$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5s9GyFg2VMtp4t_DroPdwUXkkyo.cer File: 5s9GyFg2VMtp4t_DroPdwUXkkyo.cer (raw, json) Hash identifier: L/ABXnbcC488tUohPibtobRPBtWZQ1iyygZXRgh9Soo= Subject key identifier: E6:CF:46:C8:58:36:54:CB:69:E2:DF:C3:AE:83:DD:C1:45:E4:93:2A Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:52:07 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 157.10.34.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14247 (0x37a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:52:07 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E6CF46C8583654CB69E2DFC3AE83DDC145E4932A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:21:cc:cc:09:09:d5:0e:21:10:c2:3f:9b: bd:77:4e:6f:f5:fd:c7:08:be:57:ad:0a:46:5f:60: 7b:8d:6a:a9:1c:d4:2d:61:ad:24:e3:d7:7e:ad:98: fd:43:d6:21:0b:e9:65:0c:2a:15:07:6c:5e:6d:c4: 43:d7:55:5f:75:37:ed:fc:06:60:2e:2c:ed:b8:55: 41:0c:80:f7:43:65:a9:0b:6d:ec:de:6e:b0:b6:80: 37:7d:16:80:11:18:f3:b6:8b:ea:f1:6c:a7:f3:c0: 50:60:91:87:fe:f1:3b:9e:50:e2:3a:00:da:87:f6: 6f:39:f8:d9:a3:00:15:70:32:28:89:12:87:be:c1: 7d:ff:8a:98:51:e6:e6:cb:82:e9:02:7e:79:c7:ff: 96:ea:8b:7d:b1:a0:fd:be:63:66:b1:70:0d:df:05: 9c:0e:e4:7a:ca:8e:16:87:b0:60:04:04:83:d9:6b: 39:31:dd:82:59:5d:5d:10:93:32:38:66:38:02:15: 87:de:5f:e6:06:dd:37:8b:47:09:3f:c1:a7:26:15: fd:09:18:3a:6c:76:46:d9:9e:2f:62:3a:9f:29:03: d8:ab:c9:20:28:16:a0:18:54:53:62:37:33:80:bc: 0c:a2:50:d9:74:34:13:16:12:13:4f:84:e7:1e:a2: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CF:46:C8:58:36:54:CB:69:E2:DF:C3:AE:83:DD:C1:45:E4:93:2A X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.34.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:90:b8:3f:11:ee:c5:00:e1:56:37:4a:87:fc:25:6d:27:91: 7c:6f:44:ff:5f:fd:37:32:7f:b5:de:79:ec:25:20:87:96:6d: 5a:d9:5e:8a:e0:30:d6:e7:d2:96:26:cc:39:5b:ed:1a:32:82: 7d:67:a6:b6:4e:8a:9b:17:a9:1f:21:46:a1:fe:03:46:21:1f: 94:d4:85:c5:d4:84:99:55:ae:53:88:18:90:a0:49:d2:b8:c3: b9:c0:be:3d:9e:1e:94:13:06:c1:78:16:73:f4:49:ef:bb:cf: b6:cb:d2:b0:ec:98:25:ad:4e:d9:70:14:f9:23:57:ce:6c:c7: a1:ee:66:1f:da:89:24:06:10:e5:c5:d6:0b:7e:2d:11:5b:37: ac:72:6a:a9:46:9b:ac:10:30:27:ca:59:e4:7b:1d:13:ab:3f: e5:25:54:fb:8d:af:4c:fc:c8:04:b4:71:a8:be:8d:90:e4:60: d7:b5:f9:c7:d3:db:5d:c8:ca:7b:da:f6:5a:94:33:7c:dc:45: bc:2a:91:1a:96:51:d7:98:3a:2a:7a:d1:d3:34:5b:36:ae:ca: 01:7b:e6:6d:87:10:63:a6:c8:59:0a:06:18:a9:c0:91:64:d4: cb:71:e9:b6:91:ed:21:e1:f3:d5:1b:25:0d:cb:4d:34:0c:e5: 8d:0e:7a:1f -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN6cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTIwN1oXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoRTZDRjQ2Qzg1ODM2NTRDQjY5RTJERkMzQUU4M0REQzE0NUU0OTMy QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMPGIczMCQnVDiEQwj+b vXdOb/X9xwi+V60KRl9ge41qqRzULWGtJOPXfq2Y/UPWIQvpZQwqFQdsXm3EQ9dV X3U37fwGYC4s7bhVQQyA90NlqQtt7N5usLaAN30WgBEY87aL6vFsp/PAUGCRh/7x O55Q4joA2of2bzn42aMAFXAyKIkSh77Bff+KmFHm5suC6QJ+ecf/luqLfbGg/b5j ZrFwDd8FnA7kesqOFoewYAQEg9lrOTHdglldXRCTMjhmOAIVh95f5gbdN4tHCT/B pyYV/QkYOmx2RtmeL2I6nykD2KvJICgWoBhUU2I3M4C8DKJQ2XQ0ExYSE0+E5x6i yX0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTmz0bIWDZUy2ni38Oug93BReSTKjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjUyLzVzOUd5RmcyVk10cDR0X0Ryb1Bkd1VYa2t5by5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdCiIwDQYJKoZIhvcNAQELBQAD ggEBAB2QuD8R7sUA4VY3Sof8JW0nkXxvRP9f/Tcyf7XeeewlIIeWbVrZXorgMNbn 0pYmzDlb7Roygn1nprZOipsXqR8hRqH+A0YhH5TUhcXUhJlVrlOIGJCgSdK4w7nA vj2eHpQTBsF4FnP0Se+7z7bL0rDsmCWtTtlwFPkjV85sx6HuZh/aiSQGEOXF1gt+ LRFbN6xyaqlGm6wQMCfKWeR7HROrP+UlVPuNr0z8yAS0cai+jZDkYNe1+cfT213I ynva9lqUM3zcRbwqkRqWUdeYOip60dM0WzauygF75m2HEGOmyFkKBhipwJFk1Mtx 6baR7SHh89UbJQ3LTTQM5Y0Oeh8= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:13 2024 by rpki-client on console-fra.rpki-client.org