$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer File: J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer (raw, json) Hash identifier: 4PSfHre+avUTTwBX8q1wRX6ayZEqL1Kp+wEbKf2xVws= Subject key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BA97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:48:21 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 139128 IP: 103.156.28.0/23 IP: 115.182.0.0/16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47767 (0xba97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:48:21 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:3b:19:dd:55:2c:63:c5:43:e2:5b:11:a1: 2f:04:9a:c8:a5:78:44:80:ed:2d:55:cc:d1:eb:7a: c0:48:fe:e8:13:d6:5c:bb:78:ac:8c:68:a8:9d:cc: e7:31:2d:59:d7:95:62:fe:09:11:f2:20:62:85:d1: 54:c6:5a:71:00:e9:e9:e5:fc:31:74:04:5a:03:6c: a4:43:e6:47:fb:41:62:7d:33:60:ea:11:31:2e:dd: 04:40:45:44:87:cc:d5:8d:7c:aa:e9:51:24:a5:56: b6:f5:25:fe:4d:1f:d5:be:fb:ce:11:86:80:7a:11: 6a:40:5c:d5:15:b2:eb:db:c8:24:a2:d3:56:5e:6a: ab:66:52:45:2a:19:0a:a8:77:6d:7e:ba:3e:fb:cf: 5d:aa:0b:47:bc:77:9d:2c:c8:51:f2:b9:1c:4b:7c: 35:68:69:1e:ca:7d:64:41:5b:3c:30:5a:f4:3c:6d: c6:79:27:ce:8e:1e:be:13:14:db:e2:21:a1:76:ff: 36:84:5f:3a:d6:10:c6:7d:4e:15:12:19:b1:ce:ee: 22:be:31:f3:ef:19:37:25:a9:e3:c2:b8:52:4a:de: ef:ba:b9:d1:52:e0:14:05:20:d3:62:50:e8:44:e1: 79:cb:5d:45:d0:d4:ff:8b:fc:be:53:25:75:9e:92: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139128 sbgp-ipAddrBlock: critical IPv4: 103.156.28.0/23 115.182.0.0/16 Signature Algorithm: sha256WithRSAEncryption 53:7f:6a:9b:a9:bb:d6:db:64:93:0a:ce:5c:dc:6f:ec:69:df: 64:11:64:88:79:1f:f6:5a:f9:79:ec:b9:e9:b4:98:3f:0e:6c: 3a:d0:3b:8c:de:95:b8:91:25:ba:c8:70:4b:ae:1c:89:99:1f: c3:84:51:26:f8:b1:d4:7d:e2:85:fa:4e:2f:34:0c:73:33:07: f2:37:3a:da:07:b7:01:b9:16:d5:7d:82:ec:4c:68:8c:1e:e3: 36:af:29:fe:ba:c4:30:68:35:46:44:b4:18:ea:74:2a:35:41: 3e:7d:c5:95:ff:17:30:7a:9e:a6:21:3f:e3:59:b8:29:ec:78: 9d:1e:7d:a6:bb:93:c9:0f:f6:a6:fc:3d:07:a0:59:90:b7:90: 58:75:d9:e5:e6:55:70:f6:eb:c9:9c:79:86:73:c4:1d:9a:dd: 57:b6:9f:df:da:0e:2f:b7:b7:fb:f0:05:2a:1d:cd:31:7d:39: 2c:58:0c:e7:9f:e4:df:b0:ac:82:3d:ad:ad:bf:91:da:67:3b: 83:15:1a:0e:f2:50:54:ad:14:f9:7a:67:1d:66:72:e3:12:91: 07:b4:78:1a:03:f5:31:a2:2c:17:2c:0b:ef:90:98:f3:b2:64: e2:f2:af:31:b2:fe:3a:4d:63:2e:74:6b:f9:fe:5a:a2:8c:3b: d9:1d:62:bb -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALqXMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ4MjFaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDI3QjM5QjAxOEYxQUQwNjM3RTMwNzI3QzI4RDkyRTIwQTYzRUVG NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVTsZ3VUsY8VD4lsR oS8EmsileESA7S1VzNHresBI/ugT1ly7eKyMaKidzOcxLVnXlWL+CRHyIGKF0VTG WnEA6enl/DF0BFoDbKRD5kf7QWJ9M2DqETEu3QRARUSHzNWNfKrpUSSlVrb1Jf5N H9W++84RhoB6EWpAXNUVsuvbyCSi01ZeaqtmUkUqGQqod21+uj77z12qC0e8d50s yFHyuRxLfDVoaR7KfWRBWzwwWvQ8bcZ5J86OHr4TFNviIaF2/zaEXzrWEMZ9ThUS GbHO7iK+MfPvGTclqePCuFJK3u+6udFS4BQFINNiUOhE4XnLXUXQ1P+L/L5TJXWe kqcdAgMBAAGjggJ2MIICcjAdBgNVHQ4EFgQUJ7ObAY8a0GN+MHJ8KNkuIKY+71Uw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw MTUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzAxNS9KN09iQVk4YTBHTi1NSEo4S05rdUlLWS03MVUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfeDAkBggrBgEFBQcBBwEB/wQVMBMw EQQCAAEwCwMEAWecHAMDAHO2MA0GCSqGSIb3DQEBCwUAA4IBAQBTf2qbqbvW22ST Cs5c3G/sad9kEWSIeR/2Wvl57LnptJg/Dmw60DuM3pW4kSW6yHBLrhyJmR/DhFEm +LHUfeKF+k4vNAxzMwfyNzraB7cBuRbVfYLsTGiMHuM2ryn+usQwaDVGRLQY6nQq NUE+fcWV/xcwep6mIT/jWbgp7HidHn2mu5PJD/am/D0HoFmQt5BYddnl5lVw9uvJ nHmGc8Qdmt1Xtp/f2g4vt7f78AUqHc0xfTksWAznn+TfsKyCPa2tv5HaZzuDFRoO 8lBUrRT5emcdZnLjEpEHtHgaA/UxoiwXLAvvkJjzsmTi8q8xsv46TWMudGv5/lqi jDvZHWK7 -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:25 2024 by rpki-client on console-fra.rpki-client.org