$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer File: Ecx0P_pgKFVeC5k8550d_TD1MSU.cer (raw, json) Hash identifier: OzrSh+G3RXNwkUJ0RaKoKrlewQncTT+n53pTFQaCX80= Subject key identifier: 11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3996 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 12 Dec 2024 03:14:31 +0000 Certificate not after: Wed 10 Dec 2025 08:49:25 +0000 Subordinate resources: IP: 160.250.214.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 21:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14742 (0x3996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Dec 12 03:14:31 2024 GMT Not After : Dec 10 08:49:25 2025 GMT Subject: CN=11CC743FFA6028555E0B993CE79D1DFD30F53125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5e:09:2d:08:83:a7:bb:ab:5f:82:94:fd:de: c9:19:b5:3a:ac:08:a1:1b:62:eb:ba:d7:55:4c:62: b4:32:46:7c:22:2c:b4:89:b7:0d:dc:da:2a:ae:6d: a4:46:cd:11:ee:92:54:44:26:a3:ce:10:43:82:87: 6f:3c:05:3d:af:42:3c:9f:f2:a5:6b:e2:b5:b4:63: 61:50:6a:ed:ea:c1:8d:5b:88:0e:33:02:ec:16:01: e9:eb:62:7a:6d:9e:a7:fb:a6:51:2d:df:c1:41:0e: cc:78:5b:f6:d3:ed:0f:4a:21:41:10:78:f2:73:ec: 2f:04:f6:a9:96:ae:0d:d3:14:5e:59:65:d1:39:77: 77:ce:67:63:d7:f3:55:b3:a6:6b:cf:3c:3b:02:50: c3:6e:e9:5b:6f:7d:8d:cf:61:de:9e:30:2b:94:b9: 79:b6:fb:8b:57:b6:c8:da:c2:99:de:f4:2f:72:42: 42:68:a1:a5:50:cb:ca:da:23:3c:ae:a6:d8:5d:50: 76:12:04:00:73:df:d0:21:a3:70:89:c0:3e:87:6f: c2:7c:03:2f:8f:67:0a:4b:1a:58:01:2b:81:28:13: 68:fd:1d:6a:0c:01:c1:10:15:d0:ca:de:39:a7:ca: e2:6b:76:5d:e2:b2:8f:c4:c3:b9:bd:e3:4f:9b:1a: c9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.214.0/23 Signature Algorithm: sha256WithRSAEncryption 27:c2:18:73:07:9b:3e:c0:9f:20:d8:7c:f3:4d:17:a1:3c:c4: a9:3b:55:69:c6:17:f9:b9:cb:31:85:64:81:e9:e1:58:5a:cf: 07:76:43:21:57:be:83:3d:67:77:c3:bb:f5:0a:d9:85:e4:81: a5:ad:cd:89:82:52:eb:f6:91:19:b8:23:7c:2f:96:6c:a9:f6: 5a:e6:08:ca:fd:84:5c:d7:c7:18:5e:0f:c9:84:6f:ec:51:35: 7a:6a:f8:7f:8d:14:8b:2e:88:16:e3:64:1f:aa:e4:4f:dc:e2: 4a:ea:d0:fa:64:13:9a:c5:60:b3:f2:25:f9:f8:ce:c0:ff:4f: e7:fa:c7:56:32:3a:73:08:0d:52:58:33:09:69:72:63:6c:dd: 36:a7:4b:b8:42:3a:1d:d9:21:2d:2f:7a:73:d2:55:38:7b:d9: c4:d8:d9:1a:b2:72:ee:11:86:94:37:7e:b5:2e:6f:2c:f4:3c: 53:ec:ba:43:9f:08:27:d1:32:52:db:8f:87:87:4f:3f:97:10: c6:bb:bf:a5:92:36:e3:15:63:45:c0:89:77:8c:a4:e8:cf:71: ca:1f:70:06:f6:25:52:c6:14:75:fd:77:ef:b4:97:32:03:97: b4:d8:c0:20:26:1a:a8:17:c0:0b:a9:e8:2e:cb:6f:94:d4:39: 7c:63:46:4d -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOZYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MTIxMjAzMTQzMVoXDTI1MTIxMDA4NDkyNVowMzEx MC8GA1UEAxMoMTFDQzc0M0ZGQTYwMjg1NTVFMEI5OTNDRTc5RDFERkQzMEY1MzEy NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOleCS0Ig6e7q1+ClP3e yRm1OqwIoRti67rXVUxitDJGfCIstIm3DdzaKq5tpEbNEe6SVEQmo84QQ4KHbzwF Pa9CPJ/ypWvitbRjYVBq7erBjVuIDjMC7BYB6etiem2ep/umUS3fwUEOzHhb9tPt D0ohQRB48nPsLwT2qZauDdMUXlll0Tl3d85nY9fzVbOma888OwJQw27pW299jc9h 3p4wK5S5ebb7i1e2yNrCmd70L3JCQmihpVDLytojPK6m2F1QdhIEAHPf0CGjcInA PodvwnwDL49nCksaWAErgSgTaP0dagwBwRAV0MreOafK4mt2XeKyj8TDub3jT5sa yRsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQRzHQ/+mAoVV4LmTznnR39MPUxJTAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzM4L0VjeDBQX3BnS0ZWZUM1azg1NTBkX1REMU1TVS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+tYwDQYJKoZIhvcNAQELBQAD ggEBACfCGHMHmz7AnyDYfPNNF6E8xKk7VWnGF/m5yzGFZIHp4Vhazwd2QyFXvoM9 Z3fDu/UK2YXkgaWtzYmCUuv2kRm4I3wvlmyp9lrmCMr9hFzXxxheD8mEb+xRNXpq +H+NFIsuiBbjZB+q5E/c4krq0PpkE5rFYLPyJfn4zsD/T+f6x1YyOnMIDVJYMwlp cmNs3TanS7hCOh3ZIS0venPSVTh72cTY2Rqycu4RhpQ3frUubyz0PFPsukOfCCfR MlLbj4eHTz+XEMa7v6WSNuMVY0XAiXeMpOjPccofcAb2JVLGFHX9d++0lzIDl7TY wCAmGqgXwAup6C7Lb5TUOXxjRk0= -----END CERTIFICATE-----Generated at Wed Feb 19 20:32:48 2025 by rpki-client