$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer File: MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer (raw, json) Hash identifier: lATuWEx3tBroz8peg3II904l1CRR3qJsy9SWGI/S8aI= Subject key identifier: 30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: A311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 11 Aug 2023 07:50:09 +0000 Certificate not after: Sat 10 Aug 2024 07:41:13 +0000 Subordinate resources: AS: 17773 IP: 103.248.64.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41745 (0xa311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 11 07:50:09 2023 GMT Not After : Aug 10 07:41:13 2024 GMT Subject: CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:b0:f3:94:38:39:06:b6:fb:fc:52:5e:05: 41:00:a4:6a:14:17:26:37:49:33:95:7e:0c:88:fb: 9b:d0:8e:97:71:e4:59:02:93:d1:32:28:0a:1b:bb: 18:c8:45:54:a1:fb:b2:45:c6:01:36:44:0f:6b:44: 10:12:90:e7:a2:f2:7d:a7:19:6a:ab:4c:07:7b:c9: c5:c2:29:74:5e:f3:cc:49:0c:ce:a5:79:a1:42:3a: 28:57:bb:1a:88:cd:d5:af:e1:a6:e8:2e:c7:04:d4: 8d:04:2e:8f:34:7b:be:b8:07:07:9a:31:f0:1b:f8: 4b:03:3a:cb:10:29:b0:69:e0:a0:35:43:84:47:fa: f6:b9:49:24:5e:e7:1c:45:3b:91:56:f1:52:76:f9: a7:2e:66:f6:d1:b3:a9:b3:91:cb:ac:b9:41:ae:b5: 17:12:25:60:b8:f9:b5:9c:c7:32:4f:a2:df:44:22: 5b:fe:8c:04:46:a6:56:ed:cb:12:9f:80:86:fa:11: 52:7c:6a:e9:49:99:d8:a6:d6:15:ca:34:7f:d8:35: a1:59:45:3e:6a:e8:7c:7b:5d:4f:ac:47:12:de:8b: 46:cd:94:4c:cf:36:6e:54:16:80:d9:ff:a0:81:0a: 9a:be:ce:e4:b3:20:2f:28:d0:a2:e5:1b:1e:2e:3d: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17773 sbgp-ipAddrBlock: critical IPv4: 103.248.64.0/22 Signature Algorithm: sha256WithRSAEncryption a8:c6:d7:71:79:ab:7a:02:92:71:a8:ee:96:d7:10:ff:89:7a: 2e:ed:f0:a8:8e:21:e3:c3:0a:e7:e2:e0:ef:11:33:c8:dd:ab: 28:64:ae:a5:49:54:1a:be:6f:8d:84:76:da:9c:b5:4b:0a:ae: 0d:41:36:4a:de:fb:77:8f:71:a0:d1:c2:cd:d6:3e:02:76:9f: 6f:62:4c:fa:ca:8b:3d:18:62:0f:b3:72:3d:a2:46:9a:e1:40: c7:09:c4:71:43:9d:44:70:06:e4:17:b8:ae:c0:11:d9:0d:ab: 2b:44:99:ca:24:b2:80:67:1e:59:2f:9b:f3:e8:b2:9d:18:ca: 36:4a:dc:63:1d:71:dd:96:a5:69:04:b5:35:eb:17:1a:58:b5: 6e:08:e5:7c:f2:d8:c6:0c:03:fd:51:aa:a9:3f:36:cb:8f:76: 52:e1:64:4b:68:27:73:50:4e:53:af:e0:77:e5:49:51:5f:7e: 8b:de:0f:6b:29:e7:39:57:cf:af:21:f8:28:31:fb:78:bb:65: b6:ec:36:0c:07:06:c9:cc:b0:7e:e0:fb:3c:a2:4a:cf:ac:ac: f1:9f:df:80:c0:fa:77:29:a3:47:82:43:99:23:b4:d7:b1:4f: 1c:3f:f7:62:ac:79:fb:3e:fd:d4:ae:61:e2:be:bf:04:90:9c: a9:f6:9d:1e -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIDAKMRMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yMzA4MTEwNzUwMDlaFw0yNDA4MTAwNzQxMTNaMDMx MTAvBgNVBAMTKDMwOTU5QzBGRTg4QjdEMzFCRDI5QzEyQzE3RkU0QUY0OTVEQzZG QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPLDzlDg5Brb7/FJe BUEApGoUFyY3STOVfgyI+5vQjpdx5FkCk9EyKAobuxjIRVSh+7JFxgE2RA9rRBAS kOei8n2nGWqrTAd7ycXCKXRe88xJDM6leaFCOihXuxqIzdWv4aboLscE1I0ELo80 e764BweaMfAb+EsDOssQKbBp4KA1Q4RH+va5SSRe5xxFO5FW8VJ2+acuZvbRs6mz kcusuUGutRcSJWC4+bWcxzJPot9EIlv+jARGplbtyxKfgIb6EVJ8aulJmdim1hXK NH/YNaFZRT5q6Hx7XU+sRxLei0bNlEzPNm5UFoDZ/6CBCpq+zuSzIC8o0KLlGx4u PROXAgMBAAGjggJuMIICajAdBgNVHQ4EFgQUMJWcD+iLfTG9KcEsF/5K9JXcb8gw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM4 NC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zODQvTUpXY0QtaUxmVEc5S2NFc0ZfNUs5SlhjYjhnLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJFbTAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmf4QDANBgkqhkiG9w0BAQsFAAOCAQEAqMbXcXmregKScajultcQ/4l6 Lu3wqI4h48MK5+Lg7xEzyN2rKGSupUlUGr5vjYR22py1SwquDUE2St77d49xoNHC zdY+Anafb2JM+sqLPRhiD7NyPaJGmuFAxwnEcUOdRHAG5Be4rsAR2Q2rK0SZyiSy gGceWS+b8+iynRjKNkrcYx1x3ZalaQS1NesXGli1bgjlfPLYxgwD/VGqqT82y492 UuFkS2gnc1BOU6/gd+VJUV9+i94PaynnOVfPryH4KDH7eLtltuw2DAcGycywfuD7 PKJKz6ys8Z/fgMD6dymjR4JDmSO017FPHD/3Yqx5+z791K5h4r6/BJCcqfadHg== -----END CERTIFICATE-----Generated at Fri May 17 11:08:25 2024 by rpki-client on console-ams.rpki-client.org