$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer File: JKE7dSyiLWMkgdhuY953eAuDMfw.cer (raw, json) Hash identifier: Iifooc59dQjAoY2ZMy20FxangJAvq0S47JU0QrdkP50= Subject key identifier: 24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:55:36 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 160.30.198.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14309 (0x37e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:55:36 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=24A13B752CA22D632481D86E63DE77780B8331FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:9b:4d:71:61:d7:64:1e:42:11:f1:6c:27: b0:98:d9:d0:43:2d:61:d2:20:8f:31:78:ea:ec:ac: 3e:3f:27:a5:7b:c6:3c:3a:43:bb:14:48:07:d6:9b: 44:76:27:c2:be:4d:ed:ca:46:2b:52:6c:09:cc:49: 04:68:9b:a3:1c:d1:c2:bb:94:f5:b3:90:6f:15:a4: 0f:a5:ad:ed:34:c3:24:48:4d:7f:6f:0a:d4:fc:2f: c7:b7:27:1b:95:4e:43:37:aa:2d:14:08:ad:4d:24: 9b:67:0c:7b:ec:17:56:90:e2:76:58:4e:c8:4b:7c: 7a:d2:a2:98:ad:3b:2e:8f:75:d5:c6:81:d3:e9:fc: 3a:10:fd:8b:fa:62:10:1d:08:89:9f:86:60:36:d3: d7:f5:f4:3a:f7:44:77:b6:af:1b:cb:6e:99:60:73: 31:44:db:59:30:c8:f0:ef:da:b3:17:7f:f2:d3:c8: 11:34:9b:83:a7:41:6c:34:5c:18:49:20:54:b9:1c: 1e:21:b3:10:b4:4b:a8:5d:c3:4d:eb:71:30:ce:82: fd:c4:72:bc:5d:e0:96:b8:ef:d5:05:65:2d:75:78: 74:99:d9:9e:44:e8:e3:31:38:d5:fb:1f:4f:fe:87: c6:b3:62:d0:cd:23:20:06:f8:03:72:14:ba:d0:a8: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.198.0/23 Signature Algorithm: sha256WithRSAEncryption a4:09:2c:99:48:7e:c8:ac:f1:ce:73:c3:15:7b:df:f3:d8:8a: c9:7a:30:4d:be:c9:53:d8:ac:44:95:ef:7e:6b:f6:a9:98:43: f5:61:a1:b1:47:69:03:9e:52:4c:10:85:01:ae:bc:22:6a:b9: 9b:09:f2:3b:0d:d6:21:24:af:2e:21:5f:02:6d:2e:f0:76:08: 8f:d1:ae:82:b4:b9:32:68:1e:96:65:3c:35:aa:1a:9e:27:78: ca:be:c1:37:99:b6:29:51:34:54:d2:2d:84:bf:8b:a9:76:39: ef:3d:b6:b7:eb:e7:f4:a1:71:eb:c8:5b:82:f2:6a:a8:2f:43: 57:83:e2:aa:28:6d:68:8b:41:dc:3a:10:58:c5:95:56:b8:52: 47:6f:4a:a8:9e:13:42:2f:0f:bf:b9:31:64:bf:fa:a2:30:97: 9c:c7:bb:21:a6:93:f4:75:19:f6:0c:25:1c:e8:4b:66:22:2f: db:ff:35:00:58:02:bb:b7:45:b3:71:77:70:6b:3a:f8:d3:ed: 5a:61:51:22:58:e9:6b:4b:22:f9:9f:85:22:17:77:b3:80:c5: 37:48:f7:e8:2a:60:10:f5:fe:98:66:83:ea:c1:58:5e:f5:38: ab:0c:9f:cd:4a:ff:f1:7b:67:ec:86:2b:2d:04:58:e5:e6:f4: 42:65:38:cb -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN+UwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTUzNloXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoMjRBMTNCNzUyQ0EyMkQ2MzI0ODFEODZFNjNERTc3NzgwQjgzMzFG QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOEmm01xYddkHkIR8Wwn sJjZ0EMtYdIgjzF46uysPj8npXvGPDpDuxRIB9abRHYnwr5N7cpGK1JsCcxJBGib oxzRwruU9bOQbxWkD6Wt7TTDJEhNf28K1Pwvx7cnG5VOQzeqLRQIrU0km2cMe+wX VpDidlhOyEt8etKimK07Lo911caB0+n8OhD9i/piEB0IiZ+GYDbT1/X0OvdEd7av G8tumWBzMUTbWTDI8O/asxd/8tPIETSbg6dBbDRcGEkgVLkcHiGzELRLqF3DTetx MM6C/cRyvF3glrjv1QVlLXV4dJnZnkTo4zE41fsfT/6HxrNi0M0jIAb4A3IUutCo HUcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQkoTt1LKItYySB2G5j3nd4C4Mx/DAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzE0L0pLRTdkU3lpTFdNa2dkaHVZOTUzZUF1RE1mdy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHsYwDQYJKoZIhvcNAQELBQAD ggEBAKQJLJlIfsis8c5zwxV73/PYisl6ME2+yVPYrESV735r9qmYQ/VhobFHaQOe UkwQhQGuvCJquZsJ8jsN1iEkry4hXwJtLvB2CI/RroK0uTJoHpZlPDWqGp4neMq+ wTeZtilRNFTSLYS/i6l2Oe89trfr5/ShcevIW4LyaqgvQ1eD4qoobWiLQdw6EFjF lVa4UkdvSqieE0IvD7+5MWS/+qIwl5zHuyGmk/R1GfYMJRzoS2YiL9v/NQBYAru3 RbNxd3BrOvjT7VphUSJY6WtLIvmfhSIXd7OAxTdI9+gqYBD1/phmg+rBWF71OKsM n81K//F7Z+yGKy0EWOXm9EJlOMs= -----END CERTIFICATE-----Generated at Mon Nov 25 04:56:12 2024 by rpki-client on console-fra.rpki-client.org