$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer (raw, json) Hash identifier: NR76OkX1ZmCgMRzmHnZKUJ0po0SHy4wEMMhpwQGJ4Sk= Subject key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:56:35 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 137794 IP: 103.138.134.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48267 (0xbc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:56:35 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:c7:2c:71:18:21:d9:cd:64:88:56:7a:58: a4:3b:f4:71:5b:87:47:d5:89:62:d7:29:3b:b9:61: 89:6e:4a:9e:20:4e:21:cd:c3:4c:e7:e6:2f:aa:ed: b1:8f:a1:c8:30:45:4f:50:16:ba:2c:ed:d2:8f:7f: 12:b1:4d:11:49:78:42:b9:65:95:72:c7:44:33:30: a2:e7:ee:cc:d2:f3:aa:b1:f6:db:1c:da:19:9e:98: c9:66:d8:0d:e3:1b:bb:cf:71:7b:f8:50:54:10:3e: 6b:18:7b:e7:2d:e3:06:cf:06:e1:b8:c8:0b:85:ce: d0:b9:42:60:d6:2e:08:e0:6d:1e:23:fe:2f:1c:e8: 53:87:2d:96:21:e5:8c:d9:3c:ce:48:28:bf:d3:f7: 25:f4:70:aa:ea:bd:b0:db:2f:74:23:dd:a5:d2:8d: 45:8d:00:b6:ce:ab:e4:3c:66:49:11:c5:35:3b:5e: 62:77:61:62:0d:6b:3f:79:aa:3b:18:0e:1e:04:c6: c1:7d:8d:05:88:25:64:f4:98:eb:1f:ae:2e:63:f3: 84:1a:c3:58:f9:76:f8:04:b0:f8:43:47:45:8d:56: bd:e6:cf:bf:ec:35:0e:b1:73:c1:72:8f:2b:be:7f: 01:ec:2a:25:ea:2b:47:e3:29:65:2d:a5:50:dd:16: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137794 sbgp-ipAddrBlock: critical IPv4: 103.138.134.0/23 Signature Algorithm: sha256WithRSAEncryption 93:4c:bf:1a:71:7f:8a:7f:8b:6c:58:65:c6:3e:d4:66:07:ea: f8:e3:bc:55:25:6f:02:c6:25:37:eb:4a:fe:e2:60:30:e7:32: 10:0b:2c:45:1a:89:01:55:65:0e:5d:f3:f3:ab:5f:06:c3:0d: 7b:c1:46:42:68:65:22:df:be:c7:9e:85:ab:36:0f:2a:57:91: ca:76:7e:4a:14:e7:c9:61:44:f4:da:77:30:f2:f3:23:55:f5: ae:c9:d8:fe:5d:4b:a1:e1:2f:34:ea:e3:54:b5:47:f9:0c:c3: b2:00:be:1b:79:f3:a5:06:1e:a2:40:43:d6:37:d2:6d:1e:b4: 8b:3c:5e:57:5b:7b:ba:d2:c6:3f:c0:2d:1a:af:f7:d6:88:8b: b3:7d:77:75:de:05:a0:6c:2e:fc:0e:70:4c:c3:1a:cc:d0:43: e3:42:ce:d0:38:9c:98:c4:68:af:fe:1a:95:93:e0:bf:ea:e6: 19:f7:44:ee:a8:50:1c:2f:92:68:03:28:52:93:a8:05:68:64: 05:a5:9b:e8:76:51:52:af:fd:50:5c:2d:c8:dc:19:9d:90:29: 6b:1a:96:86:6f:63:3d:90:b7:2f:de:7e:93:34:e8:d2:7c:eb: 07:95:10:d9:57:13:e1:8f:4a:b8:c2:33:78:eb:08:8a:09:b6: 49:e8:f6:3b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDALyLMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU2MzVaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDQ5ODYyNDJCMDNGQjRBOUMxOTA2MTI3RUZDNEMwNUUzQjlCREZF QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGscscRgh2c1kiFZ6 WKQ79HFbh0fViWLXKTu5YYluSp4gTiHNw0zn5i+q7bGPocgwRU9QFros7dKPfxKx TRFJeEK5ZZVyx0QzMKLn7szS86qx9tsc2hmemMlm2A3jG7vPcXv4UFQQPmsYe+ct 4wbPBuG4yAuFztC5QmDWLgjgbR4j/i8c6FOHLZYh5YzZPM5IKL/T9yX0cKrqvbDb L3Qj3aXSjUWNALbOq+Q8ZkkRxTU7XmJ3YWINaz95qjsYDh4ExsF9jQWIJWT0mOsf ri5j84Qaw1j5dvgEsPhDR0WNVr3mz7/sNQ6xc8Fyjyu+fwHsKiXqK0fjKWUtpVDd Fl/zAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUSYYkKwP7SpwZBhJ+/EwF47m9/rsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjc0OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaQjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeKhjANBgkqhkiG9w0BAQsFAAOCAQEAk0y/GnF/in+LbFhlxj7U Zgfq+OO8VSVvAsYlN+tK/uJgMOcyEAssRRqJAVVlDl3z86tfBsMNe8FGQmhlIt++ x56FqzYPKleRynZ+ShTnyWFE9Np3MPLzI1X1rsnY/l1LoeEvNOrjVLVH+QzDsgC+ G3nzpQYeokBD1jfSbR60izxeV1t7utLGP8AtGq/31oiLs313dd4FoGwu/A5wTMMa zNBD40LO0DicmMRor/4alZPgv+rmGfdE7qhQHC+SaAMoUpOoBWhkBaWb6HZRUq/9 UFwtyNwZnZApaxqWhm9jPZC3L95+kzTo0nzrB5UQ2VcT4Y9KuMIzeOsIigm2Sej2 Ow== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org