$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer (raw, json) Hash identifier: Y2bgWEObBBMMlPOr3TN1DU7KJFZZEOVE6oFy7lsvoZg= Subject key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: 9F21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 08 Aug 2023 05:00:31 +0000 Certificate not after: Fri 07 Jun 2024 02:16:11 +0000 Subordinate resources: IP: 103.72.120.0/22 IP: 2406:dd80::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 09:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40737 (0x9f21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 8 05:00:31 2023 GMT Not After : Jun 7 02:16:11 2024 GMT Subject: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:81:52:79:17:03:89:c7:be:2e:7b:44:10:72: 90:23:4e:fe:67:ca:ad:23:b0:04:62:8a:97:6f:52: 21:c3:c7:81:52:4a:cd:69:1d:66:5e:93:e6:6d:33: 45:f9:26:ba:4b:03:26:4f:f1:e6:0a:b2:17:e7:18: d1:07:9e:b1:a8:8a:12:e0:bc:42:c2:8f:96:f6:53: 82:53:06:dd:20:2a:a1:96:3c:aa:b1:df:c5:ed:fa: a5:e4:99:02:03:c6:c4:09:1b:ec:c4:0c:5a:f7:e5: 3d:60:fb:81:a0:5a:e6:ff:d8:85:2c:55:7a:f5:95: 4b:6c:ae:69:b9:80:bb:a3:ae:4c:bc:4b:f1:9d:f1: 7b:6b:19:bd:a0:0e:fd:3d:6b:dc:3b:21:5d:f7:82: b7:74:99:ba:a8:0b:e9:ff:8d:4c:6d:81:a6:3a:94: 25:e4:e4:c1:c6:06:1f:62:64:34:fc:8d:26:b3:14: 29:9b:53:f1:60:f0:a7:2a:74:07:a4:4d:b9:7c:f2: 23:4f:b1:ff:0d:af:de:e7:dd:24:64:ff:0c:56:33: 57:99:39:79:b3:c2:2d:f8:3e:20:24:b1:54:96:90: cc:2b:56:a2:39:f8:c0:d4:89:d7:40:79:09:95:b3: e4:35:88:50:c7:c1:a3:a4:c9:55:13:32:0d:92:b9: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 IPv6: 2406:dd80::/32 Signature Algorithm: sha256WithRSAEncryption 78:e8:35:c7:d9:06:d8:96:fe:be:ff:29:f2:f0:ce:2e:2e:26: 0d:1e:4c:22:95:49:36:f6:63:f4:9f:e7:0d:b2:67:54:a2:19: 4b:ed:61:4e:79:33:ee:24:a5:23:21:45:a6:e0:8d:bb:52:2f: 45:4a:c7:61:48:dd:18:e9:a6:07:15:44:6e:63:6e:08:11:12: 3f:0e:11:d1:6e:51:00:9e:ef:da:7c:f6:46:f0:3d:ee:0a:5c: be:31:37:33:da:72:d5:49:37:85:a1:36:b3:83:e7:eb:da:b0: d6:35:10:4a:c2:98:15:08:58:d3:8b:ff:79:72:74:7a:91:4b: ce:7d:c8:43:5f:4e:cb:a7:42:8e:86:d0:f2:71:9e:b2:52:41: 09:e5:b2:3f:ff:af:5d:19:1b:f2:00:f1:7d:7d:70:67:50:84: 3e:d0:a8:2e:dd:4c:59:b8:5a:65:d3:09:b0:af:3d:61:35:9c: b6:b4:41:2b:37:20:c0:e3:36:e6:09:b6:f1:d6:91:eb:bb:2f: 67:98:46:03:d8:2f:5d:54:66:e9:6c:08:2c:59:60:c0:04:a7: b6:4d:37:d9:f2:4c:f0:c8:27:07:5f:f5:4b:5e:58:cf:9f:01: fc:75:41:76:95:5e:f3:82:95:78:3a:40:30:62:22:9d:97:1e: 2b:ae:90:2b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDAJ8hMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yMzA4MDgwNTAwMzFaFw0yNDA2MDcwMjE2MTFaMDMx MTAvBgNVBAMTKEU5OEE1OTU4NjY1RjM0QTI2QTNEQ0FGOTRDNjNCMzNBMDcwNTlB NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0gVJ5FwOJx74ue0QQ cpAjTv5nyq0jsARiipdvUiHDx4FSSs1pHWZek+ZtM0X5JrpLAyZP8eYKshfnGNEH nrGoihLgvELCj5b2U4JTBt0gKqGWPKqx38Xt+qXkmQIDxsQJG+zEDFr35T1g+4Gg Wub/2IUsVXr1lUtsrmm5gLujrky8S/Gd8XtrGb2gDv09a9w7IV33grd0mbqoC+n/ jUxtgaY6lCXk5MHGBh9iZDT8jSazFCmbU/Fg8KcqdAekTbl88iNPsf8Nr97n3SRk /wxWM1eZOXmzwi34PiAksVSWkMwrVqI5+MDUiddAeQmVs+Q1iFDHwaOkyVUTMg2S uVMzAgMBAAGjggJkMIICYDAdBgNVHQ4EFgQU6YpZWGZfNKJqPcr5TGOzOgcFmlMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3NS82WXBaV0daZk5LSnFQY3I1VEdPek9nY0ZtbE0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ0h4MA0EAgACMAcDBQAkBt2A MA0GCSqGSIb3DQEBCwUAA4IBAQB46DXH2QbYlv6+/yny8M4uLiYNHkwilUk29mP0 n+cNsmdUohlL7WFOeTPuJKUjIUWm4I27Ui9FSsdhSN0Y6aYHFURuY24IERI/DhHR blEAnu/afPZG8D3uCly+MTcz2nLVSTeFoTazg+fr2rDWNRBKwpgVCFjTi/95cnR6 kUvOfchDX07Lp0KOhtDycZ6yUkEJ5bI//69dGRvyAPF9fXBnUIQ+0Kgu3UxZuFpl 0wmwrz1hNZy2tEErNyDA4zbmCbbx1pHruy9nmEYD2C9dVGbpbAgsWWDABKe2TTfZ 8kzwyCcHX/VLXljPnwH8dUF2lV7zgpV4OkAwYiKdlx4rrpAr -----END CERTIFICATE-----Generated at Mon May 6 03:48:45 2024 by rpki-client on console-ams.rpki-client.org