$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer File: 89605Z7lMyYp7F4LaGZtNuKXN2s.cer (raw, json) Hash identifier: wkviAxMxRgllLf7mGIlxYzYsw/I20lg7PAFM1cN2oS8= Subject key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BD88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 09 Oct 2024 06:17:11 +0000 Certificate not after: Thu 09 Oct 2025 05:57:36 +0000 Subordinate resources: AS: 151275 IP: 2401:cbe0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48520 (0xbd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 9 06:17:11 2024 GMT Not After : Oct 9 05:57:36 2025 GMT Subject: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:57:63:d3:05:64:ef:c0:c9:e4:b4:52:ed: ae:f8:b0:46:52:5b:9c:39:84:96:1f:7e:7e:91:d2: c0:cd:0c:dd:48:94:c5:1c:0c:ab:b0:a7:e5:53:c1: ed:f5:c8:ea:da:dd:e1:8f:22:cd:c2:57:12:af:c5: 57:60:10:29:64:2e:b2:15:44:65:1d:f3:8d:bb:46: 0e:de:2b:11:25:11:39:08:39:25:89:d0:de:67:b5: a0:4f:50:04:e8:b8:89:42:d5:f8:86:9f:14:0c:ab: 74:7b:44:64:f3:87:ad:d0:f5:a9:0f:b9:0e:57:9a: 9b:70:80:64:42:77:5c:2f:f8:d8:03:d4:b2:98:dc: e0:c8:eb:1f:51:64:89:5f:97:35:22:9e:62:81:10: 7f:de:c6:25:4f:ae:f0:be:5f:ad:3d:59:d4:49:7f: 81:c8:f4:f4:be:3b:71:71:8b:64:16:ac:90:51:21: 7f:54:dc:98:8c:e2:3c:68:e4:9d:32:7e:64:8d:2d: 19:c8:af:0d:8a:3f:eb:37:75:18:88:d8:b1:cc:7b: 38:cc:e2:07:0d:4d:63:dd:ae:8f:97:4f:dd:3f:cd: f0:0c:e7:2d:33:3e:c7:42:25:d5:ce:3b:a9:51:cc: 8d:0f:7c:6a:3b:3d:a3:5b:1b:4e:a2:5b:f2:5f:14: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151275 sbgp-ipAddrBlock: critical IPv6: 2401:cbe0::/32 Signature Algorithm: sha256WithRSAEncryption 50:06:89:9d:f1:71:80:0e:f2:46:4d:48:36:d3:d5:9e:86:57: 6e:4c:d4:d8:83:f9:e6:01:77:7d:ce:65:26:92:f3:79:9d:ae: 93:28:10:ac:ea:65:3e:ac:f0:ca:f2:48:87:d9:87:37:2f:89: 17:ca:c9:c7:58:23:2b:ac:04:0e:9a:cc:39:69:1a:7c:a1:e5: e5:ed:b9:f4:01:bb:6f:fe:27:3a:e5:cb:27:ee:42:0a:8b:0f: 42:24:db:09:39:17:00:e3:bb:54:2f:99:fa:7c:cb:9a:67:88: 59:9f:76:db:16:f3:7c:3a:77:d6:13:f3:f0:d2:1f:bc:f4:36: 3b:31:f8:9c:bd:d8:fd:d0:90:16:dd:6c:d6:cb:8a:dd:e4:1a: f5:f9:6f:f7:c6:5a:2f:54:98:47:8d:e2:ef:be:d6:9c:57:60: 16:7c:08:a7:b5:f0:8c:76:a2:d4:6e:87:a8:e5:df:bf:d7:02: ad:02:73:f1:21:19:76:31:da:96:83:06:4f:3e:b6:38:0a:44: 4b:da:9c:1d:0b:07:1e:e3:8d:64:16:93:25:e5:8f:26:fd:a8: 70:8b:3c:90:ba:33:4c:15:52:4b:63:26:0a:7c:33:2f:01:72: 55:49:94:5f:3c:79:f9:bd:76:9e:17:24:15:96:5c:d7:d0:36: 99:e8:6e:46 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDAL2IMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDEwMDkwNjE3MTFaFw0yNTEwMDkwNTU3MzZaMDMx MTAvBgNVBAMTKEYzREVCNEU1OUVFNTMzMjYyOUVDNUUwQjY4NjY2RDM2RTI5NzM3 NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoldj0wVk78DJ5LRS 7a74sEZSW5w5hJYffn6R0sDNDN1IlMUcDKuwp+VTwe31yOra3eGPIs3CVxKvxVdg EClkLrIVRGUd8427Rg7eKxElETkIOSWJ0N5ntaBPUATouIlC1fiGnxQMq3R7RGTz h63Q9akPuQ5XmptwgGRCd1wv+NgD1LKY3ODI6x9RZIlflzUinmKBEH/exiVPrvC+ X609WdRJf4HI9PS+O3Fxi2QWrJBRIX9U3JiM4jxo5J0yfmSNLRnIrw2KP+s3dRiI 2LHMezjM4gcNTWPdro+XT90/zfAM5y0zPsdCJdXOO6lRzI0PfGo7PaNbG06iW/Jf FPhZAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQU89605Z7lMyYp7F4LaGZtNuKXN2sw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MTkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMxOS84OTYwNVo3bE15WXA3RjRMYUdadE51S1hOMnMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO6zAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBy+AwDQYJKoZIhvcNAQELBQADggEBAFAGiZ3xcYAO8kZNSDbT 1Z6GV25M1NiD+eYBd33OZSaS83mdrpMoEKzqZT6s8MrySIfZhzcviRfKycdYIyus BA6azDlpGnyh5eXtufQBu2/+JzrlyyfuQgqLD0Ik2wk5FwDju1Qvmfp8y5pniFmf dtsW83w6d9YT8/DSH7z0Njsx+Jy92P3QkBbdbNbLit3kGvX5b/fGWi9UmEeN4u++ 1pxXYBZ8CKe18Ix2otRuh6jl37/XAq0Cc/EhGXYx2paDBk8+tjgKREvanB0LBx7j jWQWkyXljyb9qHCLPJC6M0wVUktjJgp8My8BclVJlF88efm9dp4XJBWWXNfQNpno bkY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:24 2024 by rpki-client on console-fra.rpki-client.org