$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer (raw, json) Hash identifier: X1bpuzgl+0cdkjz0vsH1pRR5GY0Muxd8ipOMBGUEpyk= Subject key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AF61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:23:54 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 137794 IP: 103.138.134.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 05:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44897 (0xaf61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:23:54 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:c7:2c:71:18:21:d9:cd:64:88:56:7a:58: a4:3b:f4:71:5b:87:47:d5:89:62:d7:29:3b:b9:61: 89:6e:4a:9e:20:4e:21:cd:c3:4c:e7:e6:2f:aa:ed: b1:8f:a1:c8:30:45:4f:50:16:ba:2c:ed:d2:8f:7f: 12:b1:4d:11:49:78:42:b9:65:95:72:c7:44:33:30: a2:e7:ee:cc:d2:f3:aa:b1:f6:db:1c:da:19:9e:98: c9:66:d8:0d:e3:1b:bb:cf:71:7b:f8:50:54:10:3e: 6b:18:7b:e7:2d:e3:06:cf:06:e1:b8:c8:0b:85:ce: d0:b9:42:60:d6:2e:08:e0:6d:1e:23:fe:2f:1c:e8: 53:87:2d:96:21:e5:8c:d9:3c:ce:48:28:bf:d3:f7: 25:f4:70:aa:ea:bd:b0:db:2f:74:23:dd:a5:d2:8d: 45:8d:00:b6:ce:ab:e4:3c:66:49:11:c5:35:3b:5e: 62:77:61:62:0d:6b:3f:79:aa:3b:18:0e:1e:04:c6: c1:7d:8d:05:88:25:64:f4:98:eb:1f:ae:2e:63:f3: 84:1a:c3:58:f9:76:f8:04:b0:f8:43:47:45:8d:56: bd:e6:cf:bf:ec:35:0e:b1:73:c1:72:8f:2b:be:7f: 01:ec:2a:25:ea:2b:47:e3:29:65:2d:a5:50:dd:16: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137794 sbgp-ipAddrBlock: critical IPv4: 103.138.134.0/23 Signature Algorithm: sha256WithRSAEncryption 33:f6:2b:9a:fd:48:06:78:3c:a9:9f:14:5a:03:54:cb:5c:1c: 35:8d:d5:1b:34:9a:d7:4a:c4:aa:99:60:e1:2a:78:f1:36:19: 94:37:6c:90:f9:d7:97:34:25:a1:2c:77:60:1a:d3:ed:9c:25: c2:78:d3:a5:90:74:87:9d:0f:a3:d3:77:f6:25:f8:09:03:aa: ae:06:e1:bf:32:45:5a:47:ef:81:ff:0f:7e:58:5d:51:37:d9: 97:7a:84:a3:8f:e3:10:96:7e:57:de:f1:a1:64:5a:f1:8a:7d: 0d:f5:d0:22:41:7c:07:ae:1e:5a:1a:f0:f7:8b:95:3b:2c:29: e5:ec:86:7b:ce:1d:db:5b:00:a8:8d:8f:14:39:1c:8e:f0:ec: 07:b5:56:e3:4b:6e:7b:b0:a5:1a:3e:fd:b0:3f:55:1d:cf:45: 33:cc:15:1a:a4:f3:1d:85:17:11:bc:a6:8d:87:f8:71:fb:50: eb:e3:b1:2f:48:bc:34:c6:c2:a0:92:89:f3:82:66:b6:7f:95: 12:96:5c:88:d1:1f:1e:69:a6:e9:0b:dc:83:fe:d3:4b:08:5d: c7:83:36:cf:57:22:7b:72:80:e4:cd:a4:70:56:58:25:55:17: 62:22:d1:7b:b6:65:e5:e2:0e:84:ed:f8:48:06:50:c5:03:ab: ec:42:1e:69 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAK9hMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIzNTRaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKDQ5ODYyNDJCMDNGQjRBOUMxOTA2MTI3RUZDNEMwNUUzQjlCREZF QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGscscRgh2c1kiFZ6 WKQ79HFbh0fViWLXKTu5YYluSp4gTiHNw0zn5i+q7bGPocgwRU9QFros7dKPfxKx TRFJeEK5ZZVyx0QzMKLn7szS86qx9tsc2hmemMlm2A3jG7vPcXv4UFQQPmsYe+ct 4wbPBuG4yAuFztC5QmDWLgjgbR4j/i8c6FOHLZYh5YzZPM5IKL/T9yX0cKrqvbDb L3Qj3aXSjUWNALbOq+Q8ZkkRxTU7XmJ3YWINaz95qjsYDh4ExsF9jQWIJWT0mOsf ri5j84Qaw1j5dvgEsPhDR0WNVr3mz7/sNQ6xc8Fyjyu+fwHsKiXqK0fjKWUtpVDd Fl/zAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUSYYkKwP7SpwZBhJ+/EwF47m9/rsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjc0OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaQjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeKhjANBgkqhkiG9w0BAQsFAAOCAQEAM/Yrmv1IBng8qZ8UWgNU y1wcNY3VGzSa10rEqplg4Sp48TYZlDdskPnXlzQloSx3YBrT7ZwlwnjTpZB0h50P o9N39iX4CQOqrgbhvzJFWkfvgf8PflhdUTfZl3qEo4/jEJZ+V97xoWRa8Yp9DfXQ IkF8B64eWhrw94uVOywp5eyGe84d21sAqI2PFDkcjvDsB7VW40tue7ClGj79sD9V Hc9FM8wVGqTzHYUXEbymjYf4cftQ6+OxL0i8NMbCoJKJ84Jmtn+VEpZciNEfHmmm 6Qvcg/7TSwhdx4M2z1cie3KA5M2kcFZYJVUXYiLRe7Zl5eIOhO34SAZQxQOr7EIe aQ== -----END CERTIFICATE-----Generated at Mon May 20 00:17:34 2024 by rpki-client on console-fra.rpki-client.org