$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer File: KJHRbBFPOs_eoosPXIzhRucxndI.cer (raw, json) Hash identifier: JkJPoFDNjyUvhYymptuiwTIn2dMOnODSX+F7xLuv+Ug= Subject key identifier: 28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3848 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sat 12 Oct 2024 07:43:28 +0000 Certificate not after: Sun 12 Oct 2025 07:27:43 +0000 Subordinate resources: IP: 160.191.0.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14408 (0x3848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 12 07:43:28 2024 GMT Not After : Oct 12 07:27:43 2025 GMT Subject: CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:af:7a:03:54:4f:83:88:26:54:15:a4:c8: 71:10:ed:53:e1:f8:79:50:d0:77:90:ae:ec:01:a8: e5:a0:0c:b1:44:ea:f2:b8:d0:91:11:51:ad:b3:86: dd:22:47:77:9c:68:97:7a:63:23:05:6a:7f:a8:9e: 70:7b:f2:ed:91:30:02:cd:e5:5c:07:88:51:8b:43: 25:f8:c9:21:05:23:a9:6b:2c:b1:32:6b:0b:8b:6f: ab:a5:de:d2:9b:78:7e:21:86:39:c6:7b:15:0d:81: ac:da:e3:95:48:21:12:c5:74:aa:d5:8c:3d:e1:37: fa:bc:e8:6b:24:b9:d1:9e:da:e1:3d:0c:f5:37:e8: 75:97:ae:a5:f4:30:42:79:ff:c8:4d:86:6f:45:f9: e2:1b:19:a0:bb:50:75:32:d2:e3:d8:d1:90:e8:c1: 6b:d4:b9:e8:75:6e:50:62:07:1e:c0:3a:59:c1:49: 34:15:f8:9f:18:6f:b2:41:1b:f0:db:c1:02:57:0c: ff:96:d8:66:17:11:94:24:80:6c:15:f0:05:f7:9c: f7:f3:f2:ed:86:2b:50:a7:04:31:b6:d6:41:da:6d: 27:13:e9:e1:2d:c5:91:11:46:42:03:2c:21:7a:25: 66:a2:47:37:25:15:4f:c4:99:4f:ad:a4:25:e1:bb: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.0.0/23 Signature Algorithm: sha256WithRSAEncryption 92:d5:ce:f6:48:6b:25:95:4f:d9:53:0c:cb:9d:c8:c9:39:16: 7b:55:75:7a:c5:e6:39:05:27:66:56:04:83:a8:94:c3:95:71: 5f:94:cf:79:91:6e:cf:d1:29:87:8f:62:1f:44:b8:bb:ce:2d: e9:f0:ee:e0:0c:0b:c2:03:6d:34:5f:c1:64:b6:68:50:ea:cd: d8:d3:17:5d:60:cd:f2:73:38:31:32:15:a4:33:b8:5f:16:7d: 75:ed:19:52:dd:bd:c0:9b:cf:10:eb:29:4f:aa:2a:da:52:38: 9f:a2:79:1b:89:c3:7b:7e:dd:a1:24:8a:75:dd:39:f8:8d:ca: 5c:e9:e3:7b:48:12:72:4e:04:88:73:4a:72:46:83:93:89:74: f4:33:df:e9:d6:4a:cd:7e:0a:49:c7:f2:06:ac:6c:9e:ed:95: da:d8:f2:29:f2:10:2a:7e:10:48:9e:72:54:ed:d7:82:bf:5b: 69:45:a1:b2:22:32:e0:16:c6:04:9d:bb:17:fa:b7:b8:52:5d: aa:2f:1a:76:53:61:47:7b:0a:0a:ef:7e:77:23:cc:f2:23:8c: 20:1b:9f:96:8a:8f:39:fe:92:ab:c9:0a:1d:d9:0e:ad:19:90: 7a:0b:78:b6:18:40:43:2e:76:91:c1:4f:f8:17:4a:f9:8f:3d: 3c:78:5a:19 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOEgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MTAxMjA3NDMyOFoXDTI1MTAxMjA3Mjc0M1owMzEx MC8GA1UEAxMoMjg5MUQxNkMxMTRGM0FDRkRFQTI4QjBGNUM4Q0UxNDZFNzMxOURE MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALutr3oDVE+DiCZUFaTI cRDtU+H4eVDQd5Cu7AGo5aAMsUTq8rjQkRFRrbOG3SJHd5xol3pjIwVqf6iecHvy 7ZEwAs3lXAeIUYtDJfjJIQUjqWsssTJrC4tvq6Xe0pt4fiGGOcZ7FQ2BrNrjlUgh EsV0qtWMPeE3+rzoayS50Z7a4T0M9TfodZeupfQwQnn/yE2Gb0X54hsZoLtQdTLS 49jRkOjBa9S56HVuUGIHHsA6WcFJNBX4nxhvskEb8NvBAlcM/5bYZhcRlCSAbBXw Bfec9/Py7YYrUKcEMbbWQdptJxPp4S3FkRFGQgMsIXolZqJHNyUVT8SZT62kJeG7 cRsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQokdFsEU86z96iiw9cjOFG5zGd0jAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzIyL0tKSFJiQkZQT3NfZW9vc1BYSXpoUnVjeG5kSS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgvwAwDQYJKoZIhvcNAQELBQAD ggEBAJLVzvZIayWVT9lTDMudyMk5FntVdXrF5jkFJ2ZWBIOolMOVcV+Uz3mRbs/R KYePYh9EuLvOLenw7uAMC8IDbTRfwWS2aFDqzdjTF11gzfJzODEyFaQzuF8WfXXt GVLdvcCbzxDrKU+qKtpSOJ+ieRuJw3t+3aEkinXdOfiNylzp43tIEnJOBIhzSnJG g5OJdPQz3+nWSs1+CknH8gasbJ7tldrY8inyECp+EEieclTt14K/W2lFobIiMuAW xgSduxf6t7hSXaovGnZTYUd7CgrvfncjzPIjjCAbn5aKjzn+kqvJCh3ZDq0ZkHoL eLYYQEMudpHBT/gXSvmPPTx4Whk= -----END CERTIFICATE-----Generated at Mon Nov 25 04:45:27 2024 by rpki-client on console-ams.rpki-client.org