$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer File: O9PjKvOv0JXELXIXKlnGWfMty-c.cer (raw, json) Hash identifier: e5/uUJeNOonekpIxl3w4KXnn77ijUmPGZu6C7G0iipI= Subject key identifier: 3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 32CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 12 Mar 2024 02:15:12 +0000 Certificate not after: Wed 12 Mar 2025 01:36:20 +0000 Subordinate resources: IP: 157.20.194.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 03:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13004 (0x32cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Mar 12 02:15:12 2024 GMT Not After : Mar 12 01:36:20 2025 GMT Subject: CN=3BD3E32AF3AFD095C42D72172A59C659F32DCBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:f6:01:d7:e6:4d:8e:8d:c8:e8:9c:62:c3: 34:de:45:2e:41:eb:ab:c1:5c:35:79:2f:9e:36:ea: d4:7f:0b:bb:52:ab:4f:68:31:cf:ef:2b:ea:f6:a6: 32:62:4f:d9:b7:e1:82:13:6a:be:a2:a2:0d:df:44: a3:cb:74:35:ef:1b:bd:ea:00:11:4c:63:99:b8:85: 93:b4:30:61:12:a4:06:3d:ff:10:5f:7a:cc:49:ab: c6:fb:6d:51:e4:ab:9b:52:e7:e4:83:e1:ff:3c:00: db:43:3f:a6:43:a6:d2:48:9c:da:8b:1d:f7:9e:07: 76:b3:a0:06:01:b8:b8:b5:7e:5d:84:f5:ca:29:34: 3e:eb:85:04:83:81:32:9f:d5:27:a1:0c:70:9b:57: 4b:84:6b:ea:06:4f:36:04:52:d8:59:4c:be:66:9f: 45:3d:e0:a8:fc:06:96:dc:2b:4e:40:d7:80:db:00: 16:6d:e8:aa:e1:f6:89:34:d6:29:6f:07:0c:90:10: d6:26:4a:f3:2e:5c:62:b3:44:63:12:30:b4:c5:9b: b8:cf:9b:15:e0:7d:a2:f5:02:44:62:cb:c7:0f:16: 21:92:d9:01:b3:1c:cc:a8:c1:24:d1:56:d4:03:c0: ed:66:d9:f0:95:8c:97:d3:b7:b8:44:40:b6:67:9d: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.194.0/23 Signature Algorithm: sha256WithRSAEncryption 30:72:bd:c5:97:08:25:34:9c:ff:e6:54:08:31:b3:de:5d:86: 89:b3:39:ea:df:5c:48:89:09:22:7e:7c:32:63:e6:52:0a:51: 5e:a1:bb:ec:b9:84:d6:bd:e2:79:e8:36:47:57:4c:b6:29:a1: d3:d5:d7:ba:86:be:c9:91:3b:5f:5f:89:27:c1:75:84:fd:12: 94:31:be:42:92:4b:ed:ce:85:b9:dd:73:e3:ff:d5:3f:45:de: d3:2d:d3:bc:5b:1a:80:b9:2c:11:ea:64:50:eb:a8:ea:4c:36: 13:a7:ea:e3:39:c9:ed:66:3e:45:71:d9:a4:a9:c0:4b:8e:35: 80:46:c4:71:62:25:02:d1:60:0f:4d:91:dd:dd:49:6d:59:42: d2:d5:1e:a0:b4:47:a6:0a:f9:d2:0f:c9:57:16:16:4c:29:be: 09:97:be:87:51:98:39:51:4b:b5:2d:cc:80:83:a4:d0:73:ff: 5e:a1:ea:de:8f:1e:96:72:30:31:3b:97:5c:3d:d9:a3:d0:8c: 80:4a:31:e3:d8:b4:fb:e5:e0:6e:c2:09:6b:2e:1d:dd:cf:ac: d5:fc:45:d7:3d:32:d1:42:ff:9d:ad:13:14:40:bd:1e:51:7e: 6d:23:d4:c2:cf:f8:fd:7e:c4:68:17:4a:ae:ed:16:e2:64:ea: f9:42:77:bb -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICMswwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDMxMjAyMTUxMloXDTI1MDMxMjAxMzYyMFowMzEx MC8GA1UEAxMoM0JEM0UzMkFGM0FGRDA5NUM0MkQ3MjE3MkE1OUM2NTlGMzJEQ0JF NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8D9gHX5k2OjcjonGLD NN5FLkHrq8FcNXkvnjbq1H8Lu1KrT2gxz+8r6vamMmJP2bfhghNqvqKiDd9Eo8t0 Ne8bveoAEUxjmbiFk7QwYRKkBj3/EF96zEmrxvttUeSrm1Ln5IPh/zwA20M/pkOm 0kic2osd954HdrOgBgG4uLV+XYT1yik0PuuFBIOBMp/VJ6EMcJtXS4Rr6gZPNgRS 2FlMvmafRT3gqPwGltwrTkDXgNsAFm3oquH2iTTWKW8HDJAQ1iZK8y5cYrNEYxIw tMWbuM+bFeB9ovUCRGLLxw8WIZLZAbMczKjBJNFW1APA7WbZ8JWMl9O3uERAtmed bpECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ70+Mq86/QlcQtchcqWcZZ8y3L5zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjcwL085UGpLdk92MEpYRUxYSVhLbG5HV2ZNdHktYy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdFMIwDQYJKoZIhvcNAQELBQAD ggEBADByvcWXCCU0nP/mVAgxs95dhomzOerfXEiJCSJ+fDJj5lIKUV6hu+y5hNa9 4nnoNkdXTLYpodPV17qGvsmRO19fiSfBdYT9EpQxvkKSS+3Ohbndc+P/1T9F3tMt 07xbGoC5LBHqZFDrqOpMNhOn6uM5ye1mPkVx2aSpwEuONYBGxHFiJQLRYA9Nkd3d SW1ZQtLVHqC0R6YK+dIPyVcWFkwpvgmXvodRmDlRS7UtzICDpNBz/16h6t6PHpZy MDE7l1w92aPQjIBKMePYtPvl4G7CCWsuHd3PrNX8Rdc9MtFC/52tExRAvR5Rfm0j 1MLP+P1+xGgXSq7tFuJk6vlCd7s= -----END CERTIFICATE-----Generated at Tue May 28 21:54:08 2024 by rpki-client on console-fra.rpki-client.org