$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LTxBkfus18zT0-oZXlR0KTGatwI.cer File: LTxBkfus18zT0-oZXlR0KTGatwI.cer (raw, json) Hash identifier: oT8cgiGQtoWlGTXO7gQzSHEecmh2+SuP+KI4UAhErho= Subject key identifier: 2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BBF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:30 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:9d20::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48117 (0xbbf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:53:30 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2D3C4191FBACD7CCD3D3EA195E547429319AB702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:53:b3:25:67:77:db:ad:ad:f0:10:37:69: 66:4e:4a:2c:07:61:44:5c:85:e3:1e:d7:08:fc:8e: ce:18:f5:eb:03:ca:e4:75:de:bb:9f:34:85:26:89: 05:11:e0:99:c0:d1:03:73:d0:b2:00:17:bf:83:ec: 17:88:61:21:b0:7a:f7:97:c5:54:59:85:24:ca:0d: b6:1b:07:4d:2d:97:38:b7:db:6a:24:52:f3:bf:f8: db:df:a3:11:5f:01:d1:29:ab:4d:f2:f9:55:07:1b: f7:48:7f:18:47:a3:18:d4:a5:a4:b0:12:a1:17:58: b0:b7:bf:40:5d:47:7f:53:96:5b:e4:5f:2c:33:97: 28:24:3d:ca:b7:24:5a:e3:d0:fd:f2:69:0a:e3:59: a9:52:ec:82:3c:4e:20:fb:f4:b6:f4:1f:dd:92:5a: 9e:bb:75:0d:9b:64:2a:ec:32:3b:80:2c:7c:82:88: 25:6c:2b:49:59:a5:1c:cb:22:61:34:14:c1:a0:42: e8:22:52:46:f9:0e:2e:b3:28:69:12:d3:e1:ef:e8: d6:fc:05:d7:95:4d:d9:df:02:f5:a6:f9:16:6e:75: ee:74:59:72:df:3a:d3:70:e7:8f:89:e0:d8:43:52: 74:9b:6c:c5:d7:7f:08:68:fa:a5:11:b0:e5:cc:68: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3C:41:91:FB:AC:D7:CC:D3:D3:EA:19:5E:54:74:29:31:9A:B7:02 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3280/LTxBkfus18zT0-oZXlR0KTGatwI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:9d20::/32 Signature Algorithm: sha256WithRSAEncryption 2a:84:5f:27:23:5b:82:73:79:4c:2d:99:ec:25:bb:ca:9f:76: 2f:dc:e6:dd:33:5a:3f:36:a5:3a:be:f4:c2:b9:67:d4:c4:d8: 39:bf:dd:1e:ca:54:3a:fd:a8:71:f0:03:ba:9d:2b:10:db:0f: 09:5e:0b:4f:7d:03:2f:c9:cf:24:5c:98:d7:81:77:03:4b:1d: 67:60:86:7b:dc:93:25:bb:ce:2a:6e:b5:7d:e5:15:a0:59:57: ae:f7:79:d4:c8:1b:fc:4d:f1:85:62:21:b8:f1:5e:bb:9d:59: 0d:c6:44:19:23:80:2a:f1:7f:19:34:89:c8:59:4b:82:a8:0f: 16:82:b2:43:a7:c2:b7:b3:f1:9d:33:1b:58:e5:f9:9f:f1:8f: ac:7b:12:8a:f3:78:56:31:de:49:ed:4f:d8:3c:6b:cb:e3:7a: 98:c7:a9:b0:9b:c5:7d:c5:c7:75:15:2b:8e:d9:25:3d:82:38: e1:fc:ba:9a:3f:dc:15:b7:c6:f1:e0:08:90:6a:8b:58:3a:a4: 13:b4:d5:e1:dc:32:07:60:3d:17:8e:fe:55:85:39:c8:ed:3d: bd:c3:7a:17:d8:88:e5:29:94:69:c4:79:d3:86:8d:70:db:0d: c1:1a:3a:13:42:17:86:16:15:1c:6c:1e:d6:0e:e3:22:49:93: 6a:2d:0f:41 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALv1MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUzMzBaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDJEM0M0MTkxRkJBQ0Q3Q0NEM0QzRUExOTVFNTQ3NDI5MzE5QUI3 MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOlOzJWd3262t8BA3 aWZOSiwHYURcheMe1wj8js4Y9esDyuR13rufNIUmiQUR4JnA0QNz0LIAF7+D7BeI YSGweveXxVRZhSTKDbYbB00tlzi322okUvO/+NvfoxFfAdEpq03y+VUHG/dIfxhH oxjUpaSwEqEXWLC3v0BdR39TllvkXywzlygkPcq3JFrj0P3yaQrjWalS7II8TiD7 9Lb0H92SWp67dQ2bZCrsMjuALHyCiCVsK0lZpRzLImE0FMGgQugiUkb5Di6zKGkS 0+Hv6Nb8BdeVTdnfAvWm+RZude50WXLfOtNw54+J4NhDUnSbbMXXfwho+qURsOXM aLz/AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQULTxBkfus18zT0+oZXlR0KTGatwIw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4MC9MVHhCa2Z1czE4elQwLW9aWGxSMEtUR2F0d0kubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGdIDANBgkqhkiG9w0BAQsF AAOCAQEAKoRfJyNbgnN5TC2Z7CW7yp92L9zm3TNaPzalOr70wrln1MTYOb/dHspU Ov2ocfADup0rENsPCV4LT30DL8nPJFyY14F3A0sdZ2CGe9yTJbvOKm61feUVoFlX rvd51Mgb/E3xhWIhuPFeu51ZDcZEGSOAKvF/GTSJyFlLgqgPFoKyQ6fCt7PxnTMb WOX5n/GPrHsSivN4VjHeSe1P2Dxry+N6mMepsJvFfcXHdRUrjtklPYI44fy6mj/c FbfG8eAIkGqLWDqkE7TV4dwyB2A9F47+VYU5yO09vcN6F9iI5SmUacR504aNcNsN wRo6E0IXhhYVHGwe1g7jIkmTai0PQQ== -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:38 2024 by rpki-client on console-ams.rpki-client.org