$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer File: 5pgpU98Hd67biO4_8goVJkBXF4U.cer (raw, json) Hash identifier: K+BgpfOVp6Agxu+n185bVQqbpyoWa7vAy9/Uv3oTYJg= Subject key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: ADFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:19:09 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 45079 IP: 101.52.0.0/16 IP: 2402:6f40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 00:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44539 (0xadfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:19:09 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:3d:fc:bd:80:12:a5:3e:ef:3b:8e:ed:85: 55:29:61:88:92:b7:12:f3:7f:26:c5:2e:5c:9f:96: fa:7a:06:21:05:f3:e9:7a:97:a5:e9:7a:6d:ad:99: 09:45:28:d0:f7:13:8b:5e:16:62:94:32:d9:97:3c: 4b:42:91:91:40:5d:d8:25:1a:2d:8e:b4:61:b0:55: 63:81:4e:2f:27:2a:7c:84:24:4f:74:37:56:ca:c8: 9a:01:24:89:26:02:7e:46:e1:60:92:a5:b0:51:fe: e5:b8:54:73:ba:6b:7b:78:af:71:0a:18:c8:e8:08: 80:49:d4:6d:ef:b4:12:52:c5:f9:00:2c:ee:05:fd: f9:1e:cc:b9:62:f3:23:d4:81:c4:92:9e:ac:d3:32: 9d:15:80:ae:13:36:0f:9d:af:68:e2:c6:c4:39:42: 42:cc:57:3d:6e:05:35:46:7b:03:90:17:dd:b4:09: d0:1d:a7:e2:7a:d8:1e:eb:64:33:82:25:f9:4e:22: 2e:e1:2a:0f:1e:76:24:c7:0d:20:7f:7f:13:d8:9a: 16:8e:ea:e0:24:8b:16:16:ee:3c:e0:a2:57:41:df: 2d:e7:d6:6d:f8:2a:e8:ef:46:8c:ad:3a:4c:6c:eb: 23:2d:cb:67:7a:0a:9f:12:6b:d5:a1:91:d3:12:3c: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45079 sbgp-ipAddrBlock: critical IPv4: 101.52.0.0/16 IPv6: 2402:6f40::/32 Signature Algorithm: sha256WithRSAEncryption ac:90:0f:2e:0b:a9:b4:7c:67:95:f8:d9:29:c5:43:ea:e8:d2: 71:c3:89:01:2c:f5:9c:3f:fd:b5:22:d4:6b:84:8e:22:89:d4: c2:f4:12:a6:8a:fd:54:ec:f9:42:57:46:7d:e4:c6:e9:3c:7b: 48:35:4f:01:db:eb:51:36:eb:db:54:dc:66:fd:a1:26:fa:c4: 63:ca:8a:c3:a0:f7:fa:f4:43:68:fb:00:82:3a:20:0e:2c:92: 7f:5d:a4:79:33:24:e1:2c:0a:2b:30:69:cd:c0:65:a7:aa:85: 6b:33:57:b4:de:e3:60:13:d0:e0:a4:c0:48:ef:2a:8f:96:ac: c6:63:b1:c6:d6:30:55:98:06:8c:e4:e7:62:88:91:7b:61:4b: cf:a2:f8:6d:a9:12:d9:05:61:27:b0:f4:99:0b:dd:bc:04:2a: e4:52:f6:a1:58:6c:f1:97:6b:9e:8d:d1:56:48:52:db:59:2a: b4:36:5d:da:44:1b:d9:06:fc:dd:8a:28:29:16:51:ba:9f:0d: 86:13:a6:d7:8e:9c:df:4c:a8:a1:04:21:93:44:2c:3e:87:22: be:7e:df:b2:bd:15:42:54:45:c6:2d:82:f4:80:75:ca:13:65: 3f:cd:4c:96:31:50:4b:90:3a:b9:d1:4f:82:e9:39:28:e7:87: c7:98:47:e9 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIDAK37MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTE5MDlaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKEU2OTgyOTUzREYwNzc3QUVEQjg4RUUzRkYyMEExNTI2NDA1NzE3 ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0T38vYASpT7vO47t hVUpYYiStxLzfybFLlyflvp6BiEF8+l6l6Xpem2tmQlFKND3E4teFmKUMtmXPEtC kZFAXdglGi2OtGGwVWOBTi8nKnyEJE90N1bKyJoBJIkmAn5G4WCSpbBR/uW4VHO6 a3t4r3EKGMjoCIBJ1G3vtBJSxfkALO4F/fkezLli8yPUgcSSnqzTMp0VgK4TNg+d r2jixsQ5QkLMVz1uBTVGewOQF920CdAdp+J62B7rZDOCJflOIi7hKg8ediTHDSB/ fxPYmhaO6uAkixYW7jzgoldB3y3n1m34KujvRoytOkxs6yMty2d6Cp8Sa9WhkdMS PKEdAgMBAAGjggJ9MIICeTAdBgNVHQ4EFgQU5pgpU98Hd67biO4/8goVJkBXF4Uw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzcw OS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC83MDkvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAsBcwLQYIKwYBBQUHAQcBAf8EHjAcMAsE AgABMAUDAwBlNDANBAIAAjAHAwUAJAJvQDANBgkqhkiG9w0BAQsFAAOCAQEArJAP LguptHxnlfjZKcVD6ujSccOJASz1nD/9tSLUa4SOIonUwvQSpor9VOz5QldGfeTG 6Tx7SDVPAdvrUTbr21TcZv2hJvrEY8qKw6D3+vRDaPsAgjogDiySf12keTMk4SwK KzBpzcBlp6qFazNXtN7jYBPQ4KTASO8qj5asxmOxxtYwVZgGjOTnYoiRe2FLz6L4 bakS2QVhJ7D0mQvdvAQq5FL2oVhs8Zdrno3RVkhS21kqtDZd2kQb2Qb83YooKRZR up8NhhOm146c30yooQQhk0QsPocivn7fsr0VQlRFxi2C9IB1yhNlP81MljFQS5A6 udFPguk5KOeHx5hH6Q== -----END CERTIFICATE-----Generated at Sun May 19 19:42:22 2024 by rpki-client on console-fra.rpki-client.org