$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer File: 3uCPUof2aTE85pkPEXQBsXmEiuE.cer (raw, json) Hash identifier: 3UnmcloyWDTV/frqf+Ed+gsrUoVDA/PSIaQKpwhvNlQ= Subject key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:56:38 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 103.120.96.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48271 (0xbc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:56:38 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DEE08F5287F669313CE6990F117401B179848AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5e:da:44:e1:c1:f3:3e:9d:5e:70:73:ed:fc: af:06:c7:8d:74:df:0e:04:2a:36:34:0a:42:64:d8: 55:56:89:40:db:b1:0c:3d:6f:89:37:e8:38:da:4c: af:51:6f:42:b3:6d:65:ef:43:15:68:9e:86:e8:c1: a7:b7:1a:d4:36:bd:2d:87:9e:35:5f:85:4d:13:12: d5:1e:e2:e6:93:7a:eb:30:72:6e:cd:f7:00:60:4d: 6a:92:e4:de:c5:37:b9:bc:40:80:e3:cd:26:fc:eb: 01:72:1a:5d:d0:07:85:b1:b9:4f:85:85:28:50:3a: 07:f1:a6:c5:29:f1:e4:88:5b:96:28:e8:ce:ee:4f: 0a:ce:e3:84:8f:60:6e:7e:37:df:49:38:bf:54:e5: c2:97:77:88:33:55:82:c0:75:2c:a6:f9:62:c6:8d: eb:21:5a:6a:f3:38:40:11:40:b2:b9:d7:8d:f0:b1: c4:d0:b2:7b:ca:8f:fc:d3:a5:bb:bd:0c:8e:92:65: a0:ca:98:d4:c6:93:25:79:15:5c:25:f6:f4:b8:9a: e6:ce:5f:bd:69:0d:4d:50:62:ab:44:9c:9f:6d:88: 31:20:5c:2f:31:84:58:7c:6c:8e:6d:31:27:b9:d7: f6:79:cc:99:0f:7f:9b:e9:c9:7f:8c:0a:5b:95:96: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.120.96.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:b4:b3:03:d7:1b:c6:0d:ce:dc:f4:fb:c4:66:c6:f8:3d:c4: 2c:fc:6c:d1:50:9b:27:08:a3:7d:0c:8d:13:f3:af:4f:4f:2d: 83:88:c1:ff:cd:ee:76:e1:6a:6a:7e:2a:b4:76:61:5f:07:d9: 25:06:b7:65:46:4e:f1:ab:6b:0c:9f:dc:8b:fa:1b:97:cc:e4: b0:d2:d5:35:76:56:85:f3:d0:af:0a:3a:28:28:af:73:35:c6: 1c:84:39:e9:82:e9:db:4e:b7:38:7d:e7:5b:d4:f1:3a:44:9e: 49:d6:2a:ad:55:26:4e:53:a5:8a:17:b3:53:fd:f7:eb:3f:a6: 03:35:cc:63:18:71:e4:07:19:33:bf:39:1f:12:1e:a5:86:d2: af:9c:ff:a2:9c:d7:74:cd:70:1b:ed:ab:5e:32:55:2d:f3:95: 8f:f2:03:dc:0b:2b:9d:69:09:9e:f9:9f:b0:63:a4:06:02:9a: 0a:bb:0c:ea:6a:7c:cb:37:07:6c:c2:61:06:63:19:41:f6:93: a5:36:ce:44:ba:2b:ab:fd:c2:10:1d:51:05:54:ee:b0:f4:99: 16:f5:55:f3:8f:49:07:66:f9:9b:87:e2:c6:a9:a0:1a:0b:4c: 97:e8:9b:7f:f6:bc:ec:dc:32:65:f3:fd:c2:af:0c:5c:c6:0b: 00:12:9b:8a -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDALyPMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU2MzhaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKERFRTA4RjUyODdGNjY5MzEzQ0U2OTkwRjExNzQwMUIxNzk4NDhB RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0XtpE4cHzPp1ecHPt /K8Gx4103w4EKjY0CkJk2FVWiUDbsQw9b4k36DjaTK9Rb0KzbWXvQxVonobowae3 GtQ2vS2HnjVfhU0TEtUe4uaTeuswcm7N9wBgTWqS5N7FN7m8QIDjzSb86wFyGl3Q B4WxuU+FhShQOgfxpsUp8eSIW5Yo6M7uTwrO44SPYG5+N99JOL9U5cKXd4gzVYLA dSym+WLGjeshWmrzOEARQLK5143wscTQsnvKj/zTpbu9DI6SZaDKmNTGkyV5FVwl 9vS4mubOX71pDU1QYqtEnJ9tiDEgXC8xhFh8bI5tMSe51/Z5zJkPf5vpyX+MCluV lkB1AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU3uCPUof2aTE85pkPEXQBsXmEiuEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 ODUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjc4NS8zdUNQVW9mMmFURTg1cGtQRVhRQnNYbUVpdUUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3hgMA0GCSqGSIb3DQEBCwUA A4IBAQB/tLMD1xvGDc7c9PvEZsb4PcQs/GzRUJsnCKN9DI0T869PTy2DiMH/ze52 4Wpqfiq0dmFfB9klBrdlRk7xq2sMn9yL+huXzOSw0tU1dlaF89CvCjooKK9zNcYc hDnpgunbTrc4fedb1PE6RJ5J1iqtVSZOU6WKF7NT/ffrP6YDNcxjGHHkBxkzvzkf Eh6lhtKvnP+inNd0zXAb7ateMlUt85WP8gPcCyudaQme+Z+wY6QGApoKuwzqanzL NwdswmEGYxlB9pOlNs5Euiur/cIQHVEFVO6w9JkW9VXzj0kHZvmbh+LGqaAaC0yX 6Jt/9rzs3DJl8/3CrwxcxgsAEpuK -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:24 2024 by rpki-client on console-ams.rpki-client.org