$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5NFB-TO2ocZem2mg8wQuJNaNEyg.cer File: 5NFB-TO2ocZem2mg8wQuJNaNEyg.cer (raw, json) Hash identifier: H/k++f933YNj4mIaN9OT+07L2A39RYgIP1WKigS++kA= Subject key identifier: E4:D1:41:F9:33:B6:A1:C6:5E:9B:69:A0:F3:04:2E:24:D6:8D:13:28 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:55:43 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:bf20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48211 (0xbc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:55:43 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E4D141F933B6A1C65E9B69A0F3042E24D68D1328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:47:dd:f7:d6:54:62:42:8b:4c:39:97:84:10: 89:94:b1:b8:4e:cd:a7:2b:fc:0e:84:f9:32:a6:66: f5:51:87:65:d9:71:b0:f8:35:85:a3:9b:71:a8:66: a7:58:38:a0:97:f1:9a:40:61:3e:ac:5d:90:36:fc: 02:d1:28:31:cf:39:ff:ee:33:b6:7e:16:90:45:ee: 3f:b9:e6:b8:c2:e5:45:5d:0f:4f:56:a5:71:08:0a: 79:9d:0d:e0:b2:85:1e:bb:8a:b9:95:92:76:bc:f8: 3a:c8:67:36:f9:b9:3f:4e:b9:6b:66:59:af:df:ae: d6:15:9d:37:49:50:cc:17:1a:0b:29:c5:7e:5f:69: a2:3a:3a:c1:17:3a:e2:53:f7:35:6d:82:c5:63:26: 6e:fe:3d:bc:ba:6e:2d:99:b9:0f:f8:00:30:96:c1: 2d:82:b9:b0:61:25:74:90:00:b3:86:76:75:74:3a: 8c:fe:f9:33:13:f9:12:76:2c:da:e0:4f:99:e2:06: bc:16:88:5c:f9:25:50:f6:f0:44:98:c3:77:0e:1f: 83:1b:1e:e0:5c:aa:5b:b1:cf:e8:a8:de:bb:94:80: 61:25:91:43:cf:da:de:d8:a3:c3:e7:27:fd:42:8a: 31:a8:cf:68:9a:0e:d3:57:fa:11:e7:2d:ee:0e:26: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D1:41:F9:33:B6:A1:C6:5E:9B:69:A0:F3:04:2E:24:D6:8D:13:28 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/5NFB-TO2ocZem2mg8wQuJNaNEyg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:bf20::/32 Signature Algorithm: sha256WithRSAEncryption 8b:46:66:f1:e8:05:81:b0:e5:4b:ef:66:65:43:8e:c8:ad:a1: 8f:30:f6:d4:ca:14:7a:e8:fa:a7:8d:09:01:d0:c2:53:8a:9d: 5c:1c:71:f3:8c:f0:7c:c2:e1:d0:8a:5e:15:3a:54:5a:24:e1: 44:55:7b:7d:8e:c4:a6:8f:ed:ed:9d:6f:b6:f3:4b:b8:bd:a4: ef:d2:6d:01:24:cb:d2:eb:88:cb:e5:2a:4b:6c:51:34:6a:64: b8:ef:5c:5d:2c:8e:82:ba:2c:ad:7b:04:a0:4d:c7:0b:83:42: 9e:98:70:f6:27:d0:ed:78:f9:e3:50:25:c1:ae:b8:3c:27:c1: bd:cb:8e:53:60:b1:b8:f1:b7:3b:f6:1c:d3:46:25:cb:3e:94: 8c:99:5d:2b:b4:4d:22:9f:76:78:e1:fa:f0:12:35:f6:e4:78: ee:a6:b3:37:1f:aa:21:88:f1:f4:17:38:12:ff:6c:1f:4e:68: 08:5e:6f:73:c6:2d:61:97:37:27:ba:53:55:d2:50:46:3a:5c: 77:ba:81:0c:54:16:3d:84:33:0f:99:bb:68:25:6b:c1:26:0f: 57:e1:4a:f9:74:4d:3b:37:9a:62:6c:e6:23:be:02:df:70:1b: 57:40:53:7c:a0:7b:aa:32:33:be:79:0f:ed:15:2b:b4:b5:0c: a5:c4:3b:ba -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALxTMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU1NDNaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEU0RDE0MUY5MzNCNkExQzY1RTlCNjlBMEYzMDQyRTI0RDY4RDEz MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcR9331lRiQotMOZeE EImUsbhOzacr/A6E+TKmZvVRh2XZcbD4NYWjm3GoZqdYOKCX8ZpAYT6sXZA2/ALR KDHPOf/uM7Z+FpBF7j+55rjC5UVdD09WpXEICnmdDeCyhR67irmVkna8+DrIZzb5 uT9OuWtmWa/frtYVnTdJUMwXGgspxX5faaI6OsEXOuJT9zVtgsVjJm7+Pby6bi2Z uQ/4ADCWwS2CubBhJXSQALOGdnV0Ooz++TMT+RJ2LNrgT5niBrwWiFz5JVD28ESY w3cOH4MbHuBcqluxz+io3ruUgGElkUPP2t7Yo8PnJ/1CijGoz2iaDtNX+hHnLe4O Jru3AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQU5NFB+TO2ocZem2mg8wQuJNaNEygw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MTIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMxMi81TkZCLVRPMm9jWmVtMm1nOHdRdUpOYU5FeWcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAG/IDANBgkqhkiG9w0BAQsF AAOCAQEAi0Zm8egFgbDlS+9mZUOOyK2hjzD21MoUeuj6p40JAdDCU4qdXBxx84zw fMLh0IpeFTpUWiThRFV7fY7Epo/t7Z1vtvNLuL2k79JtASTL0uuIy+UqS2xRNGpk uO9cXSyOgrosrXsEoE3HC4NCnphw9ifQ7Xj541Alwa64PCfBvcuOU2CxuPG3O/Yc 00Ylyz6UjJldK7RNIp92eOH68BI19uR47qazNx+qIYjx9Bc4Ev9sH05oCF5vc8Yt YZc3J7pTVdJQRjpcd7qBDFQWPYQzD5m7aCVrwSYPV+FK+XRNOzeaYmzmI74C33Ab V0BTfKB7qjIzvnkP7RUrtLUMpcQ7ug== -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:35 2024 by rpki-client on console-ams.rpki-client.org