$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HyvT_FgAR7sT-SXU8sngoeOGTmU.cer File: HyvT_FgAR7sT-SXU8sngoeOGTmU.cer (raw, json) Hash identifier: AG+y7t+4lP+eZS8Qk1n/CVsOBUT1I1PyqZ1aRcitAKY= Subject key identifier: 1F:2B:D3:FC:58:00:47:BB:13:F9:25:D4:F2:C9:E0:A1:E3:86:4E:65 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:21:33 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 101.96.160.0 -- 101.96.255.255 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 11:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44753 (0xaed1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:21:33 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=1F2BD3FC580047BB13F925D4F2C9E0A1E3864E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:61:45:ef:b8:c2:89:2d:cf:81:46:6f:fc: 70:74:ac:fc:e6:5b:dd:56:75:b0:ac:9d:da:36:fa: 0b:95:e3:43:3f:ef:bc:bc:2a:d5:cb:57:49:b4:30: 19:7c:19:bd:87:4a:7a:43:bb:9c:74:ff:c0:c4:f9: b2:b9:10:88:cc:54:14:3b:bc:25:61:74:0a:b8:7b: e8:ce:2b:1c:8d:bc:36:29:f8:66:73:59:27:f7:bc: 66:22:a5:e7:39:31:b1:33:61:9c:fe:11:6b:37:7c: 5d:50:48:36:04:fb:dc:73:2f:14:d3:df:84:11:c5: 45:af:ef:0c:28:02:10:98:09:c7:2c:fb:59:55:a4: 9f:b4:08:0f:7e:35:c5:66:37:5e:51:e0:0c:a3:93: 37:07:72:83:33:d5:e0:0a:33:f0:3c:08:03:3d:ec: ce:ae:1f:ce:de:12:b5:d0:3b:2f:6a:42:b4:92:e6: b7:e5:06:b4:d0:a5:d4:4d:12:3b:74:b4:6a:44:91: 11:b4:5e:4f:d4:47:2b:12:a8:1c:c0:af:da:4a:02: d3:4d:1e:44:e3:21:26:33:5c:c0:56:cc:7e:df:24: 55:c6:04:dd:b2:76:36:75:6b:f5:6d:a8:8f:66:62: 64:4a:28:9b:96:17:6d:6a:50:09:c5:11:42:15:b3: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2B:D3:FC:58:00:47:BB:13:F9:25:D4:F2:C9:E0:A1:E3:86:4E:65 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.96.160.0-101.96.255.255 Signature Algorithm: sha256WithRSAEncryption b0:05:3b:9e:85:31:f0:fb:8b:09:bc:b8:39:a2:a0:9d:3e:a3: 47:90:51:fc:79:a0:b8:df:59:54:4a:4b:c7:76:7d:ec:60:f1: 53:17:89:be:62:7e:b0:a1:da:55:be:a3:b9:9c:c2:25:a5:95: f2:d1:fc:b3:90:ad:bc:ad:36:77:a3:25:ba:4f:60:cb:0b:3f: 49:22:a3:30:8c:c0:43:fa:82:e3:61:5a:ff:0e:7e:c7:98:a3: 63:54:75:09:97:b3:5f:58:26:0a:eb:b6:fb:63:b7:5d:29:a6: db:f4:d8:3f:52:33:56:b1:a7:ad:58:e8:bb:89:de:53:52:ee: a0:de:b2:7a:16:25:ac:fe:40:77:f0:9f:9d:a9:0d:3b:f8:b7: 8f:c3:6e:bc:bd:d2:cd:70:35:85:09:52:07:ad:b0:55:ae:90: 03:0f:0b:06:84:15:cf:c7:cb:c4:00:6e:78:7b:05:83:38:b8: a2:07:da:fc:a6:3c:03:86:de:12:85:d2:16:98:48:f5:69:92: dd:6c:ab:09:90:7e:3b:fd:57:97:a2:8f:4e:85:36:4f:67:3b: 50:92:86:5a:d1:3b:1f:1d:d3:b7:f7:2b:32:58:57:c8:19:92: c9:31:cb:b1:03:35:98:ea:75:eb:a8:fc:9e:08:6d:52:fd:2c: f0:7f:03:b4 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIDAK7RMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIxMzNaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKDFGMkJEM0ZDNTgwMDQ3QkIxM0Y5MjVENEYyQzlFMEExRTM4NjRF NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmemFF77jCiS3PgUZv /HB0rPzmW91WdbCsndo2+guV40M/77y8KtXLV0m0MBl8Gb2HSnpDu5x0/8DE+bK5 EIjMVBQ7vCVhdAq4e+jOKxyNvDYp+GZzWSf3vGYipec5MbEzYZz+EWs3fF1QSDYE +9xzLxTT34QRxUWv7wwoAhCYCccs+1lVpJ+0CA9+NcVmN15R4AyjkzcHcoMz1eAK M/A8CAM97M6uH87eErXQOy9qQrSS5rflBrTQpdRNEjt0tGpEkRG0Xk/URysSqBzA r9pKAtNNHkTjISYzXMBWzH7fJFXGBN2ydjZ1a/VtqI9mYmRKKJuWF21qUAnFEUIV s+TVAgMBAAGjggJaMIICVjAdBgNVHQ4EFgQUHyvT/FgAR7sT+SXU8sngoeOGTmUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM3 OC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNzgvSHl2VF9GZ0FSN3NULVNYVThzbmdvZU9HVG1VLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAm BggrBgEFBQcBBwEB/wQXMBUwEwQCAAEwDTALAwQFZWCgAwMAZWAwDQYJKoZIhvcN AQELBQADggEBALAFO56FMfD7iwm8uDmioJ0+o0eQUfx5oLjfWVRKS8d2fexg8VMX ib5ifrCh2lW+o7mcwiWllfLR/LOQrbytNnejJbpPYMsLP0kiozCMwEP6guNhWv8O fseYo2NUdQmXs19YJgrrtvtjt10pptv02D9SM1axp61Y6LuJ3lNS7qDesnoWJaz+ QHfwn52pDTv4t4/Dbry90s1wNYUJUgetsFWukAMPCwaEFc/Hy8QAbnh7BYM4uKIH 2vymPAOG3hKF0haYSPVpkt1sqwmQfjv9V5eij06FNk9nO1CShlrROx8d07f3KzJY V8gZkskxy7EDNZjqdeuo/J4IbVL9LPB/A7Q= -----END CERTIFICATE-----Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org