$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer File: E6kuJA2Xy0iAEKz821jUUodWaMA.cer (raw, json) Hash identifier: g2n0+nZdOs75RWWeHFGcspPOrHqlg05Im5U4IrgW6ls= Subject key identifier: 13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: B15A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 09 Apr 2024 09:49:21 +0000 Certificate not after: Wed 02 Apr 2025 01:20:39 +0000 Subordinate resources: IP: 2401:92a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 05:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45402 (0xb15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 9 09:49:21 2024 GMT Not After : Apr 2 01:20:39 2025 GMT Subject: CN=13A92E240D97CB488010ACFCDB58D452875668C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a5:f7:60:de:48:3b:28:a7:2b:2e:19:c1:c0: b2:65:4f:de:45:66:b0:8d:54:32:29:46:8b:b1:e5: 6e:8c:e3:4f:d6:46:8c:18:00:dc:87:5f:f4:fe:a6: 44:f7:80:2a:86:09:5b:1b:d8:92:35:ca:14:a8:35: 6d:1c:83:fc:16:a6:a0:7f:89:19:0a:ec:76:4b:13: 8f:5b:bf:24:2a:84:fe:15:e4:a5:61:8a:38:60:93: 54:e0:1e:c1:d8:39:1f:95:c6:9c:41:cc:1f:56:9c: 11:75:56:50:15:d5:ad:e8:72:4c:46:92:b6:75:c0: be:f0:99:d1:c6:57:4c:4f:ef:24:a6:d0:04:b5:94: ed:5c:10:58:7b:0c:9d:40:ef:fc:d4:20:7d:82:5b: 44:92:16:60:44:07:cf:8b:c3:73:69:53:03:90:76: a5:fc:9b:b3:38:b4:30:26:b9:ab:33:63:66:e3:6d: ef:cd:72:ff:f0:61:46:fb:11:f6:4b:92:cc:f1:2f: 34:dd:9e:3a:83:43:8e:9d:71:63:89:5f:a6:fa:fe: 22:93:d3:28:c9:8e:13:ee:9f:36:2a:6e:cb:8f:d1: 97:70:df:98:f7:0d:9c:66:92:47:f0:64:cf:c2:51: 4c:02:92:55:0f:24:68:7c:9d:67:b5:cb:a6:d4:3d: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:92a0::/32 Signature Algorithm: sha256WithRSAEncryption 03:44:49:e4:16:9d:f6:a4:e6:6c:3b:c1:a4:15:4b:a4:ee:7d: 0b:c6:6a:d6:62:10:c4:35:51:ef:1f:8c:77:8d:06:ec:b5:9e: 73:e2:f1:6d:b4:10:de:33:35:ab:9a:27:7f:ce:a3:cd:48:1d: f9:be:0d:a8:6e:56:47:da:a4:cb:7d:36:17:52:6c:bb:63:fd: 47:1d:65:82:50:00:e3:70:d4:0f:b6:b4:ef:f8:25:0a:28:5d: 65:2b:ac:db:8d:98:da:da:0d:df:c0:5e:e1:84:df:08:ec:85: f1:12:26:fc:6c:f4:50:49:6e:79:3b:7f:e3:e5:b8:48:95:86: 85:b7:79:9a:58:b8:ee:c7:3a:14:ac:a2:8f:15:a8:65:12:53: f0:4f:b9:de:2a:ed:c7:6f:75:01:e5:42:a7:37:fe:28:d7:3a: 30:11:b2:11:f9:9c:0f:07:5f:20:8c:23:2f:8b:3d:02:4d:0e: e8:b8:0f:13:64:e1:70:47:10:3e:d2:38:51:7b:22:fa:58:b8: 86:f1:eb:41:7a:39:d8:32:aa:5f:67:ad:81:93:53:c9:94:ad: ca:2b:82:b9:97:05:ea:89:c5:e8:cb:fc:8b:97:0e:76:f3:32: 77:2c:8b:d1:67:37:df:1b:68:7d:94:2f:19:02:f4:18:2a:cc: 92:d2:ab:15 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALFaMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA0MDkwOTQ5MjFaFw0yNTA0MDIwMTIwMzlaMDMx MTAvBgNVBAMTKDEzQTkyRTI0MEQ5N0NCNDg4MDEwQUNGQ0RCNThENDUyODc1NjY4 QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2pfdg3kg7KKcrLhnB wLJlT95FZrCNVDIpRoux5W6M40/WRowYANyHX/T+pkT3gCqGCVsb2JI1yhSoNW0c g/wWpqB/iRkK7HZLE49bvyQqhP4V5KVhijhgk1TgHsHYOR+VxpxBzB9WnBF1VlAV 1a3ockxGkrZ1wL7wmdHGV0xP7ySm0AS1lO1cEFh7DJ1A7/zUIH2CW0SSFmBEB8+L w3NpUwOQdqX8m7M4tDAmuaszY2bjbe/Ncv/wYUb7EfZLkszxLzTdnjqDQ46dcWOJ X6b6/iKT0yjJjhPunzYqbsuP0Zdw35j3DZxmkkfwZM/CUUwCklUPJGh8nWe1y6bU PRi/AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUE6kuJA2Xy0iAEKz821jUUodWaMAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NC9FNmt1SkEyWHkwaUFFS3o4MjFqVVVvZFdhTUEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGSoDANBgkqhkiG9w0BAQsF AAOCAQEAA0RJ5Bad9qTmbDvBpBVLpO59C8Zq1mIQxDVR7x+Md40G7LWec+LxbbQQ 3jM1q5onf86jzUgd+b4NqG5WR9qky302F1Jsu2P9Rx1lglAA43DUD7a07/glCihd ZSus242Y2toN38Be4YTfCOyF8RIm/Gz0UElueTt/4+W4SJWGhbd5mli47sc6FKyi jxWoZRJT8E+53irtx291AeVCpzf+KNc6MBGyEfmcDwdfIIwjL4s9Ak0O6LgPE2Th cEcQPtI4UXsi+li4hvHrQXo52DKqX2etgZNTyZStyiuCuZcF6onF6Mv8i5cOdvMy dyyL0Wc33xtofZQvGQL0GCrMktKrFQ== -----END CERTIFICATE-----Generated at Sun May 19 01:06:23 2024 by rpki-client on console-fra.rpki-client.org