$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer File: K_-tbb6GgEycV_BdDDuGxFNO9xg.cer (raw, json) Hash identifier: qTOLxlfDsKQLk8RdHRtJKecyY+JYCGSN9u2Lpj+W1og= Subject key identifier: 2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BAF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:49:45 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 151304 -- 151306 IP: 2401:2e20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47865 (0xbaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:49:45 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:69:3e:51:f1:26:48:6f:b0:94:7f:9c:d3: c4:ab:0c:ba:60:95:4d:ac:eb:de:66:be:95:a3:63: 6e:6e:87:99:26:42:0a:f3:f6:91:53:31:b1:3e:1f: ef:3d:3f:ef:48:8d:fc:4c:ae:29:1e:ee:39:2f:02: 58:8f:85:41:13:4c:a3:46:ba:ae:ae:e8:c8:3b:24: 24:c3:29:38:79:93:6f:a0:88:3f:61:c3:c4:40:d4: 74:d7:f5:d8:87:d6:7a:c2:18:23:2d:7f:27:72:47: d2:30:31:0d:32:6c:65:a6:93:f3:65:c7:00:fd:40: f8:38:22:d1:36:08:7d:34:a8:68:af:2c:fe:05:1b: bb:0d:06:e0:7d:8f:a3:98:6e:dc:94:58:81:47:db: c2:8e:15:38:4a:f1:c6:18:b1:43:19:3c:e6:c7:80: 2a:40:bd:63:17:99:62:08:b0:3b:79:62:5a:f0:87: 1a:a4:7a:ae:c1:20:77:c8:a1:23:8f:06:f7:36:bd: 63:0f:09:63:2e:85:e2:7b:cb:35:13:e5:22:9f:a0: 00:0b:fa:0e:6f:ac:80:b9:a9:fc:47:91:49:f0:59: 38:86:c9:46:de:e4:18:fa:51:5e:ed:ed:4d:1c:97: da:5d:ec:1e:ca:88:b1:0a:be:f3:63:1e:7a:1e:a3: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151304-151306 sbgp-ipAddrBlock: critical IPv6: 2401:2e20::/32 Signature Algorithm: sha256WithRSAEncryption 2e:ff:e2:88:40:85:a7:f2:4c:98:75:93:46:65:de:f3:d6:22: 54:cc:de:88:f6:20:3f:47:54:99:35:63:6b:5d:94:12:cb:c4: 8a:88:c0:01:32:3b:ff:55:35:36:87:08:d6:67:c8:d2:64:ce: 78:1a:24:c1:60:7f:da:bd:78:f6:b5:52:9f:58:f4:78:05:66: 52:6f:a9:81:53:41:56:cf:f6:e5:1f:a7:07:3f:1a:2b:e9:8b: c8:d4:ef:67:b4:8d:41:c2:18:63:77:e4:f0:b4:7a:b8:2d:d6: 08:e2:8b:29:36:2a:fc:ab:af:b2:93:36:fc:f6:e7:1d:67:99: fc:3e:e6:76:4e:1a:bf:b8:8f:b0:21:89:aa:18:56:93:a7:b9: 78:85:40:26:9a:a9:a4:18:9e:ca:a0:1a:ec:8a:b8:16:cb:88: 4b:42:94:33:6f:2f:81:ed:bf:42:78:94:1e:c8:96:3a:6b:9b: 87:b4:8e:d4:09:a9:87:91:44:41:9b:2a:6a:db:71:d1:6d:d8: 18:17:f4:9e:17:ad:82:3a:01:80:cd:a8:ab:36:5f:7c:a3:01: 8c:ff:c2:41:fb:04:12:4d:3a:c8:a5:7a:60:ad:3d:55:a0:9f: b4:42:f4:c0:c2:ad:56:30:15:8b:ff:f8:06:aa:45:01:6f:a8: 1f:c6:7c:41 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDALr5MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ5NDVaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDJCRkZBRDZEQkU4NjgwNEM5QzU3RjA1RDBDM0I4NkM0NTM0RUY3 MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsGk+UfEmSG+wlH+c 08SrDLpglU2s695mvpWjY25uh5kmQgrz9pFTMbE+H+89P+9IjfxMrike7jkvAliP hUETTKNGuq6u6Mg7JCTDKTh5k2+giD9hw8RA1HTX9diH1nrCGCMtfydyR9IwMQ0y bGWmk/NlxwD9QPg4ItE2CH00qGivLP4FG7sNBuB9j6OYbtyUWIFH28KOFThK8cYY sUMZPObHgCpAvWMXmWIIsDt5Ylrwhxqkeq7BIHfIoSOPBvc2vWMPCWMuheJ7yzUT 5SKfoAAL+g5vrIC5qfxHkUnwWTiGyUbe5Bj6UV7t7U0cl9pd7B7KiLEKvvNjHnoe ozCHAgMBAAGjggJ5MIICdTAdBgNVHQ4EFgQUK/+tbb6GgEycV/BdDDuGxFNO9xgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIzOS9LXy10YmI2R2dFeWNWX0JkRER1R3hGTk85eGcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwwCgIDAk8IAgMCTwowIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAkAS4gMA0GCSqGSIb3DQEBCwUAA4IBAQAu/+KIQIWn 8kyYdZNGZd7z1iJUzN6I9iA/R1SZNWNrXZQSy8SKiMABMjv/VTU2hwjWZ8jSZM54 GiTBYH/avXj2tVKfWPR4BWZSb6mBU0FWz/blH6cHPxor6YvI1O9ntI1Bwhhjd+Tw tHq4LdYI4ospNir8q6+ykzb89ucdZ5n8PuZ2Thq/uI+wIYmqGFaTp7l4hUAmmqmk GJ7KoBrsirgWy4hLQpQzby+B7b9CeJQeyJY6a5uHtI7UCamHkURBmypq23HRbdgY F/SeF62COgGAzairNl98owGM/8JB+wQSTTrIpXpgrT1VoJ+0QvTAwq1WMBWL//gG qkUBb6gfxnxB -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:38 2024 by rpki-client on console-ams.rpki-client.org