$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8eEYZjFmXucC71BAp9J-rFDMXf0.cer File: 8eEYZjFmXucC71BAp9J-rFDMXf0.cer (raw, json) Hash identifier: 3YJJg+BafC85tqqjK9Awu3iFFamv11rMZPqLjjsjEEc= Subject key identifier: F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 31F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:22:21 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 157.10.246.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 03:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12785 (0x31f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Feb 1 01:22:21 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F1E1186631665EE702EF5040A7D27EAC50CC5DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:a5:71:ec:7b:42:02:7c:a2:31:8c:b1:34: 71:a0:aa:25:a2:65:c4:58:e4:e9:f7:46:7e:e1:e3: 51:2e:e5:7c:7f:db:cf:7a:7f:dc:5c:ff:c3:59:e1: c3:bd:52:d6:e0:7f:ea:fc:cc:0b:a6:8f:5b:d3:9b: 8c:6a:f4:d0:c6:b3:04:eb:5b:27:0a:57:12:60:70: a8:ae:eb:26:88:35:5c:f8:ae:6c:e5:97:15:4b:dd: fd:24:ff:1a:b5:e9:0d:4b:d2:22:bb:ea:91:8c:4e: ca:15:68:53:e0:70:a0:bb:0b:4a:bf:76:98:82:5d: 6b:5b:b8:21:fb:14:07:56:80:8e:4d:a3:12:d2:71: 6f:be:7a:95:6f:1b:9f:1e:7f:37:4f:3b:fb:a2:c4: 7e:58:3d:b3:83:8b:58:5a:72:45:a4:5a:45:63:3d: 00:d4:0b:76:a4:a7:3e:4e:fb:f7:46:cc:db:fb:66: 38:d1:2c:b7:d6:af:7f:1b:f2:3c:63:1d:d8:83:31: ea:39:fb:ee:da:3f:29:56:af:2e:89:bc:77:e2:99: cc:5d:cf:b7:2f:07:df:65:e2:80:c6:09:90:49:e2: db:8d:94:1a:a8:a1:26:27:f0:57:2f:57:ed:e6:90: 95:9c:b4:c0:b6:54:eb:e5:d3:50:f2:55:47:bf:23: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E1:18:66:31:66:5E:E7:02:EF:50:40:A7:D2:7E:AC:50:CC:5D:FD X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3259/8eEYZjFmXucC71BAp9J-rFDMXf0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.246.0/23 Signature Algorithm: sha256WithRSAEncryption 88:4d:77:fe:69:aa:26:fe:e4:8b:20:88:3e:c0:e7:bf:0e:7e: f1:9a:f6:92:18:76:d8:b1:2c:c1:e6:65:72:44:4c:7a:6e:fe: ac:6d:f0:16:60:e5:3e:80:f1:29:19:60:22:5c:dc:62:62:8d: 9a:a2:da:47:df:b9:70:36:47:97:86:5f:7c:fe:0a:c1:74:e8: ef:c0:37:c0:c2:53:bf:50:66:f1:08:a4:0a:e0:d4:57:e4:19: 8b:2e:3b:8b:33:df:28:e4:c7:0e:65:f8:23:50:d9:95:0b:65: d1:37:1e:1c:b7:10:a6:b9:f0:19:15:5c:b0:19:02:be:ab:4d: a5:fd:0d:17:52:55:6c:5f:d7:ba:e0:a2:1a:81:35:28:36:35: f6:96:98:82:65:8e:59:79:cb:9e:8a:87:9c:2e:e2:af:49:cd: 8a:5b:d3:9d:82:de:fa:f9:bf:07:78:89:85:28:ab:8d:33:5b: 0a:46:c7:59:08:8e:19:ed:0e:fd:05:12:0e:7f:f6:00:aa:c8: 44:8f:51:78:79:1e:c6:45:70:52:26:bb:42:e3:6d:55:b7:a6: d9:2e:84:43:8b:8f:c8:25:87:53:41:33:2e:1d:00:63:7a:85: 96:6e:0b:4f:5e:0f:ce:99:ca:83:00:d6:a8:8f:e0:65:3a:8f: 0b:a9:b7:61 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICMfEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDIwMTAxMjIyMVoXDTI1MDEzMTAxMTM0NlowMzEx MC8GA1UEAxMoRjFFMTE4NjYzMTY2NUVFNzAyRUY1MDQwQTdEMjdFQUM1MENDNURG RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwdpXHse0ICfKIxjLE0 caCqJaJlxFjk6fdGfuHjUS7lfH/bz3p/3Fz/w1nhw71S1uB/6vzMC6aPW9ObjGr0 0MazBOtbJwpXEmBwqK7rJog1XPiubOWXFUvd/ST/GrXpDUvSIrvqkYxOyhVoU+Bw oLsLSr92mIJda1u4IfsUB1aAjk2jEtJxb756lW8bnx5/N087+6LEflg9s4OLWFpy RaRaRWM9ANQLdqSnPk7790bM2/tmONEst9avfxvyPGMd2IMx6jn77to/KVavLom8 d+KZzF3Pty8H32XigMYJkEni242UGqihJifwVy9X7eaQlZy0wLZU6+XTUPJVR78j vPcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTx4RhmMWZe5wLvUECn0n6sUMxd/TAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjU5LzhlRVlaakZtWHVjQzcxQkFwOUotckZETVhmMC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdCvYwDQYJKoZIhvcNAQELBQAD ggEBAIhNd/5pqib+5IsgiD7A578OfvGa9pIYdtixLMHmZXJETHpu/qxt8BZg5T6A 8SkZYCJc3GJijZqi2kffuXA2R5eGX3z+CsF06O/AN8DCU79QZvEIpArg1FfkGYsu O4sz3yjkxw5l+CNQ2ZULZdE3Hhy3EKa58BkVXLAZAr6rTaX9DRdSVWxf17rgohqB NSg2NfaWmIJljll5y56Kh5wu4q9JzYpb052C3vr5vwd4iYUoq40zWwpGx1kIjhnt Dv0FEg5/9gCqyESPUXh5HsZFcFImu0LjbVW3ptkuhEOLj8glh1NBMy4dAGN6hZZu C09eD86ZyoMA1qiP4GU6jwupt2E= -----END CERTIFICATE-----Generated at Tue May 28 23:01:53 2024 by rpki-client on console-ams.rpki-client.org