$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DPuANxoj3_3UCHqi5YyNldPvLjQ.cer File: DPuANxoj3_3UCHqi5YyNldPvLjQ.cer (raw, json) Hash identifier: V+jbyto4F8Moo6N8Mk1QQPbN+5wVjJXBGxdmc+b/Y4s= Subject key identifier: 0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BBFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:37 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 17432 IP: 103.164.178.0/23 IP: 2407:3f40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48123 (0xbbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:53:37 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0CFB80371A23DFFDD4087AA2E58C8D95D3EF2E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:d5:38:55:7c:f9:94:ad:c0:c7:56:5a:0f: de:17:b0:cd:5b:45:6d:bf:be:a2:ff:13:dc:fb:39: 1c:be:cf:b3:10:84:47:f7:84:ea:9f:af:b2:8d:95: 70:a8:79:ad:c1:44:34:80:38:73:b5:bb:f4:f6:dd: d1:42:3f:1b:f6:44:3e:73:22:50:90:e2:3f:93:80: a6:b3:33:db:61:69:ec:81:9c:21:27:f5:9b:50:5f: 00:c2:54:cb:e3:24:fd:51:aa:3c:51:50:c8:72:ef: a1:10:f2:fc:6a:59:f2:ca:31:05:0e:db:23:e5:4d: e6:af:16:ac:6d:cd:91:e1:03:21:d9:97:e9:9e:4e: 8c:26:2e:bb:34:b1:d3:34:fd:ee:7b:45:de:06:ed: 0e:fb:1e:ba:5b:f5:5c:e2:23:19:46:51:58:fa:70: 94:29:c0:39:b6:f4:9a:49:7e:e1:33:f6:bd:04:e7: e1:4a:e3:17:d2:71:de:ef:d4:0c:50:70:c5:72:13: 59:f2:9d:8b:13:52:09:e7:4e:9a:e0:48:6c:2b:f2: 6b:08:3c:5a:d9:82:5e:41:31:30:68:93:52:d1:5a: ed:07:1a:39:18:ad:5b:c1:ca:4c:48:fe:7e:14:d9: 1f:6e:22:d0:f2:04:be:fc:53:a7:0c:93:d5:3c:4a: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FB:80:37:1A:23:DF:FD:D4:08:7A:A2:E5:8C:8D:95:D3:EF:2E:34 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3079/DPuANxoj3_3UCHqi5YyNldPvLjQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17432 sbgp-ipAddrBlock: critical IPv4: 103.164.178.0/23 IPv6: 2407:3f40::/32 Signature Algorithm: sha256WithRSAEncryption 42:b4:11:ff:cd:43:c4:8e:66:e2:34:0d:7b:ef:f8:7e:99:7b: 53:77:47:f8:96:cb:2d:ce:ff:1b:42:1e:aa:f4:33:ae:00:38: 7a:d5:87:50:33:22:02:dd:b7:a9:91:35:44:6a:e4:71:7c:17: bb:7f:8c:4d:e2:d7:c8:7a:e1:1a:a1:13:17:eb:c7:cc:e1:99: 59:a2:32:e8:c7:8e:b4:84:b1:d5:44:bd:09:6d:4d:08:dd:13: 5b:8f:f9:cb:84:01:57:d9:04:5b:6f:2f:2f:5f:70:ac:30:d2: 26:8f:5a:7d:7b:78:0d:c6:6a:03:31:53:f2:70:1f:0c:ea:f1: d0:f2:ea:e2:62:62:70:ac:42:99:f1:e0:e5:2e:fe:4b:3f:ef: df:a0:18:c4:93:5d:16:eb:a2:ee:05:33:91:0d:a6:47:b9:05: 97:5f:30:aa:e4:67:cd:87:80:80:ce:7f:3a:aa:dd:52:f3:83: 7e:f6:d5:0a:56:26:c4:94:fe:ce:c1:a7:87:c7:45:f5:2e:18: 90:2d:16:8a:b2:d9:23:a7:35:17:1a:7e:5f:bb:ad:ba:53:59: 54:72:19:a2:91:e0:7a:64:82:24:5f:ca:63:cb:e1:30:95:d6: 92:34:c7:da:55:62:2b:11:7a:03:ae:6b:f4:c7:7e:38:0e:d7: c3:77:d6:1d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIDALv7MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUzMzdaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDBDRkI4MDM3MUEyM0RGRkRENDA4N0FBMkU1OEM4RDk1RDNFRjJF MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPNU4VXz5lK3Ax1Za D94XsM1bRW2/vqL/E9z7ORy+z7MQhEf3hOqfr7KNlXCoea3BRDSAOHO1u/T23dFC Pxv2RD5zIlCQ4j+TgKazM9thaeyBnCEn9ZtQXwDCVMvjJP1RqjxRUMhy76EQ8vxq WfLKMQUO2yPlTeavFqxtzZHhAyHZl+meTowmLrs0sdM0/e57Rd4G7Q77Hrpb9Vzi IxlGUVj6cJQpwDm29JpJfuEz9r0E5+FK4xfScd7v1AxQcMVyE1nynYsTUgnnTprg SGwr8msIPFrZgl5BMTBok1LRWu0HGjkYrVvBykxI/n4U2R9uItDyBL78U6cMk9U8 SqdFAgMBAAGjggJ/MIICezAdBgNVHQ4EFgQUDPuANxoj3/3UCHqi5YyNldPvLjQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw NzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzA3OS9EUHVBTnhvajNfM1VDSHFpNVl5TmxkUHZMalEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAkQYMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6SyMA0EAgACMAcDBQAkBz9AMA0GCSqGSIb3DQEBCwUAA4IBAQBC tBH/zUPEjmbiNA177/h+mXtTd0f4lsstzv8bQh6q9DOuADh61YdQMyIC3bepkTVE auRxfBe7f4xN4tfIeuEaoRMX68fM4ZlZojLox460hLHVRL0JbU0I3RNbj/nLhAFX 2QRbby8vX3CsMNImj1p9e3gNxmoDMVPycB8M6vHQ8uriYmJwrEKZ8eDlLv5LP+/f oBjEk10W66LuBTORDaZHuQWXXzCq5GfNh4CAzn86qt1S84N+9tUKVibElP7OwaeH x0X1LhiQLRaKstkjpzUXGn5fu626U1lUchmikeB6ZIIkX8pjy+EwldaSNMfaVWIr EXoDrmv0x344DtfDd9Yd -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:25 2024 by rpki-client on console-fra.rpki-client.org