$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer File: 92yeQzYd6kRgd61wKQVzgK__MmY.cer (raw, json) Hash identifier: bASA3dfDxn8xUCphYWdYNiBPYQtoQbFMpuoKPtbkWVI= Subject key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:56:18 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 103.203.212.0/22 IP: 2404:280::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48247 (0xbc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:56:18 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F76C9E43361DEA446077AD7029057380AFFF3266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:44:d0:1c:af:35:44:8d:e3:97:a7:23:06: a6:c3:38:2b:e0:17:56:d7:25:79:5f:75:31:34:cd: aa:34:bc:5f:10:bb:e6:ae:c1:90:86:0c:be:32:12: 23:7c:6b:f9:b2:c1:23:19:2a:4e:ab:58:c1:4b:36: b2:b9:7b:21:0a:12:3f:ad:09:bd:45:1f:b0:ad:bd: 39:df:64:92:88:ae:26:35:5d:02:f3:27:0f:f0:87: 49:b5:de:34:02:b3:67:d3:e4:92:e5:32:f9:d5:42: be:b8:30:21:82:df:b9:de:3b:fe:dd:4a:4c:22:7e: 88:18:28:5e:aa:9d:37:45:a3:68:8a:5f:46:ab:51: 22:c3:4b:82:36:5e:42:c1:ad:60:09:5a:ff:1f:c7: ec:00:d1:af:65:fd:8d:e7:ab:48:18:43:f6:a3:af: c3:b3:1d:81:5f:0d:cd:86:7c:11:15:71:fc:5f:ed: a3:64:43:89:fc:68:2f:f8:e6:e6:17:41:e7:bb:80: 34:01:4f:97:cb:ec:9d:ee:81:43:9b:a5:39:52:8d: 09:6f:03:31:5f:a8:fa:4e:bd:ce:1c:b6:17:70:26: 85:81:ba:55:17:22:20:99:50:85:8b:52:e2:0b:43: 58:43:62:bd:3c:af:95:a3:b4:f4:b2:27:03:6c:6e: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.203.212.0/22 IPv6: 2404:280::/32 Signature Algorithm: sha256WithRSAEncryption 98:3a:87:81:4e:d4:50:f7:a6:d4:2a:15:b0:38:50:a3:11:8a: db:8a:62:0e:d4:79:ca:fe:b5:5c:0f:78:9d:71:fb:21:2d:e0: 53:9d:9e:92:81:f5:6f:8b:7d:6e:70:bc:5e:05:54:4a:88:8c: 2b:6e:4a:35:2d:42:41:aa:26:1d:66:0b:5b:bd:93:29:4d:e7: ee:76:a4:bd:d4:12:4a:c6:a8:53:1c:5c:69:91:42:bc:cb:c6: ab:33:54:07:de:ec:05:8a:5c:8f:39:bd:c3:1b:de:d4:3a:fe: c4:c7:f8:de:66:44:7e:25:17:49:dc:26:dc:0e:88:1b:9f:d1: f0:e8:89:be:2c:1f:f6:27:5a:87:a6:b7:59:0c:c2:dd:ef:83: ea:94:91:65:86:3c:af:53:fa:19:b2:a9:b0:9f:41:66:34:19: 9d:78:58:28:27:2f:65:51:03:84:25:54:17:f1:de:dd:97:b5: f3:0b:5b:41:ad:3a:43:70:fa:76:ab:ad:b4:50:0e:6e:3f:cb: 16:12:ce:f7:07:5c:52:2f:4f:82:b9:36:e4:4d:16:2f:13:79: 00:d7:cc:e8:43:f3:79:b7:b1:bf:3f:86:10:72:f5:52:46:21: 09:24:f6:8c:db:33:af:32:f5:32:9f:17:92:2d:9d:82:de:5c: d2:e3:f2:a3 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDALx3MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU2MThaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEY3NkM5RTQzMzYxREVBNDQ2MDc3QUQ3MDI5MDU3MzgwQUZGRjMy NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbf0TQHK81RI3jl6cj BqbDOCvgF1bXJXlfdTE0zao0vF8Qu+auwZCGDL4yEiN8a/mywSMZKk6rWMFLNrK5 eyEKEj+tCb1FH7CtvTnfZJKIriY1XQLzJw/wh0m13jQCs2fT5JLlMvnVQr64MCGC 37neO/7dSkwifogYKF6qnTdFo2iKX0arUSLDS4I2XkLBrWAJWv8fx+wA0a9l/Y3n q0gYQ/ajr8OzHYFfDc2GfBEVcfxf7aNkQ4n8aC/45uYXQee7gDQBT5fL7J3ugUOb pTlSjQlvAzFfqPpOvc4cthdwJoWBulUXIiCZUIWLUuILQ1hDYr08r5WjtPSyJwNs bs/3AgMBAAGjggJkMIICYDAdBgNVHQ4EFgQU92yeQzYd6kRgd61wKQVzgK//MmYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1 ODQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMTU4NC85MnllUXpZZDZrUmdkNjF3S1FWemdLX19NbVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ8vUMA0EAgACMAcDBQAkBAKA MA0GCSqGSIb3DQEBCwUAA4IBAQCYOoeBTtRQ96bUKhWwOFCjEYrbimIO1HnK/rVc D3idcfshLeBTnZ6SgfVvi31ucLxeBVRKiIwrbko1LUJBqiYdZgtbvZMpTefudqS9 1BJKxqhTHFxpkUK8y8arM1QH3uwFilyPOb3DG97UOv7Ex/jeZkR+JRdJ3CbcDogb n9Hw6Im+LB/2J1qHprdZDMLd74PqlJFlhjyvU/oZsqmwn0FmNBmdeFgoJy9lUQOE JVQX8d7dl7XzC1tBrTpDcPp2q620UA5uP8sWEs73B1xSL0+CuTbkTRYvE3kA18zo Q/N5t7G/P4YQcvVSRiEJJPaM2zOvMvUynxeSLZ2C3lzS4/Kj -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:24 2024 by rpki-client on console-fra.rpki-client.org