$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FguBQGl3AHVmkJf_Tx49cObNDAY.cer File: FguBQGl3AHVmkJf_Tx49cObNDAY.cer (raw, json) Hash identifier: 1pEl7E/yjy24Z3kJOoxuHpMBLiOX/g6EfSiRJ6c4vTE= Subject key identifier: 16:0B:81:40:69:77:00:75:66:90:97:FF:4F:1E:3D:70:E6:CD:0C:06 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BA79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:47:53 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:8820::/31 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47737 (0xba79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:47:53 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=160B814069770075669097FF4F1E3D70E6CD0C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ca:2a:de:19:0d:80:34:12:93:83:85:60:66: 90:fb:2f:d5:53:84:5b:0d:d6:67:20:35:86:1e:11: f3:d8:4b:9d:70:4f:4a:9b:1a:61:fc:d0:53:6c:fe: f7:54:b5:25:f9:c7:37:67:de:7a:52:df:4c:71:ff: ec:20:e7:57:2d:36:ae:f0:87:d4:89:1f:1e:05:13: 38:4c:dc:e7:f5:fb:60:f2:bf:bb:e2:53:4c:ce:69: 7c:56:4f:27:3e:f6:f2:e4:92:ec:ae:af:43:f9:76: 6e:29:8a:c1:e5:4c:87:a6:d3:4f:7f:54:5a:88:2b: 85:e3:04:29:58:33:0a:8e:8c:d7:37:c3:69:99:42: 44:92:d6:65:8e:a0:74:2b:e7:5b:5c:17:8c:b5:15: 24:53:f6:c6:1b:8c:30:05:08:0c:4b:d3:74:57:50: de:cd:14:01:10:92:0f:fc:f1:c1:c4:52:37:e8:d3: 56:0e:a9:a1:5a:2e:5c:99:31:fc:60:f8:9b:69:e0: 93:54:75:c2:ca:ae:1a:2b:a6:f2:54:a8:2f:6d:9e: 8b:fb:23:46:9c:62:25:aa:f7:e4:72:52:46:48:d9: 2d:2c:b7:3d:3c:bd:38:a3:b6:f1:bd:9d:a3:b2:35: 9e:af:01:af:da:4e:ca:72:94:69:be:c5:a8:4a:a5: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0B:81:40:69:77:00:75:66:90:97:FF:4F:1E:3D:70:E6:CD:0C:06 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:8820::/31 Signature Algorithm: sha256WithRSAEncryption 5f:56:db:b2:36:51:41:49:16:84:99:c1:76:b2:82:ee:49:66: 2d:a8:d6:b7:17:54:9a:3a:23:f5:37:3c:a8:69:fb:88:d7:ac: a5:cd:2a:02:2d:e6:56:03:a5:5f:16:b2:f4:e0:8d:02:91:cd: 97:af:f2:7b:34:69:ea:83:be:18:6e:63:64:ac:a4:b3:93:9c: 54:35:04:42:6e:de:1e:9d:9e:b1:01:a8:68:2d:ad:e5:ba:f5: 5d:09:39:7c:88:9c:b3:e8:51:69:44:dd:c4:b2:50:c5:7a:67: 1f:e5:b1:57:e0:6a:09:99:53:ef:72:34:13:cc:55:52:18:d1: 53:55:05:a3:86:9c:db:41:16:93:01:3c:49:1b:e6:1d:0b:31: ed:7e:3c:1f:46:7b:bd:dc:04:15:a6:76:e7:90:29:db:d3:88: ba:f6:9b:63:11:29:e5:00:04:01:1b:f8:52:e2:07:8d:4b:92: 51:00:8d:b7:fa:92:e2:61:2f:16:2c:fe:ec:bc:ca:e2:8c:88: 43:a8:0c:3f:a5:51:88:20:c4:6b:dd:cb:bc:b1:b2:83:c0:19: 7c:d0:86:21:71:e2:94:37:ae:0b:e1:6b:5c:0f:8c:ae:61:c1: a6:30:93:ef:4d:79:d1:94:b6:72:36:58:7b:9e:c2:6b:76:6c: 11:97:69:b4 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALp5MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ3NTNaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDE2MEI4MTQwNjk3NzAwNzU2NjkwOTdGRjRGMUUzRDcwRTZDRDBD MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDayireGQ2ANBKTg4Vg ZpD7L9VThFsN1mcgNYYeEfPYS51wT0qbGmH80FNs/vdUtSX5xzdn3npS30xx/+wg 51ctNq7wh9SJHx4FEzhM3Of1+2Dyv7viU0zOaXxWTyc+9vLkkuyur0P5dm4pisHl TIem009/VFqIK4XjBClYMwqOjNc3w2mZQkSS1mWOoHQr51tcF4y1FSRT9sYbjDAF CAxL03RXUN7NFAEQkg/88cHEUjfo01YOqaFaLlyZMfxg+Jtp4JNUdcLKrhorpvJU qC9tnov7I0acYiWq9+RyUkZI2S0stz08vTijtvG9naOyNZ6vAa/aTspylGm+xahK pcoBAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUFguBQGl3AHVmkJf/Tx49cObNDAYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NjgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI2OC9GZ3VCUUdsM0FIVm1rSmZfVHg0OWNPYk5EQVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBJAGIIDANBgkqhkiG9w0BAQsF AAOCAQEAX1bbsjZRQUkWhJnBdrKC7klmLajWtxdUmjoj9Tc8qGn7iNespc0qAi3m VgOlXxay9OCNApHNl6/yezRp6oO+GG5jZKyks5OcVDUEQm7eHp2esQGoaC2t5br1 XQk5fIics+hRaUTdxLJQxXpnH+WxV+BqCZlT73I0E8xVUhjRU1UFo4ac20EWkwE8 SRvmHQsx7X48H0Z7vdwEFaZ255Ap29OIuvabYxEp5QAEARv4UuIHjUuSUQCNt/qS 4mEvFiz+7LzK4oyIQ6gMP6VRiCDEa93LvLGyg8AZfNCGIXHilDeuC+FrXA+MrmHB pjCT70150ZS2cjZYe57Ca3ZsEZdptA== -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:38 2024 by rpki-client on console-ams.rpki-client.org