$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NFr5ZypcY4yBe6_vTb251zV1P08.cer File: NFr5ZypcY4yBe6_vTb251zV1P08.cer (raw, json) Hash identifier: m3AokCO1jCfiKVoWXUYdRq8mFTTIk442uFLsGA7qHu8= Subject key identifier: 34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:54:21 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:b4e0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48165 (0xbc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:54:21 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=345AF9672A5C638C817BAFEF4DBDB9D735753F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:69:fc:83:23:ad:4b:68:df:13:42:be:42: a2:2c:82:99:de:d6:51:2b:1a:ff:04:48:02:93:38: 7c:5b:f1:08:4b:0f:bb:b7:0d:a3:4f:29:f3:99:19: c5:a3:c1:c0:30:2c:78:34:a5:57:c0:d0:a0:27:5b: 9a:55:ba:aa:e6:0b:13:f2:a0:da:94:d9:e0:16:0e: 8f:6d:2a:ac:23:b4:84:d8:06:77:ed:94:f5:3f:81: bc:ae:16:8a:9a:9d:78:1a:6c:3f:82:e1:fb:df:41: 1c:48:64:45:37:45:e8:66:71:ac:c4:38:0f:99:0f: 8d:f8:30:19:5c:34:65:a5:df:45:11:26:c3:52:e1: 29:62:1a:98:80:5d:c6:48:27:81:96:5a:9d:9c:8a: 72:73:a1:c7:66:c9:38:08:dd:a8:85:37:e8:ec:1e: 45:94:30:12:06:56:1a:e4:ba:02:4e:d4:9f:fa:84: 7b:09:ec:06:f9:c9:4e:9c:fb:c9:e7:4c:47:ab:8e: 84:21:cd:f8:66:e2:fe:d0:38:30:8a:93:93:7c:86: b7:28:5d:96:52:4a:db:d0:97:c6:a7:64:23:42:80: 24:af:7e:a0:73:72:14:25:62:fd:08:81:2a:73:6a: e3:29:62:bd:ec:89:89:b5:1e:6a:52:49:c3:24:b5: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5A:F9:67:2A:5C:63:8C:81:7B:AF:EF:4D:BD:B9:D7:35:75:3F:4F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/NFr5ZypcY4yBe6_vTb251zV1P08.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:b4e0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:a9:6c:67:4b:cf:59:dd:45:a2:1d:e6:6d:10:97:86:fc:70: dc:e2:51:93:21:2d:65:96:0e:10:86:f1:93:79:79:42:23:8c: 9a:3e:8f:0b:18:dd:f5:61:6b:78:54:6f:36:67:3a:3e:e0:66: f3:32:56:93:e8:1f:c5:43:6f:71:df:31:d4:e3:9b:a8:ec:dc: 28:d1:d6:f4:f4:a8:36:76:2f:87:53:b7:44:e8:30:ee:b0:c7: 22:3f:c5:73:6e:5e:dc:6d:c0:ba:5f:36:11:94:29:d4:fd:26: 7a:48:95:6a:e5:93:65:c6:cf:4d:0b:1d:81:79:e8:c7:9a:00: 9f:6e:28:cd:6c:e5:5f:06:ef:2e:f2:18:b6:e0:1e:4f:1e:08: ef:14:ef:e2:f1:cd:11:a7:d0:b5:f0:36:be:96:46:95:33:37: 79:90:c4:ac:5a:ae:e9:7a:63:58:35:bf:23:85:9c:64:5f:dc: ae:5e:26:c8:b9:dd:3d:84:3a:b0:b7:e4:10:bf:aa:04:e3:e1: 75:3b:95:7f:93:e6:ac:64:43:0a:af:4a:e2:27:93:f8:14:08: d6:f1:87:e1:09:94:23:dc:9d:26:03:58:b0:69:6b:6d:e6:56: c0:24:d1:26:47:49:3e:0e:4d:2f:1d:8e:53:72:8f:a7:28:37: 03:81:2e:1c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALwlMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU0MjFaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDM0NUFGOTY3MkE1QzYzOEM4MTdCQUZFRjREQkRCOUQ3MzU3NTNG NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGWn8gyOtS2jfE0K+ QqIsgpne1lErGv8ESAKTOHxb8QhLD7u3DaNPKfOZGcWjwcAwLHg0pVfA0KAnW5pV uqrmCxPyoNqU2eAWDo9tKqwjtITYBnftlPU/gbyuFoqanXgabD+C4fvfQRxIZEU3 RehmcazEOA+ZD434MBlcNGWl30URJsNS4SliGpiAXcZIJ4GWWp2cinJzocdmyTgI 3aiFN+jsHkWUMBIGVhrkugJO1J/6hHsJ7Ab5yU6c+8nnTEerjoQhzfhm4v7QODCK k5N8hrcoXZZSStvQl8anZCNCgCSvfqBzchQlYv0IgSpzauMpYr3siYm1HmpSScMk tXihAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUNFr5ZypcY4yBe6/vTb251zV1P08w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMwNi9ORnI1WnlwY1k0eUJlNl92VGIyNTF6VjFQMDgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAG04DANBgkqhkiG9w0BAQsF AAOCAQEAHalsZ0vPWd1Foh3mbRCXhvxw3OJRkyEtZZYOEIbxk3l5QiOMmj6PCxjd 9WFreFRvNmc6PuBm8zJWk+gfxUNvcd8x1OObqOzcKNHW9PSoNnYvh1O3ROgw7rDH Ij/Fc25e3G3Aul82EZQp1P0mekiVauWTZcbPTQsdgXnox5oAn24ozWzlXwbvLvIY tuAeTx4I7xTv4vHNEafQtfA2vpZGlTM3eZDErFqu6XpjWDW/I4WcZF/crl4myLnd PYQ6sLfkEL+qBOPhdTuVf5PmrGRDCq9K4ieT+BQI1vGH4QmUI9ydJgNYsGlrbeZW wCTRJkdJPg5NLx2OU3KPpyg3A4EuHA== -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:38 2024 by rpki-client on console-ams.rpki-client.org