$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer File: R9n8VhrefVa8dc2H8ZXcoOSg0M8.cer (raw, json) Hash identifier: ePX7GBwXQObO/bZy33E/GW0kqpjlpy5E3YBZpZ+sQAM= Subject key identifier: 47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BBF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:27 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:9fa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48115 (0xbbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:53:27 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=47D9FC561ADE7D56BC75CD87F195DCA0E4A0D0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:63:ae:f2:aa:8b:06:62:ca:26:86:64:ef: 77:d0:ae:f6:2e:b9:cd:9c:41:8b:25:d1:c8:81:af: 5d:66:e2:28:23:60:8e:52:03:87:98:b3:9f:98:71: 3f:11:3c:10:fe:31:00:5b:b9:f5:47:b0:10:02:0e: 29:69:03:73:5b:c3:de:20:bb:3f:6f:b7:be:70:52: 82:41:0c:a9:9e:89:cc:14:bf:0e:1f:69:5a:80:d3: 16:b1:2b:e2:81:55:83:34:62:9a:8a:09:b9:0b:ae: 5c:b1:9a:38:00:62:17:c7:5a:55:73:35:e7:20:f8: 1e:ce:c1:c3:5e:03:72:eb:82:c1:7a:b6:f8:6b:70: 15:ed:13:56:ae:7b:a4:1b:f0:e9:78:42:37:60:d1: ec:cb:35:76:d9:57:c7:6d:22:cc:64:10:0e:28:9b: c3:14:f8:3e:db:08:26:08:66:7d:83:43:b3:0c:a8: 21:c2:fc:02:d5:3e:bb:fb:31:32:b2:35:88:a0:f2: 0a:3e:6a:1f:65:54:7e:5d:9a:ef:ec:11:28:bc:85: 25:f3:b5:53:88:ec:5a:f8:90:0a:b9:a9:30:d9:48: da:9c:ca:e8:27:f0:9f:f4:67:2d:55:2c:f8:4b:61: 81:8b:ce:b9:30:a4:87:1d:1f:7d:70:72:44:31:06: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:FC:56:1A:DE:7D:56:BC:75:CD:87:F1:95:DC:A0:E4:A0:D0:CF X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/R9n8VhrefVa8dc2H8ZXcoOSg0M8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:9fa0::/32 Signature Algorithm: sha256WithRSAEncryption 97:29:0a:b4:b4:c1:92:fd:13:2c:13:00:0b:b5:2d:e9:f4:7f: f3:c0:f8:5e:b2:9c:24:11:5b:06:5b:e1:f9:6d:62:8a:39:4e: 84:94:9b:38:ca:28:b7:25:15:fb:22:3e:30:e5:63:9e:69:71: 24:68:ce:51:a9:e3:43:8e:3d:f1:5b:71:ee:74:8a:02:8d:25: d4:43:b1:ae:74:2e:8e:f6:9f:b2:9f:8a:70:ad:b7:46:bb:28: 08:bf:f8:24:60:1a:8b:6f:b5:b2:5d:eb:7d:ba:5a:70:17:5d: c5:80:a6:ac:c1:aa:2b:05:0b:1f:54:1e:0a:dc:bf:5c:3d:00: 0b:45:83:ac:ac:c4:99:3e:5c:ab:4f:38:5e:65:f8:14:f1:93: fa:5a:12:cc:52:d3:7c:e3:1a:a9:e4:0f:93:0e:c1:2a:57:c8: cc:0d:e1:09:b8:5e:f5:5a:c6:a6:35:c5:c3:03:a4:d2:e9:39: be:92:82:2a:df:ad:95:69:70:89:fa:cd:4a:e8:a4:13:e3:73: 6e:b2:bc:1b:02:f5:78:20:1a:28:07:1a:0c:d6:c5:2c:50:8f: 6d:0c:5c:90:37:62:f5:f9:84:5b:14:c9:18:fe:9c:39:04:45: c4:c7:35:4d:91:a9:d0:e4:7c:f8:7a:df:a6:37:c1:3f:11:e5: 4e:05:34:44 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALvzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUzMjdaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDQ3RDlGQzU2MUFERTdENTZCQzc1Q0Q4N0YxOTVEQ0EwRTRBMEQw Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6GOu8qqLBmLKJoZk 73fQrvYuuc2cQYsl0ciBr11m4igjYI5SA4eYs5+YcT8RPBD+MQBbufVHsBACDilp A3Nbw94guz9vt75wUoJBDKmeicwUvw4faVqA0xaxK+KBVYM0YpqKCbkLrlyxmjgA YhfHWlVzNecg+B7OwcNeA3LrgsF6tvhrcBXtE1aue6Qb8Ol4Qjdg0ezLNXbZV8dt IsxkEA4om8MU+D7bCCYIZn2DQ7MMqCHC/ALVPrv7MTKyNYig8go+ah9lVH5dmu/s ESi8hSXztVOI7Fr4kAq5qTDZSNqcyugn8J/0Zy1VLPhLYYGLzrkwpIcdH31wckQx BtKLAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUR9n8VhrefVa8dc2H8ZXcoOSg0M8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4My9SOW44VmhyZWZWYThkYzJIOFpYY29PU2cwTTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGfoDANBgkqhkiG9w0BAQsF AAOCAQEAlykKtLTBkv0TLBMAC7Ut6fR/88D4XrKcJBFbBlvh+W1iijlOhJSbOMoo tyUV+yI+MOVjnmlxJGjOUanjQ4498Vtx7nSKAo0l1EOxrnQujvafsp+KcK23Rrso CL/4JGAai2+1sl3rfbpacBddxYCmrMGqKwULH1QeCty/XD0AC0WDrKzEmT5cq084 XmX4FPGT+loSzFLTfOMaqeQPkw7BKlfIzA3hCbhe9VrGpjXFwwOk0uk5vpKCKt+t lWlwifrNSuikE+NzbrK8GwL1eCAaKAcaDNbFLFCPbQxckDdi9fmEWxTJGP6cOQRF xMc1TZGp0OR8+HrfpjfBPxHlTgU0RA== -----END CERTIFICATE-----Generated at Mon Nov 25 16:09:04 2024 by rpki-client on console-fra.rpki-client.org