$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5s9GyFg2VMtp4t_DroPdwUXkkyo.cer File: 5s9GyFg2VMtp4t_DroPdwUXkkyo.cer (raw, json) Hash identifier: m7H+8G293vOXYCrfVBy1kTCqHkG6O9QkTtBdisVxI+o= Subject key identifier: E6:CF:46:C8:58:36:54:CB:69:E2:DF:C3:AE:83:DD:C1:45:E4:93:2A Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 31E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:22:01 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 157.10.34.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 17:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12777 (0x31e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Feb 1 01:22:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E6CF46C8583654CB69E2DFC3AE83DDC145E4932A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:21:cc:cc:09:09:d5:0e:21:10:c2:3f:9b: bd:77:4e:6f:f5:fd:c7:08:be:57:ad:0a:46:5f:60: 7b:8d:6a:a9:1c:d4:2d:61:ad:24:e3:d7:7e:ad:98: fd:43:d6:21:0b:e9:65:0c:2a:15:07:6c:5e:6d:c4: 43:d7:55:5f:75:37:ed:fc:06:60:2e:2c:ed:b8:55: 41:0c:80:f7:43:65:a9:0b:6d:ec:de:6e:b0:b6:80: 37:7d:16:80:11:18:f3:b6:8b:ea:f1:6c:a7:f3:c0: 50:60:91:87:fe:f1:3b:9e:50:e2:3a:00:da:87:f6: 6f:39:f8:d9:a3:00:15:70:32:28:89:12:87:be:c1: 7d:ff:8a:98:51:e6:e6:cb:82:e9:02:7e:79:c7:ff: 96:ea:8b:7d:b1:a0:fd:be:63:66:b1:70:0d:df:05: 9c:0e:e4:7a:ca:8e:16:87:b0:60:04:04:83:d9:6b: 39:31:dd:82:59:5d:5d:10:93:32:38:66:38:02:15: 87:de:5f:e6:06:dd:37:8b:47:09:3f:c1:a7:26:15: fd:09:18:3a:6c:76:46:d9:9e:2f:62:3a:9f:29:03: d8:ab:c9:20:28:16:a0:18:54:53:62:37:33:80:bc: 0c:a2:50:d9:74:34:13:16:12:13:4f:84:e7:1e:a2: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CF:46:C8:58:36:54:CB:69:E2:DF:C3:AE:83:DD:C1:45:E4:93:2A X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3252/5s9GyFg2VMtp4t_DroPdwUXkkyo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.34.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:30:8f:54:51:6e:cf:f2:69:d4:11:8f:bd:e9:ee:e0:e9:b9: 3d:0f:98:d1:04:a1:0c:de:c3:9c:63:b1:a2:88:19:17:0a:ee: 74:ee:e1:0c:e0:14:ed:b8:4b:ee:a2:d8:46:47:54:c1:12:96: 11:d7:65:c7:6c:e8:e4:ea:9e:32:ef:99:00:1e:ec:e8:62:dd: eb:42:ea:50:ce:45:10:dc:b1:65:b8:08:8a:76:90:ac:67:2e: b8:98:f5:6d:70:0b:9c:6a:eb:e8:14:3b:8f:b8:e1:3d:14:86: 21:fb:02:6a:e7:c6:a0:7a:6c:44:e9:d3:9c:53:74:27:a7:98: 00:6a:22:ed:57:81:b5:42:88:5e:1d:2b:a3:f6:8b:7a:22:81: d1:55:ce:84:39:b9:bf:30:dc:81:9d:1a:90:ea:c8:07:65:60: 1b:3b:24:c4:93:3c:b7:68:9d:c8:ca:aa:c3:d3:a7:cd:52:00: f8:1a:64:23:30:e0:04:ff:c0:a0:a0:2b:ca:3d:95:bb:63:04: 86:c4:48:d2:74:47:76:37:db:94:83:92:ed:bb:26:da:8f:f9: 90:3d:7a:ae:c2:cc:25:39:6b:ba:71:27:bb:79:e3:64:4f:55: e4:1b:6c:00:3d:c4:aa:e3:9e:5b:5c:08:9d:26:6d:1d:8e:a3: 15:0c:fc:78 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICMekwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDIwMTAxMjIwMVoXDTI1MDEzMTAxMTM0NlowMzEx MC8GA1UEAxMoRTZDRjQ2Qzg1ODM2NTRDQjY5RTJERkMzQUU4M0REQzE0NUU0OTMy QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMPGIczMCQnVDiEQwj+b vXdOb/X9xwi+V60KRl9ge41qqRzULWGtJOPXfq2Y/UPWIQvpZQwqFQdsXm3EQ9dV X3U37fwGYC4s7bhVQQyA90NlqQtt7N5usLaAN30WgBEY87aL6vFsp/PAUGCRh/7x O55Q4joA2of2bzn42aMAFXAyKIkSh77Bff+KmFHm5suC6QJ+ecf/luqLfbGg/b5j ZrFwDd8FnA7kesqOFoewYAQEg9lrOTHdglldXRCTMjhmOAIVh95f5gbdN4tHCT/B pyYV/QkYOmx2RtmeL2I6nykD2KvJICgWoBhUU2I3M4C8DKJQ2XQ0ExYSE0+E5x6i yX0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTmz0bIWDZUy2ni38Oug93BReSTKjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjUyLzVzOUd5RmcyVk10cDR0X0Ryb1Bkd1VYa2t5by5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdCiIwDQYJKoZIhvcNAQELBQAD ggEBAI0wj1RRbs/yadQRj73p7uDpuT0PmNEEoQzew5xjsaKIGRcK7nTu4QzgFO24 S+6i2EZHVMESlhHXZcds6OTqnjLvmQAe7Ohi3etC6lDORRDcsWW4CIp2kKxnLriY 9W1wC5xq6+gUO4+44T0UhiH7AmrnxqB6bETp05xTdCenmABqIu1XgbVCiF4dK6P2 i3oigdFVzoQ5ub8w3IGdGpDqyAdlYBs7JMSTPLdoncjKqsPTp81SAPgaZCMw4AT/ wKCgK8o9lbtjBIbESNJ0R3Y325SDku27JtqP+ZA9eq7CzCU5a7pxJ7t542RPVeQb bAA9xKrjnltcCJ0mbR2OoxUM/Hg= -----END CERTIFICATE-----Generated at Tue May 28 13:27:17 2024 by rpki-client on console-fra.rpki-client.org