$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer File: LznWwjiJNFGgbrNMUtd6vBiQa-A.cer (raw, json) Hash identifier: We979kYXRpCAm5vZpncR2QVL6qsxw0oiIRfWNy/j1tM= Subject key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BB3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:50:45 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 139091 IP: 103.1.24.0/22 IP: 103.140.14.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47935 (0xbb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:50:45 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:c9:56:8f:b1:0a:f8:a9:7b:76:6a:3e:fe: b8:ee:dc:51:0a:30:33:73:80:b0:23:12:38:fc:dc: 1c:57:d6:d5:c9:0b:a9:c8:96:e3:a7:72:5f:e4:5d: 4b:31:5e:fd:5c:8e:6c:cb:06:23:ba:3a:63:95:c6: 4a:f6:f3:92:4a:72:ad:96:6f:16:a4:64:0e:65:06: d0:ec:52:94:f1:53:3c:d1:78:dd:18:86:2e:de:c7: e9:83:b1:95:4b:6d:98:e6:77:c9:f1:b3:4a:98:68: 78:63:cc:85:ee:45:e5:64:d1:d3:c1:47:07:e0:0c: d0:6f:5c:04:eb:6d:e7:06:9d:73:45:c1:b7:dd:29: 6b:04:a7:4a:29:78:30:75:f4:19:08:03:47:3b:2e: 0e:71:e1:39:79:cb:8a:26:b9:24:a7:a4:73:b2:6b: d1:f7:e8:8f:68:75:6c:7b:b0:5b:a9:10:a0:37:89: 44:63:ab:59:3e:c1:67:7f:0b:68:27:d1:28:f5:74: 1a:38:df:5c:49:76:98:58:cd:cd:6d:49:5b:e1:f7: f1:f0:ca:22:d4:fe:97:ee:86:b5:21:af:cd:34:e8: cd:1d:b6:2f:ad:0b:35:1f:f2:df:38:42:e3:14:90: b0:49:65:3a:d2:62:62:50:e7:62:ef:8c:53:d3:b4: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139091 sbgp-ipAddrBlock: critical IPv4: 103.1.24.0/22 103.140.14.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:69:76:db:25:95:4d:72:b8:17:17:00:34:3e:3b:b2:7e:c4: c2:20:50:2d:db:dd:a5:f0:70:38:be:f0:51:a8:2e:57:a5:0d: 18:7a:38:10:42:00:c7:4e:56:8f:59:93:6b:51:8d:8d:0f:41: 39:a0:53:21:a6:71:2d:8f:9a:b2:b7:1d:e5:54:0c:d4:ac:e5: 73:89:29:94:03:0b:f1:31:dd:0b:06:45:01:ee:ea:eb:99:53: 44:14:b2:f6:2f:77:84:cd:d9:5e:32:9e:8c:f4:97:d2:82:f0: 55:28:bb:24:76:0c:30:cf:db:41:c3:57:cb:ae:ea:f9:41:08: d5:4d:c4:1c:ea:68:13:43:cd:4a:dc:33:1d:77:91:66:a4:33: 58:28:06:37:96:75:1f:f6:6c:89:00:65:3b:ea:53:08:7f:8b: 53:ea:99:d2:f0:a0:72:31:8f:c1:7d:e3:6b:31:33:7d:79:63: 49:f0:d9:e7:31:7e:d1:b3:08:cb:40:2d:9c:b1:2c:24:5f:a7: 12:ca:cb:4c:c4:21:fb:74:24:91:82:a5:55:3d:8a:a7:10:e3: 3f:c4:39:72:d2:74:00:93:a8:a7:63:a8:cc:5c:71:84:e0:e1: c3:0c:94:ad:5c:89:cb:a6:d8:31:cd:99:d2:3d:e8:25:dc:ae: 5e:22:44:ff -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDALs/MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUwNDVaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDJGMzlENkMyMzg4OTM0NTFBMDZFQjM0QzUyRDc3QUJDMTg5MDZC RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXclWj7EK+Kl7dmo+ /rju3FEKMDNzgLAjEjj83BxX1tXJC6nIluOncl/kXUsxXv1cjmzLBiO6OmOVxkr2 85JKcq2WbxakZA5lBtDsUpTxUzzReN0Yhi7ex+mDsZVLbZjmd8nxs0qYaHhjzIXu ReVk0dPBRwfgDNBvXATrbecGnXNFwbfdKWsEp0opeDB19BkIA0c7Lg5x4Tl5y4om uSSnpHOya9H36I9odWx7sFupEKA3iURjq1k+wWd/C2gn0Sj1dBo431xJdphYzc1t SVvh9/HwyiLU/pfuhrUhr8006M0dti+tCzUf8t84QuMUkLBJZTrSYmJQ52LvjFPT tM2ZAgMBAAGjggJ3MIICczAdBgNVHQ4EFgQULznWwjiJNFGgbrNMUtd6vBiQa+Aw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4 OTgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjg5OC9Mem5Xd2ppSk5GR2dick5NVXRkNnZCaVFhLUEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfUzAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAmcBGAMEAWeMDjANBgkqhkiG9w0BAQsFAAOCAQEAm2l22yWVTXK4 FxcAND47sn7EwiBQLdvdpfBwOL7wUaguV6UNGHo4EEIAx05Wj1mTa1GNjQ9BOaBT IaZxLY+asrcd5VQM1Kzlc4kplAML8THdCwZFAe7q65lTRBSy9i93hM3ZXjKejPSX 0oLwVSi7JHYMMM/bQcNXy67q+UEI1U3EHOpoE0PNStwzHXeRZqQzWCgGN5Z1H/Zs iQBlO+pTCH+LU+qZ0vCgcjGPwX3jazEzfXljSfDZ5zF+0bMIy0AtnLEsJF+nEsrL TMQh+3QkkYKlVT2KpxDjP8Q5ctJ0AJOop2OozFxxhODhwwyUrVyJy6bYMc2Z0j3o JdyuXiJE/w== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:25 2024 by rpki-client on console-fra.rpki-client.org