$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RP1LOAf8IJACd92fE6z8qnpaOCg.cer File: RP1LOAf8IJACd92fE6z8qnpaOCg.cer (raw, json) Hash identifier: sWVL7GKakmT4t9CNkNG83wa6fS+Mo0EikrpM0VO7ClE= Subject key identifier: 44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BEA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 24 Oct 2024 03:05:55 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:cfe0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48800 (0xbea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 24 03:05:55 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=44FD4B3807FC20900277DD9F13ACFCAA7A5A3828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:ca:2a:96:a6:00:d9:d2:44:a2:69:ef:24: 08:fa:74:fb:12:5c:94:14:06:5e:77:40:23:22:40: 89:74:73:c5:66:81:7a:33:fc:62:9c:c7:59:a9:2e: 01:cd:29:b6:c9:08:bf:2b:65:8a:cd:70:18:ad:cb: a1:66:aa:cf:27:0c:db:be:95:fd:3c:e8:73:b4:ff: c2:53:bb:69:3a:82:b6:cd:15:f0:18:0d:9f:5f:e6: 83:8a:4f:6d:fc:08:ec:ac:d3:48:09:e2:95:ca:0c: f8:b9:d0:39:da:27:ed:f5:03:f1:ef:d4:61:8a:a1: 94:f7:02:90:98:a5:6b:25:c5:cf:a7:f3:56:0b:91: fb:82:29:a2:33:c7:cc:18:97:0c:14:d9:61:45:62: 87:84:fc:07:69:8d:c9:66:13:2e:8c:1d:d4:17:47: 3e:3a:de:a1:1e:4d:73:3c:bf:8c:14:93:a8:3f:e4: 7a:44:1d:b3:a2:cd:b4:37:76:ec:51:85:05:48:1a: 08:7f:e0:1c:2c:be:23:d3:7c:4a:f5:23:09:88:0e: fc:64:74:55:97:78:94:d9:b8:e6:d0:e5:c4:bb:ad: 27:29:ce:6c:e3:24:e9:5b:5a:06:da:b4:85:5b:9d: d0:05:9b:d4:fc:88:f4:b2:57:b5:b2:e8:0a:bc:c0: 74:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:4B:38:07:FC:20:90:02:77:DD:9F:13:AC:FC:AA:7A:5A:38:28 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/RP1LOAf8IJACd92fE6z8qnpaOCg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:cfe0::/32 Signature Algorithm: sha256WithRSAEncryption 23:96:ec:4d:e7:2d:fe:4e:37:5e:96:32:a4:ad:b0:9c:6e:d9: 51:74:d4:63:c1:58:a8:3b:f1:bc:7e:01:a8:78:8b:97:88:bb: 03:a1:27:7b:d8:c4:1e:fa:04:7f:cb:27:62:f6:35:db:85:e2: bc:e4:6a:ea:10:22:8f:9d:69:af:b5:be:05:6e:fb:c0:8c:5e: 19:55:dc:c1:93:d3:cb:4c:bf:43:b1:b3:a9:ed:41:95:70:b8: b5:1e:be:8b:02:2c:66:bf:a6:3f:77:b4:3c:a3:44:e2:23:d9: dc:cc:ea:c6:b1:d7:08:17:82:03:f7:8f:99:2b:2c:27:ba:11: 1f:dd:1c:cd:f3:9a:07:73:13:ca:74:e8:b6:19:e4:cd:3c:b0: 96:65:9e:d1:c1:1f:75:32:0d:7e:6a:e8:47:97:4a:cb:4f:46: 5c:ee:1e:27:f3:bf:b4:24:a7:ba:f4:8a:58:09:3c:92:c3:85: e4:e9:5b:c8:d8:6a:79:09:f8:3f:a7:91:91:1c:ce:c5:dc:9a: 08:e3:fb:a7:c9:ac:34:ef:d1:12:75:10:75:55:29:2d:8f:ec: 93:89:c4:77:bc:a5:43:98:78:a0:72:af:c0:75:aa:4e:8c:8d: 6a:a3:77:59:c1:68:ef:0b:25:ce:3b:e4:6b:8b:ef:3b:43:df: d1:ef:83:95 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAL6gMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDEwMjQwMzA1NTVaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDQ0RkQ0QjM4MDdGQzIwOTAwMjc3REQ5RjEzQUNGQ0FBN0E1QTM4 MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/8oqlqYA2dJEomnv JAj6dPsSXJQUBl53QCMiQIl0c8VmgXoz/GKcx1mpLgHNKbbJCL8rZYrNcBity6Fm qs8nDNu+lf086HO0/8JTu2k6grbNFfAYDZ9f5oOKT238COys00gJ4pXKDPi50Dna J+31A/Hv1GGKoZT3ApCYpWslxc+n81YLkfuCKaIzx8wYlwwU2WFFYoeE/Adpjclm Ey6MHdQXRz463qEeTXM8v4wUk6g/5HpEHbOizbQ3duxRhQVIGgh/4BwsviPTfEr1 IwmIDvxkdFWXeJTZuObQ5cS7rScpzmzjJOlbWgbatIVbndAFm9T8iPSyV7Wy6Aq8 wHQ9AgMBAAGjggJWMIICUjAdBgNVHQ4EFgQURP1LOAf8IJACd92fE6z8qnpaOCgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy OTUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI5NS9SUDFMT0FmOElKQUNkOTJmRTZ6OHFucGFPQ2cubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHP4DANBgkqhkiG9w0BAQsF AAOCAQEAI5bsTect/k43XpYypK2wnG7ZUXTUY8FYqDvxvH4BqHiLl4i7A6Ene9jE HvoEf8snYvY124XivORq6hAij51pr7W+BW77wIxeGVXcwZPTy0y/Q7Gzqe1BlXC4 tR6+iwIsZr+mP3e0PKNE4iPZ3MzqxrHXCBeCA/ePmSssJ7oRH90czfOaB3MTynTo thnkzTywlmWe0cEfdTINfmroR5dKy09GXO4eJ/O/tCSnuvSKWAk8ksOF5OlbyNhq eQn4P6eRkRzOxdyaCOP7p8msNO/REnUQdVUpLY/sk4nEd7ylQ5h4oHKvwHWqToyN aqN3WcFo7wslzjvka4vvO0Pf0e+DlQ== -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:38 2024 by rpki-client on console-ams.rpki-client.org