$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/E6kuJA2Xy0iAEKz821jUUodWaMA.cer File: E6kuJA2Xy0iAEKz821jUUodWaMA.cer (raw, json) Hash identifier: iDJ7qKKTB6pdDNUz4zPjb3LlVjxxKnONw17IogVcWSg= Subject key identifier: 13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BBBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:52:34 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:92a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48061 (0xbbbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:52:34 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=13A92E240D97CB488010ACFCDB58D452875668C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a5:f7:60:de:48:3b:28:a7:2b:2e:19:c1:c0: b2:65:4f:de:45:66:b0:8d:54:32:29:46:8b:b1:e5: 6e:8c:e3:4f:d6:46:8c:18:00:dc:87:5f:f4:fe:a6: 44:f7:80:2a:86:09:5b:1b:d8:92:35:ca:14:a8:35: 6d:1c:83:fc:16:a6:a0:7f:89:19:0a:ec:76:4b:13: 8f:5b:bf:24:2a:84:fe:15:e4:a5:61:8a:38:60:93: 54:e0:1e:c1:d8:39:1f:95:c6:9c:41:cc:1f:56:9c: 11:75:56:50:15:d5:ad:e8:72:4c:46:92:b6:75:c0: be:f0:99:d1:c6:57:4c:4f:ef:24:a6:d0:04:b5:94: ed:5c:10:58:7b:0c:9d:40:ef:fc:d4:20:7d:82:5b: 44:92:16:60:44:07:cf:8b:c3:73:69:53:03:90:76: a5:fc:9b:b3:38:b4:30:26:b9:ab:33:63:66:e3:6d: ef:cd:72:ff:f0:61:46:fb:11:f6:4b:92:cc:f1:2f: 34:dd:9e:3a:83:43:8e:9d:71:63:89:5f:a6:fa:fe: 22:93:d3:28:c9:8e:13:ee:9f:36:2a:6e:cb:8f:d1: 97:70:df:98:f7:0d:9c:66:92:47:f0:64:cf:c2:51: 4c:02:92:55:0f:24:68:7c:9d:67:b5:cb:a6:d4:3d: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:2E:24:0D:97:CB:48:80:10:AC:FC:DB:58:D4:52:87:56:68:C0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/E6kuJA2Xy0iAEKz821jUUodWaMA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:92a0::/32 Signature Algorithm: sha256WithRSAEncryption 65:af:53:71:15:a3:f6:bc:f1:83:7f:50:71:55:70:25:02:8a: 05:03:a7:a3:f7:dd:54:35:2d:71:ab:32:4a:31:14:81:b5:9d: ec:28:e4:15:6f:0a:44:1c:0b:5d:4b:70:bd:3d:55:b3:cd:ec: fb:44:7b:5d:2a:3f:05:4e:f1:bc:0e:55:82:0e:94:28:db:17: ca:41:5d:05:35:c3:b0:bd:c9:36:df:e1:2a:20:04:41:05:49: 4e:67:c2:fa:a6:58:66:f8:b1:e5:db:4d:33:da:92:86:b6:e5: 3d:f9:78:63:ba:da:46:16:5b:f8:62:d3:93:38:29:21:80:b2: ce:e2:94:6b:ff:87:b7:c9:88:51:b2:3b:07:7d:17:76:b8:60: b0:65:51:0b:46:d8:c6:3b:99:db:31:92:2a:c9:92:b8:24:e0: a4:35:ce:cd:5a:f1:82:12:03:7d:f0:41:0f:68:94:ca:11:4a: b6:f3:41:1c:34:5b:9f:5f:78:6d:dd:d8:ac:26:91:4f:49:78: c5:4a:6e:50:87:f6:a8:6c:80:9b:ef:35:9f:fa:5b:0a:96:b1: de:b7:35:5d:97:23:4e:3c:bf:be:13:93:80:c7:5b:16:90:60: d1:60:96:9c:60:66:60:76:f1:3c:5e:fc:3e:8c:d1:46:74:d9: 82:8c:35:14 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALu9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUyMzRaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDEzQTkyRTI0MEQ5N0NCNDg4MDEwQUNGQ0RCNThENDUyODc1NjY4 QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2pfdg3kg7KKcrLhnB wLJlT95FZrCNVDIpRoux5W6M40/WRowYANyHX/T+pkT3gCqGCVsb2JI1yhSoNW0c g/wWpqB/iRkK7HZLE49bvyQqhP4V5KVhijhgk1TgHsHYOR+VxpxBzB9WnBF1VlAV 1a3ockxGkrZ1wL7wmdHGV0xP7ySm0AS1lO1cEFh7DJ1A7/zUIH2CW0SSFmBEB8+L w3NpUwOQdqX8m7M4tDAmuaszY2bjbe/Ncv/wYUb7EfZLkszxLzTdnjqDQ46dcWOJ X6b6/iKT0yjJjhPunzYqbsuP0Zdw35j3DZxmkkfwZM/CUUwCklUPJGh8nWe1y6bU PRi/AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUE6kuJA2Xy0iAEKz821jUUodWaMAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NC9FNmt1SkEyWHkwaUFFS3o4MjFqVVVvZFdhTUEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGSoDANBgkqhkiG9w0BAQsF AAOCAQEAZa9TcRWj9rzxg39QcVVwJQKKBQOno/fdVDUtcasySjEUgbWd7CjkFW8K RBwLXUtwvT1Vs83s+0R7XSo/BU7xvA5Vgg6UKNsXykFdBTXDsL3JNt/hKiAEQQVJ TmfC+qZYZvix5dtNM9qShrblPfl4Y7raRhZb+GLTkzgpIYCyzuKUa/+Ht8mIUbI7 B30XdrhgsGVRC0bYxjuZ2zGSKsmSuCTgpDXOzVrxghIDffBBD2iUyhFKtvNBHDRb n194bd3YrCaRT0l4xUpuUIf2qGyAm+81n/pbCpax3rc1XZcjTjy/vhOTgMdbFpBg 0WCWnGBmYHbxPF78PozRRnTZgow1FA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:25 2024 by rpki-client on console-fra.rpki-client.org