$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer File: O9PjKvOv0JXELXIXKlnGWfMty-c.cer (raw, json) Hash identifier: msyC2J/o59+vzL+QwC6Lzlkp6fX/gIHFBV2McwReFE8= Subject key identifier: 3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3789 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:48:32 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 157.20.194.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14217 (0x3789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:48:32 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3BD3E32AF3AFD095C42D72172A59C659F32DCBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:f6:01:d7:e6:4d:8e:8d:c8:e8:9c:62:c3: 34:de:45:2e:41:eb:ab:c1:5c:35:79:2f:9e:36:ea: d4:7f:0b:bb:52:ab:4f:68:31:cf:ef:2b:ea:f6:a6: 32:62:4f:d9:b7:e1:82:13:6a:be:a2:a2:0d:df:44: a3:cb:74:35:ef:1b:bd:ea:00:11:4c:63:99:b8:85: 93:b4:30:61:12:a4:06:3d:ff:10:5f:7a:cc:49:ab: c6:fb:6d:51:e4:ab:9b:52:e7:e4:83:e1:ff:3c:00: db:43:3f:a6:43:a6:d2:48:9c:da:8b:1d:f7:9e:07: 76:b3:a0:06:01:b8:b8:b5:7e:5d:84:f5:ca:29:34: 3e:eb:85:04:83:81:32:9f:d5:27:a1:0c:70:9b:57: 4b:84:6b:ea:06:4f:36:04:52:d8:59:4c:be:66:9f: 45:3d:e0:a8:fc:06:96:dc:2b:4e:40:d7:80:db:00: 16:6d:e8:aa:e1:f6:89:34:d6:29:6f:07:0c:90:10: d6:26:4a:f3:2e:5c:62:b3:44:63:12:30:b4:c5:9b: b8:cf:9b:15:e0:7d:a2:f5:02:44:62:cb:c7:0f:16: 21:92:d9:01:b3:1c:cc:a8:c1:24:d1:56:d4:03:c0: ed:66:d9:f0:95:8c:97:d3:b7:b8:44:40:b6:67:9d: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.194.0/23 Signature Algorithm: sha256WithRSAEncryption 59:94:5c:d6:c5:02:4b:4b:1d:e1:86:25:37:09:07:0d:e2:8f: af:ff:17:90:0a:39:35:2d:42:7c:3c:f9:2a:2b:9b:1a:10:a8: 76:b8:e3:62:cb:9d:a0:7c:c5:e1:01:05:85:04:42:48:6e:c1: 65:a7:33:b9:55:96:37:57:d5:17:ac:52:98:64:95:f5:3c:32: aa:08:92:43:f3:a5:97:ab:7d:bc:55:4b:ff:9e:dc:dc:e0:f8: 59:27:e4:9c:a6:3b:f8:6f:20:fc:21:53:69:0a:20:a7:52:37: cd:38:12:24:ba:82:aa:9f:0c:90:94:04:98:d0:9a:25:40:8e: a8:77:91:fd:5a:d2:0c:1b:4f:a8:35:df:fe:8d:6c:02:8c:1f: c9:52:b7:f2:70:22:0d:ca:69:37:49:bf:2c:c2:90:9c:de:19: 47:c6:bc:ac:5b:5d:75:9f:f4:92:26:d0:31:72:30:b9:a7:8f: 99:9b:69:e5:7d:08:f6:b5:f1:eb:29:0f:73:14:f2:d5:58:b6: 6c:12:82:2a:b2:2f:7f:85:f4:70:0f:4c:f7:c9:40:83:d0:53: 0b:78:76:28:8e:52:64:a0:07:43:ba:de:20:5c:97:e7:55:e9: 80:2d:a1:e9:7d:b3:bb:5b:d2:fb:73:33:fe:6b:79:b8:07:94: 94:15:89:d0 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN4kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNDgzMloXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoM0JEM0UzMkFGM0FGRDA5NUM0MkQ3MjE3MkE1OUM2NTlGMzJEQ0JF NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8D9gHX5k2OjcjonGLD NN5FLkHrq8FcNXkvnjbq1H8Lu1KrT2gxz+8r6vamMmJP2bfhghNqvqKiDd9Eo8t0 Ne8bveoAEUxjmbiFk7QwYRKkBj3/EF96zEmrxvttUeSrm1Ln5IPh/zwA20M/pkOm 0kic2osd954HdrOgBgG4uLV+XYT1yik0PuuFBIOBMp/VJ6EMcJtXS4Rr6gZPNgRS 2FlMvmafRT3gqPwGltwrTkDXgNsAFm3oquH2iTTWKW8HDJAQ1iZK8y5cYrNEYxIw tMWbuM+bFeB9ovUCRGLLxw8WIZLZAbMczKjBJNFW1APA7WbZ8JWMl9O3uERAtmed bpECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ70+Mq86/QlcQtchcqWcZZ8y3L5zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjcwL085UGpLdk92MEpYRUxYSVhLbG5HV2ZNdHktYy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdFMIwDQYJKoZIhvcNAQELBQAD ggEBAFmUXNbFAktLHeGGJTcJBw3ij6//F5AKOTUtQnw8+SormxoQqHa442LLnaB8 xeEBBYUEQkhuwWWnM7lVljdX1ResUphklfU8MqoIkkPzpZerfbxVS/+e3Nzg+Fkn 5JymO/hvIPwhU2kKIKdSN804EiS6gqqfDJCUBJjQmiVAjqh3kf1a0gwbT6g13/6N bAKMH8lSt/JwIg3KaTdJvyzCkJzeGUfGvKxbXXWf9JIm0DFyMLmnj5mbaeV9CPa1 8espD3MU8tVYtmwSgiqyL3+F9HAPTPfJQIPQUwt4diiOUmSgB0O63iBcl+dV6YAt oel9s7tb0vtzM/5rebgHlJQVidA= -----END CERTIFICATE-----Generated at Sat Nov 23 01:55:10 2024 by rpki-client on console-ams.rpki-client.org