$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5h1TOY8HiA3d4pTW7WfyR-iSm94.cer File: 5h1TOY8HiA3d4pTW7WfyR-iSm94.cer (raw, json) Hash identifier: lMCqWFJdDZRef438mtaYqptzYwbupFCM82mFcfiKRFM= Subject key identifier: E6:1D:53:39:8F:07:88:0D:DD:E2:94:D6:ED:67:F2:47:E8:92:9B:DE Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:51:38 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 157.66.244.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14243 (0x37a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:51:38 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E61D53398F07880DDDE294D6ED67F247E8929BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:86:8d:9c:d4:55:54:12:97:69:75:7c:fb: 31:1d:29:ef:ea:c6:b9:1b:a5:41:88:46:f3:13:53: 6b:0b:79:a8:02:e2:66:c5:e4:57:eb:cc:c9:1e:8c: de:c6:ac:94:a2:16:f3:00:42:33:f2:d0:12:85:eb: b9:8c:d1:72:ea:cc:d2:d6:67:fb:a5:2a:1f:a2:ea: db:89:8e:02:d2:a5:19:26:cd:2d:4c:94:9d:40:0f: 7d:d5:1c:27:ef:14:a4:34:67:4f:b1:06:ac:75:36: ac:a4:9c:8e:08:75:ee:1f:93:94:05:c9:e4:7f:d6: ca:7f:3d:80:1c:b4:0b:82:65:6f:94:87:37:12:b3: bf:64:5c:17:be:d2:95:7c:2a:8f:d0:e6:6f:53:89: fb:4f:2a:fe:fb:c3:2a:fa:3a:3d:4a:21:53:b4:ed: 30:8a:d8:4d:8c:5c:a5:5a:95:8f:8d:f8:ef:d9:d5: 20:d6:b0:74:cd:08:41:30:bc:30:f8:bb:0b:4c:13: 41:00:90:59:9b:ea:a4:0b:03:2b:c4:ae:e0:67:01: 70:95:d0:3e:f3:96:b6:f3:05:10:0a:75:01:3c:a6: 4a:4e:44:bc:6e:a7:a6:23:5e:45:be:97:d8:20:79: eb:88:a1:d2:f9:18:b1:7a:01:c6:04:7b:b1:8f:4f: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1D:53:39:8F:07:88:0D:DD:E2:94:D6:ED:67:F2:47:E8:92:9B:DE X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/5h1TOY8HiA3d4pTW7WfyR-iSm94.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.244.0/23 Signature Algorithm: sha256WithRSAEncryption 00:f1:a4:32:61:63:a6:75:7b:09:29:0b:30:92:63:0b:fe:5a: dc:36:e4:b9:0c:63:7b:6b:f6:78:49:c6:95:b8:5e:34:ee:50: fc:49:ab:1f:95:31:7f:c6:2d:94:51:9a:35:51:ab:38:40:7d: cc:6a:b7:23:e7:f5:11:bf:0e:67:8a:61:1e:60:17:b4:c3:ee: 04:5d:aa:52:7a:ef:4d:82:5e:2c:ca:45:24:b7:98:ac:44:f7: b6:66:a4:39:01:93:92:94:71:cc:c7:46:f3:57:3e:77:75:9d: d0:3d:0f:3b:e8:91:a4:c6:8c:fd:90:f1:3e:e1:32:2a:8e:99: 5b:a3:a4:ce:cc:20:d7:ff:e9:92:37:f5:68:68:d5:49:d8:56: 52:35:3e:52:78:a5:27:15:b9:99:3b:9c:75:0c:cb:18:73:9b: b1:9b:39:b9:3e:1f:9d:6f:fc:bc:93:58:5a:5c:54:97:38:9f: 4e:8c:c7:e2:c9:d0:9b:31:75:1e:2e:a3:fe:92:db:f2:cd:b9: f5:9e:c8:5d:1a:ce:31:04:a2:30:88:40:1c:80:8f:0d:9c:2f: b4:e7:dc:5d:7e:37:54:62:a5:38:91:33:11:ec:21:6e:cd:6e: 70:04:56:6e:ad:5c:32:c7:25:83:af:bb:ae:c5:03:2d:55:bf: ae:8d:79:a6 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN6MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTEzOFoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoRTYxRDUzMzk4RjA3ODgwRERERTI5NEQ2RUQ2N0YyNDdFODkyOUJE RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvnho2c1FVUEpdpdXz7 MR0p7+rGuRulQYhG8xNTawt5qALiZsXkV+vMyR6M3saslKIW8wBCM/LQEoXruYzR curM0tZn+6UqH6Lq24mOAtKlGSbNLUyUnUAPfdUcJ+8UpDRnT7EGrHU2rKScjgh1 7h+TlAXJ5H/Wyn89gBy0C4Jlb5SHNxKzv2RcF77SlXwqj9Dmb1OJ+08q/vvDKvo6 PUohU7TtMIrYTYxcpVqVj43479nVINawdM0IQTC8MPi7C0wTQQCQWZvqpAsDK8Su 4GcBcJXQPvOWtvMFEAp1ATymSk5EvG6npiNeRb6X2CB564ih0vkYsXoBxgR7sY9P l8cCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTmHVM5jweIDd3ilNbtZ/JH6JKb3jAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjc5LzVoMVRPWThIaUEzZDRwVFc3V2Z5Ui1pU205NC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQvQwDQYJKoZIhvcNAQELBQAD ggEBAADxpDJhY6Z1ewkpCzCSYwv+Wtw25LkMY3tr9nhJxpW4XjTuUPxJqx+VMX/G LZRRmjVRqzhAfcxqtyPn9RG/DmeKYR5gF7TD7gRdqlJ6702CXizKRSS3mKxE97Zm pDkBk5KUcczHRvNXPnd1ndA9DzvokaTGjP2Q8T7hMiqOmVujpM7MINf/6ZI39Who 1UnYVlI1PlJ4pScVuZk7nHUMyxhzm7GbObk+H51v/LyTWFpcVJc4n06Mx+LJ0Jsx dR4uo/6S2/LNufWeyF0azjEEojCIQByAjw2cL7Tn3F1+N1RipTiRMxHsIW7NbnAE Vm6tXDLHJYOvu67FAy1Vv66NeaY= -----END CERTIFICATE-----Generated at Sat Nov 23 01:15:49 2024 by rpki-client on console-fra.rpki-client.org