$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer File: 7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer (raw, json) Hash identifier: 6msgeyePfFzuIneO3iMNZ9lVpMQLrjaAme/lLahO5SE= Subject key identifier: EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: B162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 09 Apr 2024 19:52:32 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 2405:2340::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45410 (0xb162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 9 19:52:32 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=ECDD7332C65A6EA3C64023DACE032007D4F1D434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:7b:87:43:87:cd:d9:31:8f:71:2a:30:fa: d6:76:0f:1f:df:30:49:15:9b:d1:c5:ee:19:08:5c: 9b:65:c9:68:b0:ed:10:73:78:25:df:0b:4d:e5:5a: d1:b9:87:3c:f4:b3:1b:cf:53:43:2b:70:35:70:32: 60:30:4e:2c:83:ac:5b:37:38:ad:75:4b:27:da:c3: 1a:c0:13:c7:17:be:cd:14:2d:b3:cd:69:f1:55:cb: e2:85:e6:3d:a2:fe:4a:72:4a:db:d0:7e:2d:49:8c: d3:ef:d7:78:3b:d2:0f:7a:b9:74:bc:6f:6f:f5:ce: bd:89:55:81:dd:24:aa:fb:8f:a0:3a:79:bb:27:e5: fb:81:70:07:63:e1:a2:a0:4a:31:ee:f3:07:2f:0d: 19:88:23:c0:6a:a1:57:d3:87:26:3b:bb:ba:fb:77: 3b:f7:3d:0e:21:e7:f1:d2:d3:7a:6e:61:83:09:50: ff:52:f1:66:55:de:82:b5:2c:17:80:ab:b7:35:b4: 45:03:8e:83:45:ed:ed:89:c9:71:11:c5:ba:9c:6c: dc:ea:7b:f1:16:00:57:da:c2:48:dd:67:12:d3:c8: 09:2e:7f:e6:08:e4:3c:e4:56:be:8d:96:91:36:75: 3f:97:02:93:75:74:1f:6f:87:a6:fb:8a:0f:4f:93: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:2340::/32 Signature Algorithm: sha256WithRSAEncryption 69:78:78:40:83:ab:5d:8f:a1:33:ed:26:96:ae:b3:c9:4d:c7: 5b:ad:24:7e:f6:a2:d7:3e:ca:39:1f:b3:ab:3e:7e:98:e4:1a: 15:a1:9b:84:f4:63:50:1a:ea:53:e5:e3:5e:0f:e8:15:ae:df: 7b:85:fc:5b:28:67:d1:0a:10:90:fb:5c:f9:e6:b3:27:7f:6e: aa:a8:d3:50:4c:82:54:d7:2b:cd:76:0f:df:97:97:ab:91:60: 83:1f:66:76:96:f8:6e:87:ca:80:92:cc:ad:f1:90:4b:78:f2: 24:ac:e2:9c:07:c7:0a:52:b4:79:4e:c6:fc:91:a0:1d:50:e9: f5:ce:9d:e0:6c:e5:6d:0d:ec:70:6c:17:3a:76:ce:70:cf:bc: f0:d7:72:df:0f:63:0b:b9:67:5e:5c:42:e2:3c:5f:90:35:b6: 9b:e6:38:6e:c7:b6:ee:6c:17:61:c5:24:95:7a:79:99:57:48: 9d:4c:98:2f:28:78:79:e7:7c:69:e0:90:f8:25:79:0a:1f:60: b3:ad:fd:f0:8a:25:c4:9b:f3:ca:a5:35:ee:b6:41:a3:e5:41: 67:aa:cc:cb:c1:6a:e9:ea:f8:c8:3e:c7:4e:eb:ff:ea:a5:0c: 66:e7:8f:8e:bf:af:f3:ce:4a:a9:18:ca:ea:44:15:92:e7:60: a2:e8:50:2c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALFiMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA0MDkxOTUyMzJaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKEVDREQ3MzMyQzY1QTZFQTNDNjQwMjNEQUNFMDMyMDA3RDRGMUQ0 MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnM3uHQ4fN2TGPcSow +tZ2Dx/fMEkVm9HF7hkIXJtlyWiw7RBzeCXfC03lWtG5hzz0sxvPU0MrcDVwMmAw TiyDrFs3OK11SyfawxrAE8cXvs0ULbPNafFVy+KF5j2i/kpyStvQfi1JjNPv13g7 0g96uXS8b2/1zr2JVYHdJKr7j6A6ebsn5fuBcAdj4aKgSjHu8wcvDRmII8BqoVfT hyY7u7r7dzv3PQ4h5/HS03puYYMJUP9S8WZV3oK1LBeAq7c1tEUDjoNF7e2JyXER xbqcbNzqe/EWAFfawkjdZxLTyAkuf+YI5DzkVr6NlpE2dT+XApN1dB9vh6b7ig9P k+qdAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQU7N1zMsZabqPGQCPazgMgB9Tx1DQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0 NTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjQ1MS83TjF6TXNaYWJxUEdRQ1BhemdNZ0I5VHgxRFEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAUjQDANBgkqhkiG9w0BAQsF AAOCAQEAaXh4QIOrXY+hM+0mlq6zyU3HW60kfvai1z7KOR+zqz5+mOQaFaGbhPRj UBrqU+XjXg/oFa7fe4X8Wyhn0QoQkPtc+eazJ39uqqjTUEyCVNcrzXYP35eXq5Fg gx9mdpb4bofKgJLMrfGQS3jyJKzinAfHClK0eU7G/JGgHVDp9c6d4GzlbQ3scGwX OnbOcM+88Ndy3w9jC7lnXlxC4jxfkDW2m+Y4bse27mwXYcUklXp5mVdInUyYLyh4 eed8aeCQ+CV5Ch9gs6398IolxJvzyqU17rZBo+VBZ6rMy8Fq6er4yD7HTuv/6qUM ZuePjr+v885KqRjK6kQVkudgouhQLA== -----END CERTIFICATE-----Generated at Fri May 17 11:08:24 2024 by rpki-client on console-ams.rpki-client.org