$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Q3WRJmNI_24_oCHG3ObF0AlG6nY.cer File: Q3WRJmNI_24_oCHG3ObF0AlG6nY.cer (raw, json) Hash identifier: MhSMEz2izLKKMYCpcazxfYQP+3PbNCvXeBl3qlD3XAc= Subject key identifier: 43:75:91:26:63:48:FF:6E:3F:A0:21:C6:DC:E6:C5:D0:09:46:EA:76 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 388A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 25 Oct 2024 01:47:49 +0000 Certificate not after: Sat 25 Oct 2025 01:36:21 +0000 Subordinate resources: IP: 160.191.104.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14474 (0x388a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 25 01:47:49 2024 GMT Not After : Oct 25 01:36:21 2025 GMT Subject: CN=437591266348FF6E3FA021C6DCE6C5D00946EA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:c3:81:6f:ad:2b:b0:26:09:ec:86:54:c3: dc:9a:c5:1d:b9:a9:34:c6:e3:fc:f2:95:27:6e:e4: 26:01:95:b8:95:f2:b5:c4:ae:f2:43:23:bd:f6:01: 48:99:2d:35:58:74:8d:91:64:c8:9e:ab:8b:ca:e7: 94:35:37:26:2f:d5:6a:50:2c:c2:f6:db:2e:80:90: f7:2e:f9:dd:37:db:08:64:49:a3:93:ea:0f:ba:ba: 13:d7:d9:81:0d:b6:30:df:de:83:11:b8:34:8e:3e: 75:ae:7b:69:56:a5:38:4b:99:66:62:b2:21:49:f1: 44:a2:7a:ce:d5:d1:e2:bc:e4:99:f9:5c:67:49:24: 14:3f:f8:93:56:63:52:99:9c:91:6b:82:36:d6:0d: 2e:46:e7:e0:44:4a:ba:ab:0f:bd:c8:81:88:b0:08: 30:9e:5d:84:08:4d:48:70:23:97:90:e2:c0:e0:e3: 9d:3b:d2:4a:4b:2c:68:d2:11:76:cb:f6:93:a6:c9: 07:0b:9a:95:04:d7:17:e5:ea:81:71:a9:8d:f8:a3: a4:30:30:ef:ac:5e:4e:c0:df:97:29:90:b5:21:87: e9:6d:1d:cd:ee:38:57:c4:c2:7d:06:aa:6e:30:5d: 62:d2:44:ce:63:0d:40:65:12:dc:47:f9:ed:ce:b5: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:91:26:63:48:FF:6E:3F:A0:21:C6:DC:E6:C5:D0:09:46:EA:76 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/Q3WRJmNI_24_oCHG3ObF0AlG6nY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.104.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:46:75:7c:cc:91:d0:9b:db:13:29:1a:ee:b1:f9:95:45:57: c1:70:ad:40:0e:d9:08:9b:53:08:d1:7b:f6:72:a4:8b:1b:e8: f7:c8:dd:66:e3:2e:43:4e:de:6a:87:32:d2:96:7f:14:c1:57: 18:e2:60:62:48:90:37:6e:19:0e:6e:55:67:d2:4e:63:09:f1: 02:58:10:b2:7c:d8:9e:3e:bd:53:8d:07:2e:73:96:5e:03:aa: 0f:69:42:bd:78:47:71:89:01:4a:d0:1f:5b:28:58:27:74:68: 38:82:08:14:4e:8a:d4:43:85:fe:f1:48:e9:d0:79:68:5c:11: d5:b8:2c:ea:e1:fd:dc:d7:fc:6c:9c:90:fe:b8:e9:d6:4f:87: 68:98:98:a6:ab:b1:6a:6a:dc:5d:01:10:be:e0:de:30:71:ac: 13:b4:53:b4:48:70:9c:9a:88:3d:74:48:fc:f6:d5:53:14:0f: 35:94:5b:fb:4b:d4:9a:de:8d:9e:8e:f8:5b:ef:92:10:68:0a: fa:5c:e7:88:a5:a3:1e:61:fb:2a:b9:ae:97:8a:4b:61:90:fa: c7:bb:71:25:e6:95:dc:ab:46:39:e7:0f:1a:06:70:e7:6b:17: c4:1f:74:b5:51:8f:07:78:a5:8c:59:e9:42:b8:10:8f:af:66: 02:f2:79:4d -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOIowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MTAyNTAxNDc0OVoXDTI1MTAyNTAxMzYyMVowMzEx MC8GA1UEAxMoNDM3NTkxMjY2MzQ4RkY2RTNGQTAyMUM2RENFNkM1RDAwOTQ2RUE3 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6nw4FvrSuwJgnshlTD 3JrFHbmpNMbj/PKVJ27kJgGVuJXytcSu8kMjvfYBSJktNVh0jZFkyJ6ri8rnlDU3 Ji/ValAswvbbLoCQ9y753TfbCGRJo5PqD7q6E9fZgQ22MN/egxG4NI4+da57aVal OEuZZmKyIUnxRKJ6ztXR4rzkmflcZ0kkFD/4k1ZjUpmckWuCNtYNLkbn4ERKuqsP vciBiLAIMJ5dhAhNSHAjl5DiwODjnTvSSkssaNIRdsv2k6bJBwualQTXF+XqgXGp jfijpDAw76xeTsDflymQtSGH6W0dze44V8TCfQaqbjBdYtJEzmMNQGUS3Ef57c61 at0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRDdZEmY0j/bj+gIcbc5sXQCUbqdjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzI1L1EzV1JKbU5JXzI0X29DSEczT2JGMEFsRzZuWS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgv2gwDQYJKoZIhvcNAQELBQAD ggEBAD1GdXzMkdCb2xMpGu6x+ZVFV8FwrUAO2QibUwjRe/ZypIsb6PfI3WbjLkNO 3mqHMtKWfxTBVxjiYGJIkDduGQ5uVWfSTmMJ8QJYELJ82J4+vVONBy5zll4Dqg9p Qr14R3GJAUrQH1soWCd0aDiCCBROitRDhf7xSOnQeWhcEdW4LOrh/dzX/GyckP64 6dZPh2iYmKarsWpq3F0BEL7g3jBxrBO0U7RIcJyaiD10SPz21VMUDzWUW/tL1Jre jZ6O+FvvkhBoCvpc54ilox5h+yq5rpeKS2GQ+se7cSXmldyrRjnnDxoGcOdrF8Qf dLVRjwd4pYxZ6UK4EI+vZgLyeU0= -----END CERTIFICATE-----Generated at Sat Nov 23 01:55:10 2024 by rpki-client on console-ams.rpki-client.org