$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer File: NJtamVn9EvndSwGEz41q1msimH4.cer (raw, json) Hash identifier: IGAvWt/zj8vtKIFHWgPgkUMkNuM2bniy/2zGSUB4OuU= Subject key identifier: 34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 382C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 08 Oct 2024 19:49:05 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 157.10.36.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14380 (0x382c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 8 19:49:05 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=349B5A9959FD12F9DD4B0184CF8D6AD66B22987E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:23:a8:50:a1:be:43:74:91:89:15:8c:b3: bd:b9:60:20:b8:9f:1b:53:94:4d:ec:69:09:d8:ba: 97:6f:df:8a:26:56:7c:cb:b4:46:31:b4:6b:94:f7: 1f:68:78:7b:8b:19:00:0b:2c:8d:45:77:07:24:ec: f9:1a:9a:4c:a4:72:08:f9:4a:81:d9:4c:f0:c4:69: 9b:61:e7:81:61:48:cc:dd:0c:82:99:ea:5b:ac:d8: 12:7c:b5:34:30:dd:8e:0e:a2:ee:2b:57:86:48:f1: 74:99:bc:00:ff:ff:f8:16:b4:55:fb:db:f8:52:53: 10:ec:3d:10:82:34:24:69:cb:16:15:fa:51:04:c5: 61:a3:36:a6:04:c7:63:d4:7b:b5:f8:08:0d:26:16: 70:66:86:19:04:98:e3:7c:43:70:96:37:9a:08:d4: 9a:1e:4a:c7:9d:ea:64:fc:9d:4c:83:d5:b2:03:df: 05:d0:51:0a:31:6f:18:f1:4a:77:2b:03:a0:73:44: be:ee:bf:f4:f8:80:36:db:eb:5f:7b:7e:0e:43:37: 22:41:96:56:4c:2c:dc:b3:f6:9a:9d:42:4d:4e:a2: 1b:30:7c:f6:3d:61:e3:7e:b0:a5:2b:e5:34:62:3d: d9:68:64:dd:81:88:61:ab:72:78:a1:70:3e:b5:7b: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.10.36.0/23 Signature Algorithm: sha256WithRSAEncryption 51:33:36:49:a3:3b:1e:c0:f9:36:ce:96:91:32:4c:27:6a:bb: 00:be:22:24:88:47:58:9d:2f:39:fa:fd:fc:a4:73:27:17:54: e3:87:9b:10:e3:cd:d5:2c:0e:62:22:f8:d1:91:e6:ed:7b:6f: 2a:fc:98:4c:d3:b9:70:9f:fb:bf:b9:e5:cf:76:d5:a0:23:15: ec:39:c9:44:b9:3c:8a:f2:00:9f:62:52:a3:75:72:85:2c:e2: 6c:f1:ed:5e:99:ca:84:7e:89:16:09:a8:4e:8c:2a:9b:92:a3: b4:e5:3c:82:b3:48:a5:b9:ed:e6:61:3f:b7:47:68:b5:db:a5: df:8e:a2:2a:41:89:14:ac:c1:9f:c2:9a:ca:e7:3b:4d:5d:ed: 71:c1:2e:54:cb:af:bd:a9:3b:82:7b:bf:2a:03:3f:b1:c3:cb: b4:a1:6b:47:9f:f9:30:ca:29:25:b1:55:88:1d:f1:1d:d5:42: ee:c5:48:f0:00:42:c3:3c:e4:35:03:13:7a:c3:42:10:f9:aa: 50:15:d9:fc:0a:e9:c7:1b:73:0a:9b:5c:9a:a8:96:3e:17:5b: 1d:d1:2e:f8:eb:0f:2c:a7:4e:ef:f5:c5:53:13:61:c0:7f:04: ad:0c:cf:c6:7b:07:36:48:3f:ae:52:69:41:aa:38:0c:aa:2d: 2f:c0:28:bb -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOCwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MTAwODE5NDkwNVoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoMzQ5QjVBOTk1OUZEMTJGOURENEIwMTg0Q0Y4RDZBRDY2QjIyOTg3 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKm9I6hQob5DdJGJFYyz vblgILifG1OUTexpCdi6l2/fiiZWfMu0RjG0a5T3H2h4e4sZAAssjUV3ByTs+Rqa TKRyCPlKgdlM8MRpm2HngWFIzN0MgpnqW6zYEny1NDDdjg6i7itXhkjxdJm8AP// +Ba0Vfvb+FJTEOw9EII0JGnLFhX6UQTFYaM2pgTHY9R7tfgIDSYWcGaGGQSY43xD cJY3mgjUmh5Kx53qZPydTIPVsgPfBdBRCjFvGPFKdysDoHNEvu6/9PiANtvrX3t+ DkM3IkGWVkws3LP2mp1CTU6iGzB89j1h436wpSvlNGI92Whk3YGIYatyeKFwPrV7 6tcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ0m1qZWf0S+d1LAYTPjWrWayKYfjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjUzL05KdGFtVm45RXZuZFN3R0V6NDFxMW1zaW1INC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdCiQwDQYJKoZIhvcNAQELBQAD ggEBAFEzNkmjOx7A+TbOlpEyTCdquwC+IiSIR1idLzn6/fykcycXVOOHmxDjzdUs DmIi+NGR5u17byr8mEzTuXCf+7+55c921aAjFew5yUS5PIryAJ9iUqN1coUs4mzx 7V6ZyoR+iRYJqE6MKpuSo7TlPIKzSKW57eZhP7dHaLXbpd+OoipBiRSswZ/Cmsrn O01d7XHBLlTLr72pO4J7vyoDP7HDy7Sha0ef+TDKKSWxVYgd8R3VQu7FSPAAQsM8 5DUDE3rDQhD5qlAV2fwK6ccbcwqbXJqolj4XWx3RLvjrDyynTu/1xVMTYcB/BK0M z8Z7BzZIP65SaUGqOAyqLS/AKLs= -----END CERTIFICATE-----Generated at Mon Nov 25 04:56:12 2024 by rpki-client on console-fra.rpki-client.org