$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer File: 8eEYZjFmXucC71BAp9J-rFDMXf0.cer (raw, json) Hash identifier: yjIl3d0x51XmIiXiA/3zNWlpIN8Qp6xRz3spLHaeJd4= Subject key identifier: F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:52:38 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 157.10.246.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14259 (0x37b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:52:38 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:a5:71:ec:7b:42:02:7c:a2:31:8c:b1:34: 71:a0:aa:25:a2:65:c4:58:e4:e9:f7:46:7e:e1:e3: 51:2e:e5:7c:7f:db:cf:7a:7f:dc:5c:ff:c3:59:e1: c3:bd:52:d6:e0:7f:ea:fc:cc:0b:a6:8f:5b:d3:9b: 8c:6a:f4:d0:c6:b3:04:eb:5b:27:0a:57:12:60:70: a8:ae:eb:26:88:35:5c:f8:ae:6c:e5:97:15:4b:dd: fd:24:ff:1a:b5:e9:0d:4b:d2:22:bb:ea:91:8c:4e: ca:15:68:53:e0:70:a0:bb:0b:4a:bf:76:98:82:5d: 6b:5b:b8:21:fb:14:07:56:80:8e:4d:a3:12:d2:71: 6f:be:7a:95:6f:1b:9f:1e:7f:37:4f:3b:fb:a2:c4: 7e:58:3d:b3:83:8b:58:5a:72:45:a4:5a:45:63:3d: 00:d4:0b:76:a4:a7:3e:4e:fb:f7:46:cc:db:fb:66: 38:d1:2c:b7:d6:af:7f:1b:f2:3c:63:1d:d8:83:31: ea:39:fb:ee:da:3f:29:56:af:2e:89:bc:77:e2:99: cc:5d:cf:b7:2f:07:df:65:e2:80:c6:09:90:49:e2: db:8d:94:1a:a8:a1:26:27:f0:57:2f:57:ed:e6:90: 95:9c:b4:c0:b6:54:eb:e5:d3:50:f2:55:47:bf:23: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.246.0/23 Signature Algorithm: sha256WithRSAEncryption 96:a2:68:ac:31:8a:b3:83:a3:9c:32:f8:43:66:a9:da:fa:37: fa:e2:fd:1f:42:a3:39:1a:ba:43:8c:57:10:54:25:e9:bf:89: aa:86:c7:94:42:08:a4:d8:91:2a:0e:d7:13:87:d7:0f:0a:2c: 31:3c:69:28:ee:74:19:1e:1e:f9:c1:92:5a:12:31:a9:33:b2: 3c:b6:2d:b5:38:ac:84:73:b2:6c:15:37:74:0f:40:17:55:ca: a4:9b:5d:37:e7:34:d4:3a:da:07:a3:4f:fd:87:c8:4d:8d:56: 4d:e0:09:19:5d:cc:15:59:42:3c:4a:04:14:10:ce:8d:ab:0d: 36:69:9e:e5:31:67:4b:b5:10:3a:19:5e:a1:6d:1c:f2:c7:5a: 9a:8a:4e:e5:68:f4:75:9c:ef:98:e8:bd:0c:0d:b5:f4:37:7a: 1d:26:28:09:78:df:f6:e5:7d:17:9e:90:a3:71:e4:40:48:ed: ab:04:5e:3a:a0:a1:f3:f6:43:b1:2b:03:ce:4f:7d:3a:25:5e: 73:bb:23:52:9d:1e:56:34:a8:16:5a:14:b0:27:4b:23:d7:4b: 6b:74:9a:7a:45:15:cf:58:9f:03:b2:47:78:67:83:ff:49:20: 6e:91:6f:ed:fd:16:56:0d:86:3e:47:b3:6a:48:c2:69:c6:cc: e8:26:a4:96 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN7MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTIzOFoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoRjFFMTE4NjYzMTY2NUVFNzAyRUY1MDQwQTdEMjdFQUM1MENDNURG RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwdpXHse0ICfKIxjLE0 caCqJaJlxFjk6fdGfuHjUS7lfH/bz3p/3Fz/w1nhw71S1uB/6vzMC6aPW9ObjGr0 0MazBOtbJwpXEmBwqK7rJog1XPiubOWXFUvd/ST/GrXpDUvSIrvqkYxOyhVoU+Bw oLsLSr92mIJda1u4IfsUB1aAjk2jEtJxb756lW8bnx5/N087+6LEflg9s4OLWFpy RaRaRWM9ANQLdqSnPk7790bM2/tmONEst9avfxvyPGMd2IMx6jn77to/KVavLom8 d+KZzF3Pty8H32XigMYJkEni242UGqihJifwVy9X7eaQlZy0wLZU6+XTUPJVR78j vPcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTx4RhmMWZe5wLvUECn0n6sUMxd/TAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjU5LzhlRVlaakZtWHVjQzcxQkFwOUotckZETVhmMC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdCvYwDQYJKoZIhvcNAQELBQAD ggEBAJaiaKwxirODo5wy+ENmqdr6N/ri/R9CozkaukOMVxBUJem/iaqGx5RCCKTY kSoO1xOH1w8KLDE8aSjudBkeHvnBkloSMakzsjy2LbU4rIRzsmwVN3QPQBdVyqSb XTfnNNQ62gejT/2HyE2NVk3gCRldzBVZQjxKBBQQzo2rDTZpnuUxZ0u1EDoZXqFt HPLHWpqKTuVo9HWc75jovQwNtfQ3eh0mKAl43/blfReekKNx5EBI7asEXjqgofP2 Q7ErA85PfTolXnO7I1KdHlY0qBZaFLAnSyPXS2t0mnpFFc9YnwOyR3hng/9JIG6R b+39FlYNhj5Hs2pIwmnGzOgmpJY= -----END CERTIFICATE-----Generated at Sat Nov 23 01:55:09 2024 by rpki-client on console-ams.rpki-client.org