$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer File: OCdChXYoqbKyIFmuiEdvIwYL6tA.cer (raw, json) Hash identifier: LS7Kg3c+46IiowI1/XSEatx/ctrn56giksHWly5f7Bk= Subject key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 38FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 15 Nov 2024 11:23:08 +0000 Certificate not after: Sat 15 Nov 2025 07:00:21 +0000 Subordinate resources: IP: 160.250.16.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14589 (0x38fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Nov 15 11:23:08 2024 GMT Not After : Nov 15 07:00:21 2025 GMT Subject: CN=382742857628A9B2B22059AE88476F23060BEAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:59:6b:e1:83:53:be:01:5f:a6:53:11:c4: b8:19:96:5d:50:19:2f:f7:4f:7b:61:dc:c7:6d:5c: 1d:40:4e:da:57:07:6b:64:a1:e2:d9:7f:29:ec:20: 2d:cf:02:00:8b:10:ea:1e:1c:3e:0f:70:5b:b7:ae: 50:37:32:cf:27:b1:16:42:46:a4:69:06:9c:fa:68: 70:69:e3:30:06:6c:d9:b9:d1:27:73:54:b9:9a:01: d6:07:09:87:ec:11:f7:66:8b:98:c6:eb:d2:ee:90: 73:c3:c7:ed:2d:c8:61:00:f3:d6:54:7a:1a:4d:26: 51:d1:59:cc:58:48:e9:4c:50:aa:63:29:21:74:cf: 04:7c:16:17:19:39:02:5b:e6:50:34:26:ae:67:cc: e0:42:55:fa:95:ce:bf:f6:5d:b8:c9:ab:2c:21:8f: 5f:86:2b:36:66:27:69:e8:2d:4f:3e:49:0c:ed:c5: 2d:16:d8:0f:bb:d6:b5:b6:72:cf:b0:9d:0c:e4:45: d5:d5:13:3c:47:57:9c:f7:ec:ed:ea:08:18:d4:63: 60:49:90:73:4b:52:a0:e5:21:32:fe:90:71:b4:f5: 32:37:7a:c7:87:33:aa:61:6b:98:b4:74:0b:9d:24: 2d:bf:71:66:9e:56:94:37:9a:ec:90:c8:ec:ce:44: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.16.0/23 Signature Algorithm: sha256WithRSAEncryption 00:2e:50:00:92:f0:f0:c7:db:13:d8:02:16:fe:c6:46:6c:d8: d2:55:3a:a0:43:ac:69:c2:bd:c4:2a:78:04:97:40:f5:9c:7c: 87:ae:67:e4:17:6f:68:4d:2d:af:fe:31:cc:01:d7:2d:06:9b: 8b:4c:7d:58:9f:12:b5:96:f4:6b:1e:13:47:3c:aa:ea:48:68: 19:84:93:b8:b3:59:57:9b:f9:e3:f5:67:f6:bd:7a:2c:4a:fc: c7:07:3f:a4:9c:14:5d:de:7c:9a:d8:ca:42:94:d2:ac:35:ea: 2a:c8:3b:31:9f:cb:c9:6b:dd:a8:ad:04:38:20:bf:d7:a0:a2: 8e:53:f5:3e:f0:3e:d3:a2:1f:af:f9:18:9d:bb:1d:e8:7f:8c: 1d:88:5d:49:ea:09:4d:1a:78:3e:d9:74:78:19:c2:f6:a9:20: 85:bf:30:ec:99:24:7b:fd:38:ed:b0:1e:57:6e:96:57:08:f7: 16:a6:ba:c4:89:79:e4:a8:97:2d:e5:42:48:e3:4d:89:05:4c: 50:30:9f:c7:d6:7c:d0:34:04:35:f8:c8:74:62:cd:c5:72:b5: d1:2a:67:33:5d:6b:07:b8:4e:76:2b:d7:28:e5:bf:ff:a7:b6: df:ea:91:e5:3b:a6:37:f1:cf:7b:86:d7:3b:97:46:67:47:c5: 62:80:14:2d -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOP0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MTExNTExMjMwOFoXDTI1MTExNTA3MDAyMVowMzEx MC8GA1UEAxMoMzgyNzQyODU3NjI4QTlCMkIyMjA1OUFFODg0NzZGMjMwNjBCRUFE MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhmWWvhg1O+AV+mUxHE uBmWXVAZL/dPe2Hcx21cHUBO2lcHa2Sh4tl/KewgLc8CAIsQ6h4cPg9wW7euUDcy zyexFkJGpGkGnPpocGnjMAZs2bnRJ3NUuZoB1gcJh+wR92aLmMbr0u6Qc8PH7S3I YQDz1lR6Gk0mUdFZzFhI6UxQqmMpIXTPBHwWFxk5AlvmUDQmrmfM4EJV+pXOv/Zd uMmrLCGPX4YrNmYnaegtTz5JDO3FLRbYD7vWtbZyz7CdDORF1dUTPEdXnPfs7eoI GNRjYEmQc0tSoOUhMv6QcbT1Mjd6x4czqmFrmLR0C50kLb9xZp5WlDea7JDI7M5E S0ECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ4J0KFdiipsrIgWa6IR28jBgvq0DAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzI4L09DZENoWFlvcWJLeUlGbXVpRWR2SXdZTDZ0QS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+hAwDQYJKoZIhvcNAQELBQAD ggEBAAAuUACS8PDH2xPYAhb+xkZs2NJVOqBDrGnCvcQqeASXQPWcfIeuZ+QXb2hN La/+McwB1y0Gm4tMfVifErWW9GseE0c8qupIaBmEk7izWVeb+eP1Z/a9eixK/McH P6ScFF3efJrYykKU0qw16irIOzGfy8lr3aitBDggv9egoo5T9T7wPtOiH6/5GJ27 Heh/jB2IXUnqCU0aeD7ZdHgZwvapIIW/MOyZJHv9OO2wHldullcI9xamusSJeeSo ly3lQkjjTYkFTFAwn8fWfNA0BDX4yHRizcVytdEqZzNdawe4TnYr1yjlv/+ntt/q keU7pjfxz3uG1zuXRmdHxWKAFC0= -----END CERTIFICATE-----Generated at Sat Nov 23 01:55:10 2024 by rpki-client on console-ams.rpki-client.org