$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer File: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer (raw, json) Hash identifier: X4gvTUisQeOZXJd6Lb1xKfk1vQ1uDtSdtyhGIcgo+Pc= Subject key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:54:28 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 42.201.32.0/19 IP: 103.81.200.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48171 (0xbc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:54:28 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:bb:5c:bc:ff:4f:d6:3c:8f:28:02:2a:42: 8e:73:e4:07:a4:f6:c9:66:30:85:20:11:2c:21:74: 21:91:17:e1:00:94:00:4f:68:12:0e:dc:db:0f:8c: 73:36:21:1d:93:fb:34:73:04:8e:fe:e9:33:48:24: 7a:5e:66:56:79:2a:d7:68:91:4b:7a:11:b8:66:28: 05:46:e0:f6:87:bc:ce:94:75:e5:2a:42:01:ab:78: e0:9e:ab:d2:cb:6b:7c:60:46:ea:69:f6:47:52:74: 2c:04:97:2a:09:51:75:27:7b:f1:98:40:df:63:90: 7c:a9:b9:09:08:a3:22:9e:09:5a:be:23:1e:9e:f6: 71:6b:a1:c1:76:a1:09:d7:c4:3a:93:c8:3f:97:74: c0:df:4e:2f:26:fd:53:60:8a:41:8f:b1:27:4c:c5: 1b:52:8b:b6:6b:ca:e7:4c:9e:6c:cf:1a:4e:3a:f1: f3:70:77:20:dc:3e:7b:c1:1d:9c:a3:9c:16:93:a4: 3a:85:1a:f8:fd:72:11:36:d6:e8:ed:15:87:53:7d: 48:f0:7d:b6:52:20:3e:d9:ca:47:03:d2:15:b0:6a: 1d:12:e8:6e:10:7d:9d:d1:6e:e7:9c:7d:d2:39:1c: 83:bc:95:17:42:e9:44:72:24:32:1b:33:65:cf:d3: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.201.32.0/19 103.81.200.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:e5:4b:b2:ea:d1:1b:8f:a6:6d:50:8a:18:92:d9:d8:7e:e5: ba:e9:3b:e2:56:fd:81:94:a9:ed:8a:f4:d9:4d:f4:6d:11:06: d3:8c:2a:f6:ab:8c:f6:d3:2d:9c:b8:55:e4:5f:05:69:a3:32: 8e:da:a2:f6:59:46:5d:5f:cb:60:bc:6d:82:46:20:c0:7d:97: a7:b3:c2:df:db:3f:fe:94:29:22:af:14:a0:28:79:0d:9c:0a: bb:6a:85:55:30:5f:f9:28:2c:b2:33:1a:a4:3c:b4:35:4b:48: ff:64:f1:b1:77:50:34:ad:58:44:06:5e:42:b4:55:a9:e6:56: 4b:6c:56:08:12:d4:1f:0b:ab:b0:27:c3:77:b3:e8:06:71:a2: 84:4b:f1:c2:64:67:a6:65:be:31:62:2f:eb:49:12:d2:d0:2a: c5:88:77:12:99:76:3e:da:ec:41:4f:5e:d6:d2:a2:51:8a:8e: 25:cb:95:0a:9c:52:1d:e6:e2:ec:27:b8:5c:e1:23:17:d3:c5: 28:ce:b9:61:6e:5a:3c:75:f3:75:6c:8d:78:cf:7c:91:f0:3a: 91:5b:27:04:c6:7f:a2:a0:8c:28:12:54:ee:92:e8:27:f3:f0: 90:f2:e0:dd:87:30:4d:a1:fc:0d:c6:09:5e:bf:73:59:99:23: 2c:f9:9d:c1 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDALwrMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU0MjhaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEU4MjI4N0JCNTZGQUM4RTY3NTNBQkRFMzZCM0I2QTkzOUNCNTlB NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7btcvP9P1jyPKAIq Qo5z5Aek9slmMIUgESwhdCGRF+EAlABPaBIO3NsPjHM2IR2T+zRzBI7+6TNIJHpe ZlZ5KtdokUt6EbhmKAVG4PaHvM6UdeUqQgGreOCeq9LLa3xgRupp9kdSdCwElyoJ UXUne/GYQN9jkHypuQkIoyKeCVq+Ix6e9nFrocF2oQnXxDqTyD+XdMDfTi8m/VNg ikGPsSdMxRtSi7ZryudMnmzPGk468fNwdyDcPnvBHZyjnBaTpDqFGvj9chE21ujt FYdTfUjwfbZSID7ZykcD0hWwah0S6G4QfZ3RbuecfdI5HIO8lRdC6URyJDIbM2XP 04c7AgMBAAGjggJbMIICVzAdBgNVHQ4EFgQU6CKHu1b6yOZ1Or3jaztqk5y1mlMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIy OTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjI5MS82Q0tIdTFiNnlPWjFPcjNqYXp0cWs1eTFtbE0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFKskgAwQCZ1HIMA0GCSqGSIb3 DQEBCwUAA4IBAQB85Uuy6tEbj6ZtUIoYktnYfuW66TviVv2BlKntivTZTfRtEQbT jCr2q4z20y2cuFXkXwVpozKO2qL2WUZdX8tgvG2CRiDAfZens8Lf2z/+lCkirxSg KHkNnAq7aoVVMF/5KCyyMxqkPLQ1S0j/ZPGxd1A0rVhEBl5CtFWp5lZLbFYIEtQf C6uwJ8N3s+gGcaKES/HCZGemZb4xYi/rSRLS0CrFiHcSmXY+2uxBT17W0qJRio4l y5UKnFId5uLsJ7hc4SMX08Uozrlhblo8dfN1bI14z3yR8DqRWycExn+ioIwoElTu kugn8/CQ8uDdhzBNofwNxglev3NZmSMs+Z3B -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:36 2024 by rpki-client on console-ams.rpki-client.org