5:69:34:66:bd:29:d7:5a:f1:13:47:b5:6a:4b: 24:23:f4:d8:3a:a7:9f:47:80:f3:5f:c3:58:0e:fc: 77:de:06:3b:d9:4c:bb:c8:32:82:8f:e2:74:64:78: 49:15:5b:b7:24:58:3a:6e:74:b6:cb:48:c9:b8:46: 01:4f:2e:e7:b0:f2:f6:9f:3c:f4:e8:d4:17:f5:d5: dd:93:1d:47:f4:02:41:d5:1b:d8:8d:ef:ce:1c:8f: 68:57:63:c5:9f:ee:d4:a5:bf:bf:22:0b:2d:b4:7d: 45:f9:e3:85:ab:1e:6b:93:a2:9e:c8:5c:57:4b:de: a1:e0:fb:2d:5e:ca:e7:9d:12:c1:a6:12:f0:50:5f: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1B:AD:B1:F2:12:DB:C1:77:2C:A6:D6:4D:74:82:A7:BE:82:E5:27 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/3hutsfIS28F3LKbWTXSCp76C5Sc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.116.0/22 103.45.164.0/22 Signature Algorithm: sha256WithRSAEncryption 27:5e:15:ed:37:59:dc:95:dc:f5:c6:19:ca:56:03:d8:0b:a9: 26:bf:be:e0:5e:e9:29:08:ab:7e:47:df:46:3e:95:76:1f:43: 84:96:62:ea:e0:4f:62:ed:7e:e8:e0:19:ba:13:5e:d1:dd:2f: d7:b4:d0:db:2b:12:16:81:17:36:5f:07:0b:d8:a3:00:50:7a: c9:b4:16:52:08:fa:2d:aa:ce:2c:63:24:f4:3a:a9:3c:6c:a0: d5:d7:3d:00:8f:68:34:9b:a5:38:04:8e:05:fe:d9:9e:a5:f5: 35:67:31:f0:d2:d2:10:d2:c1:c5:19:c3:6c:b9:80:39:38:d1: f6:15:90:68:73:e9:e9:29:9a:9b:06:6a:d9:a8:e6:65:71:fa: 47:b6:b3:14:a4:a1:83:a0:c8:48:7c:6f:f0:8a:3f:b8:34:59: ac:12:a6:6b:24:28:96:d9:65:5a:40:25:fe:29:77:91:d3:05: ed:0b:e2:08:0f:8b:bb:7c:78:c1:c6:2b:ee:bb:37:f2:68:e1: 48:d8:a1:d6:9e:b6:1c:89:2e:7a:8f:a8:02:f8:e9:e0:ba:fb: c2:ec:73:2c:46:f2:7d:ba:ed:7c:80:75:55:c2:d8:b4:f1:d7: 5e:59:ff:c2:25:13:97:07:2b:e0:5c:aa:4f:d4:3b:2d:43:f6: 6b:ed:71:df -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAK5lMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIwMThaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKERFMUJBREIxRjIxMkRCQzE3NzJDQTZENjRENzQ4MkE3QkU4MkU1 MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBRC7zn8JD24VB7RF OVsmj0lHKqg3G3LTHt3fTnQNFP/+N4bTTxNCUimdQgNXZ4aZas7fuAQadLfEbhYq bxnMZRLJ8cqqOR4APINbyfP5IxRxbRmrVki10avMHBKeEp2q2q+rgx0uXmHlK4Mh 9qlLccijKfPOr6XFaTRmvSnXWvETR7VqSyQj9Ng6p59HgPNfw1gO/HfeBjvZTLvI MoKP4nRkeEkVW7ckWDpudLbLSMm4RgFPLuew8vafPPTo1Bf11d2THUf0AkHVG9iN 784cj2hXY8Wf7tSlv78iCy20fUX544WrHmuTop7IXFdL3qHg+y1eyuedEsGmEvBQ X5zPAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQU3hutsfIS28F3LKbWTXSCp76C5Scw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEw MzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMTAzOS8zaHV0c2ZJUzI4RjNMS2JXVFhTQ3A3NkM1U2MubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK+J0AwQCZy2kMA0GCSqGSIb3 DQEBCwUAA4IBAQAnXhXtN1ncldz1xhnKVgPYC6kmv77gXukpCKt+R99GPpV2H0OE lmLq4E9i7X7o4Bm6E17R3S/XtNDbKxIWgRc2XwcL2KMAUHrJtBZSCPotqs4sYyT0 Oqk8bKDV1z0Aj2g0m6U4BI4F/tmepfU1ZzHw0tIQ0sHFGcNsuYA5ONH2FZBoc+np KZqbBmrZqOZlcfpHtrMUpKGDoMhIfG/wij+4NFmsEqZrJCiW2WVaQCX+KXeR0wXt C+IID4u7fHjBxivuuzfyaOFI2KHWnrYciS56j6gC+OnguvvC7HMsRvJ9uu18gHVV wti08ddeWf/CJROXByvgXKpP1DstQ/Zr7XHf -----END CERTIFICATE-----Generated at Sat May 18 16:16:48 2024 by rpki-client on console-ams.rpki-client.org