$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer File: NJtamVn9EvndSwGEz41q1msimH4.cer (raw, json) Hash identifier: GNGR9X2cYtLiebUrHqGkxGPRpo+73A2SgqR9CxYZKLI= Subject key identifier: 34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 31DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:20:42 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 157.10.36.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12767 (0x31df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Feb 1 01:20:42 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=349B5A9959FD12F9DD4B0184CF8D6AD66B22987E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:23:a8:50:a1:be:43:74:91:89:15:8c:b3: bd:b9:60:20:b8:9f:1b:53:94:4d:ec:69:09:d8:ba: 97:6f:df:8a:26:56:7c:cb:b4:46:31:b4:6b:94:f7: 1f:68:78:7b:8b:19:00:0b:2c:8d:45:77:07:24:ec: f9:1a:9a:4c:a4:72:08:f9:4a:81:d9:4c:f0:c4:69: 9b:61:e7:81:61:48:cc:dd:0c:82:99:ea:5b:ac:d8: 12:7c:b5:34:30:dd:8e:0e:a2:ee:2b:57:86:48:f1: 74:99:bc:00:ff:ff:f8:16:b4:55:fb:db:f8:52:53: 10:ec:3d:10:82:34:24:69:cb:16:15:fa:51:04:c5: 61:a3:36:a6:04:c7:63:d4:7b:b5:f8:08:0d:26:16: 70:66:86:19:04:98:e3:7c:43:70:96:37:9a:08:d4: 9a:1e:4a:c7:9d:ea:64:fc:9d:4c:83:d5:b2:03:df: 05:d0:51:0a:31:6f:18:f1:4a:77:2b:03:a0:73:44: be:ee:bf:f4:f8:80:36:db:eb:5f:7b:7e:0e:43:37: 22:41:96:56:4c:2c:dc:b3:f6:9a:9d:42:4d:4e:a2: 1b:30:7c:f6:3d:61:e3:7e:b0:a5:2b:e5:34:62:3d: d9:68:64:dd:81:88:61:ab:72:78:a1:70:3e:b5:7b: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.36.0/23 Signature Algorithm: sha256WithRSAEncryption a1:ff:0e:75:50:58:1a:b4:d5:ad:d2:ad:55:8e:b6:fb:fb:5a: 38:d8:39:b3:86:0c:e1:97:1e:45:b5:0a:43:3b:34:dd:b9:58: f1:e1:3c:9d:de:1d:d6:c6:38:8d:04:67:08:f6:d5:52:25:45: ec:d1:1d:4a:b6:0f:6f:1d:09:65:9d:01:4a:90:6f:6f:81:5d: bb:e2:50:16:61:c7:0e:68:df:94:cd:85:4c:2b:a4:e8:f5:fd: d1:e3:e4:6b:b3:c2:30:7c:52:53:20:40:0c:f8:d5:c4:20:4d: eb:7c:2c:77:c0:a7:3e:a7:be:00:e0:f0:8d:91:0a:99:0c:b8: d6:0a:78:f8:a5:48:76:3b:17:71:b0:72:cf:99:a3:2f:f0:e6: d3:d7:a3:4f:10:95:cb:29:d6:7e:9b:88:54:26:e8:39:93:d9: d8:d6:6e:7e:28:5e:e6:5f:ad:c5:79:8b:4b:f7:37:7a:c9:f7: e8:0d:8d:de:2e:23:a9:b5:03:f8:e6:7a:fd:95:11:21:72:dc: 40:9b:70:72:91:ed:b6:92:f6:29:d3:17:47:cd:8f:fd:a0:e3: c3:2a:8a:df:f7:1c:6f:01:f5:57:e3:eb:f7:28:e6:00:6d:74: 04:50:81:36:e6:91:95:02:29:88:c3:b4:48:49:2a:c3:a4:50: 29:e5:04:96 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICMd8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDIwMTAxMjA0MloXDTI1MDEzMTAxMTM0NlowMzEx MC8GA1UEAxMoMzQ5QjVBOTk1OUZEMTJGOURENEIwMTg0Q0Y4RDZBRDY2QjIyOTg3 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKm9I6hQob5DdJGJFYyz vblgILifG1OUTexpCdi6l2/fiiZWfMu0RjG0a5T3H2h4e4sZAAssjUV3ByTs+Rqa TKRyCPlKgdlM8MRpm2HngWFIzN0MgpnqW6zYEny1NDDdjg6i7itXhkjxdJm8AP// +Ba0Vfvb+FJTEOw9EII0JGnLFhX6UQTFYaM2pgTHY9R7tfgIDSYWcGaGGQSY43xD cJY3mgjUmh5Kx53qZPydTIPVsgPfBdBRCjFvGPFKdysDoHNEvu6/9PiANtvrX3t+ DkM3IkGWVkws3LP2mp1CTU6iGzB89j1h436wpSvlNGI92Whk3YGIYatyeKFwPrV7 6tcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ0m1qZWf0S+d1LAYTPjWrWayKYfjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjUzL05KdGFtVm45RXZuZFN3R0V6NDFxMW1zaW1INC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdCiQwDQYJKoZIhvcNAQELBQAD ggEBAKH/DnVQWBq01a3SrVWOtvv7WjjYObOGDOGXHkW1CkM7NN25WPHhPJ3eHdbG OI0EZwj21VIlRezRHUq2D28dCWWdAUqQb2+BXbviUBZhxw5o35TNhUwrpOj1/dHj 5GuzwjB8UlMgQAz41cQgTet8LHfApz6nvgDg8I2RCpkMuNYKePilSHY7F3Gwcs+Z oy/w5tPXo08Qlcsp1n6biFQm6DmT2djWbn4oXuZfrcV5i0v3N3rJ9+gNjd4uI6m1 A/jmev2VESFy3ECbcHKR7baS9inTF0fNj/2g48Mqit/3HG8B9Vfj6/co5gBtdARQ gTbmkZUCKYjDtEhJKsOkUCnlBJY= -----END CERTIFICATE-----Generated at Wed May 29 03:16:40 2024 by rpki-client on console-fra.rpki-client.org