$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DPuANxoj3_3UCHqi5YyNldPvLjQ.cer File: DPuANxoj3_3UCHqi5YyNldPvLjQ.cer (raw, json) Hash identifier: t2SYRt4+wUy+9Mtgq8UU9dqzMM0bIKfOKvAGsANzYz4= Subject key identifier: 0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AF2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:23:11 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 17432 IP: 103.164.178.0/23 IP: 2407:3f40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 05:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44843 (0xaf2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:23:11 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0CFB80371A23DFFDD4087AA2E58C8D95D3EF2E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:d5:38:55:7c:f9:94:ad:c0:c7:56:5a:0f: de:17:b0:cd:5b:45:6d:bf:be:a2:ff:13:dc:fb:39: 1c:be:cf:b3:10:84:47:f7:84:ea:9f:af:b2:8d:95: 70:a8:79:ad:c1:44:34:80:38:73:b5:bb:f4:f6:dd: d1:42:3f:1b:f6:44:3e:73:22:50:90:e2:3f:93:80: a6:b3:33:db:61:69:ec:81:9c:21:27:f5:9b:50:5f: 00:c2:54:cb:e3:24:fd:51:aa:3c:51:50:c8:72:ef: a1:10:f2:fc:6a:59:f2:ca:31:05:0e:db:23:e5:4d: e6:af:16:ac:6d:cd:91:e1:03:21:d9:97:e9:9e:4e: 8c:26:2e:bb:34:b1:d3:34:fd:ee:7b:45:de:06:ed: 0e:fb:1e:ba:5b:f5:5c:e2:23:19:46:51:58:fa:70: 94:29:c0:39:b6:f4:9a:49:7e:e1:33:f6:bd:04:e7: e1:4a:e3:17:d2:71:de:ef:d4:0c:50:70:c5:72:13: 59:f2:9d:8b:13:52:09:e7:4e:9a:e0:48:6c:2b:f2: 6b:08:3c:5a:d9:82:5e:41:31:30:68:93:52:d1:5a: ed:07:1a:39:18:ad:5b:c1:ca:4c:48:fe:7e:14:d9: 1f:6e:22:d0:f2:04:be:fc:53:a7:0c:93:d5:3c:4a: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17432 sbgp-ipAddrBlock: critical IPv4: 103.164.178.0/23 IPv6: 2407:3f40::/32 Signature Algorithm: sha256WithRSAEncryption 94:94:e9:80:ad:98:4b:8d:85:87:1a:74:99:56:a5:64:3a:5a: f4:de:c7:8c:36:3a:a6:84:21:81:4b:19:b7:84:37:f9:fd:90: c5:90:72:02:7f:7f:f4:28:78:34:2a:dc:d1:70:19:5f:16:4f: 45:6f:f0:82:fb:54:5a:5e:73:76:37:ef:26:b2:f0:b5:8c:db: a7:42:d5:52:db:9b:d3:aa:b9:41:81:c5:d5:91:5a:88:97:21: eb:12:87:e4:6d:48:7c:d7:4c:0d:8d:4a:66:12:4e:17:78:d1: 70:dd:49:1a:59:6a:0e:c0:6e:e1:07:48:11:36:9d:90:15:c3: 89:85:49:7c:62:9f:98:11:21:1c:5f:ea:a2:95:ae:d8:46:9e: 60:a6:3f:ce:1a:63:0a:97:b2:ae:94:cd:ca:76:42:01:31:9c: f3:15:2b:4d:59:c8:61:49:68:1d:0a:c6:48:3f:14:c5:b3:a5: ea:28:24:b9:4a:4d:82:ef:c8:44:76:88:c6:b5:f0:c2:b3:ee: f9:91:a0:0e:33:6e:cf:d5:05:40:95:fc:d2:8c:ce:16:71:83: 1e:77:88:81:38:e2:ff:d7:b5:79:35:25:28:2a:3d:5d:5e:02: dd:a3:f0:71:2d:78:a7:23:14:49:06:8a:48:eb:f2:8f:42:f7: 1f:3b:10:6c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIDAK8rMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIzMTFaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKDBDRkI4MDM3MUEyM0RGRkRENDA4N0FBMkU1OEM4RDk1RDNFRjJF MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPNU4VXz5lK3Ax1Za D94XsM1bRW2/vqL/E9z7ORy+z7MQhEf3hOqfr7KNlXCoea3BRDSAOHO1u/T23dFC Pxv2RD5zIlCQ4j+TgKazM9thaeyBnCEn9ZtQXwDCVMvjJP1RqjxRUMhy76EQ8vxq WfLKMQUO2yPlTeavFqxtzZHhAyHZl+meTowmLrs0sdM0/e57Rd4G7Q77Hrpb9Vzi IxlGUVj6cJQpwDm29JpJfuEz9r0E5+FK4xfScd7v1AxQcMVyE1nynYsTUgnnTprg SGwr8msIPFrZgl5BMTBok1LRWu0HGjkYrVvBykxI/n4U2R9uItDyBL78U6cMk9U8 SqdFAgMBAAGjggJ/MIICezAdBgNVHQ4EFgQUDPuANxoj3/3UCHqi5YyNldPvLjQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw NzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzA3OS9EUHVBTnhvajNfM1VDSHFpNVl5TmxkUHZMalEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAkQYMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6SyMA0EAgACMAcDBQAkBz9AMA0GCSqGSIb3DQEBCwUAA4IBAQCU lOmArZhLjYWHGnSZVqVkOlr03seMNjqmhCGBSxm3hDf5/ZDFkHICf3/0KHg0KtzR cBlfFk9Fb/CC+1RaXnN2N+8msvC1jNunQtVS25vTqrlBgcXVkVqIlyHrEofkbUh8 10wNjUpmEk4XeNFw3UkaWWoOwG7hB0gRNp2QFcOJhUl8Yp+YESEcX+qila7YRp5g pj/OGmMKl7KulM3KdkIBMZzzFStNWchhSWgdCsZIPxTFs6XqKCS5Sk2C78hEdojG tfDCs+75kaAOM27P1QVAlfzSjM4WcYMed4iBOOL/17V5NSUoKj1dXgLdo/BxLXin IxRJBopI6/KPQvcfOxBs -----END CERTIFICATE-----Generated at Sun May 19 01:06:23 2024 by rpki-client on console-fra.rpki-client.org