$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer File: 3uCPUof2aTE85pkPEXQBsXmEiuE.cer (raw, json) Hash identifier: YQ6tHHlKAiLMliYp9YiDrOqvpo4soAQYvS9KxPe6qc0= Subject key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: B28D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 09 May 2024 07:38:49 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 103.120.96.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 11:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45709 (0xb28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: May 9 07:38:49 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=DEE08F5287F669313CE6990F117401B179848AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5e:da:44:e1:c1:f3:3e:9d:5e:70:73:ed:fc: af:06:c7:8d:74:df:0e:04:2a:36:34:0a:42:64:d8: 55:56:89:40:db:b1:0c:3d:6f:89:37:e8:38:da:4c: af:51:6f:42:b3:6d:65:ef:43:15:68:9e:86:e8:c1: a7:b7:1a:d4:36:bd:2d:87:9e:35:5f:85:4d:13:12: d5:1e:e2:e6:93:7a:eb:30:72:6e:cd:f7:00:60:4d: 6a:92:e4:de:c5:37:b9:bc:40:80:e3:cd:26:fc:eb: 01:72:1a:5d:d0:07:85:b1:b9:4f:85:85:28:50:3a: 07:f1:a6:c5:29:f1:e4:88:5b:96:28:e8:ce:ee:4f: 0a:ce:e3:84:8f:60:6e:7e:37:df:49:38:bf:54:e5: c2:97:77:88:33:55:82:c0:75:2c:a6:f9:62:c6:8d: eb:21:5a:6a:f3:38:40:11:40:b2:b9:d7:8d:f0:b1: c4:d0:b2:7b:ca:8f:fc:d3:a5:bb:bd:0c:8e:92:65: a0:ca:98:d4:c6:93:25:79:15:5c:25:f6:f4:b8:9a: e6:ce:5f:bd:69:0d:4d:50:62:ab:44:9c:9f:6d:88: 31:20:5c:2f:31:84:58:7c:6c:8e:6d:31:27:b9:d7: f6:79:cc:99:0f:7f:9b:e9:c9:7f:8c:0a:5b:95:96: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.120.96.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:fb:21:fa:20:79:b8:89:72:ea:e8:a5:b1:87:3f:4c:94:ad: df:80:79:60:57:25:27:40:58:13:d4:66:0d:f7:9c:c8:a7:31: 32:48:6b:43:aa:7a:e1:66:62:b1:97:61:77:fc:54:fa:d3:00: c1:6f:d1:5f:ed:01:99:6a:3e:41:7c:10:7e:cc:bc:6c:d7:4a: 2f:b1:de:93:1f:4f:24:82:a2:cf:da:71:74:93:d9:0d:91:8b: 2f:93:d3:5e:6d:76:95:d0:a4:9b:3a:42:c3:e3:a5:c4:92:c0: d6:d7:e4:d2:27:e6:34:18:c3:a2:58:ed:86:db:a1:8e:43:3d: cb:85:03:c6:8d:9d:6d:52:ed:a1:e1:b1:b8:fc:b4:6d:46:d0: 9a:a3:0e:4c:9a:44:be:c3:ac:c8:69:20:93:e0:88:fb:51:9c: bc:e1:bd:7c:3f:43:b5:90:c6:ae:87:bf:ed:36:95:81:b9:4b: 2e:cf:78:f6:1c:b6:3b:8d:57:63:93:41:4d:4f:7b:04:d5:f3: 83:a1:ae:ce:cd:7f:7d:b2:04:67:ba:4f:67:e9:17:d9:7c:33: c9:1f:d7:f2:d9:18:b1:20:4d:94:bf:81:24:80:f7:b8:11:a9: 7b:92:e5:2e:43:8f:37:c2:51:85:92:20:bf:7e:b5:01:93:ab: c1:a0:06:cc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDALKNMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA1MDkwNzM4NDlaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKERFRTA4RjUyODdGNjY5MzEzQ0U2OTkwRjExNzQwMUIxNzk4NDhB RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0XtpE4cHzPp1ecHPt /K8Gx4103w4EKjY0CkJk2FVWiUDbsQw9b4k36DjaTK9Rb0KzbWXvQxVonobowae3 GtQ2vS2HnjVfhU0TEtUe4uaTeuswcm7N9wBgTWqS5N7FN7m8QIDjzSb86wFyGl3Q B4WxuU+FhShQOgfxpsUp8eSIW5Yo6M7uTwrO44SPYG5+N99JOL9U5cKXd4gzVYLA dSym+WLGjeshWmrzOEARQLK5143wscTQsnvKj/zTpbu9DI6SZaDKmNTGkyV5FVwl 9vS4mubOX71pDU1QYqtEnJ9tiDEgXC8xhFh8bI5tMSe51/Z5zJkPf5vpyX+MCluV lkB1AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU3uCPUof2aTE85pkPEXQBsXmEiuEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 ODUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjc4NS8zdUNQVW9mMmFURTg1cGtQRVhRQnNYbUVpdUUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3hgMA0GCSqGSIb3DQEBCwUA A4IBAQAu+yH6IHm4iXLq6KWxhz9MlK3fgHlgVyUnQFgT1GYN95zIpzEySGtDqnrh ZmKxl2F3/FT60wDBb9Ff7QGZaj5BfBB+zLxs10ovsd6TH08kgqLP2nF0k9kNkYsv k9NebXaV0KSbOkLD46XEksDW1+TSJ+Y0GMOiWO2G26GOQz3LhQPGjZ1tUu2h4bG4 /LRtRtCaow5MmkS+w6zIaSCT4Ij7UZy84b18P0O1kMauh7/tNpWBuUsuz3j2HLY7 jVdjk0FNT3sE1fODoa7OzX99sgRnuk9n6RfZfDPJH9fy2RixIE2Uv4EkgPe4Eal7 kuUuQ483wlGFkiC/frUBk6vBoAbM -----END CERTIFICATE-----Generated at Fri May 17 06:49:34 2024 by rpki-client on console-ams.rpki-client.org