$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TnhsicjML72c4lQNmb4SziD2uLM.cer File: TnhsicjML72c4lQNmb4SziD2uLM.cer (raw, json) Hash identifier: fBaYShyW1L+nDOASxuIrl7eoYRGqrD1ClCgHCR7+FrY= Subject key identifier: 4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 31E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:20:53 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 140.205.0.0/16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 15:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12769 (0x31e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Feb 1 01:20:53 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=4E786C89C8CC2FBD9CE2540D99BE12CE20F6B8B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8b:76:8a:27:fc:c2:a3:61:bf:ef:9b:d7:7c: f0:ce:20:b0:ab:37:32:db:96:4c:c9:e5:8f:e3:e7: 77:e2:52:73:88:84:98:de:35:f7:3d:aa:62:cd:96: 3c:82:b4:c6:46:47:70:a5:aa:48:bf:07:ab:5a:c7: 81:4c:27:c4:6d:2f:e0:2d:7a:2f:7b:48:bf:d5:5e: 62:65:37:07:d4:53:1c:db:92:f4:c2:10:f4:10:a2: 54:30:d5:3a:f7:dc:a5:aa:49:e1:d2:ca:db:27:bc: ad:30:ed:d1:b6:d5:f9:40:72:04:66:43:df:d4:ca: 52:6a:60:0d:8e:bb:13:ff:61:7b:45:b5:db:61:67: 45:17:4f:17:23:94:17:3f:38:a1:33:59:86:b6:2b: 91:75:73:53:52:21:00:e4:d1:6e:98:da:46:0f:74: a3:c2:1b:01:6d:16:2b:a2:83:63:51:21:ed:d5:04: e7:d3:29:d5:c2:46:1f:41:f4:96:9d:68:d0:b3:57: 05:0b:6f:19:87:0c:32:db:fb:b0:da:25:fe:57:3a: ec:02:ea:e7:b7:2d:15:7c:b2:49:d5:d8:c6:38:3c: 99:2c:15:dc:bc:73:7d:59:b6:f3:c2:26:19:87:cf: 98:26:0c:a5:6b:08:81:13:4c:f6:6f:9c:8a:f2:ce: 9f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.205.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:17:fd:39:a3:e4:48:e1:44:15:13:d0:55:33:16:81:d4:22: 52:81:4c:a1:12:ac:b5:2b:03:a5:e1:fd:06:27:01:5d:c3:f1: f4:90:d8:a4:32:8d:0f:b7:fa:63:2e:90:57:95:8b:df:3a:00: a8:44:6c:df:69:d4:82:a7:a0:70:57:4b:29:4b:d1:50:5a:eb: 70:13:96:b1:54:12:1c:57:df:37:aa:b3:35:b2:48:80:5f:0c: 24:85:fd:e4:80:e7:9e:4f:38:b0:d4:e8:d8:ba:27:f7:4e:9f: 80:6b:c8:83:4e:3d:bb:cf:9a:07:a8:dd:05:82:b5:38:06:1f: 3c:80:ee:cc:79:73:c6:88:74:37:07:c2:30:7e:fe:72:98:ac: 08:9f:91:b8:d0:8b:f5:da:78:00:cf:26:4e:4e:21:66:1d:4f: 8a:25:3d:1a:57:c3:3f:10:df:a2:21:ff:c2:99:bd:5d:23:40: 29:b9:54:c2:45:1c:3b:a4:c3:a9:fa:45:c2:80:e0:c1:23:13: d1:09:67:0d:bf:93:f0:22:20:78:7e:a8:83:41:3d:73:1d:3c: 48:c2:69:5c:a5:3b:68:12:6d:1f:a5:c8:a3:84:26:6e:84:5c: 09:79:85:7b:b1:5a:b2:03:39:cc:cd:cb:fe:a9:0b:8c:0b:31: 2b:46:62:49 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICMeEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDIwMTAxMjA1M1oXDTI1MDEzMTAxMTM0NlowMzEx MC8GA1UEAxMoNEU3ODZDODlDOENDMkZCRDlDRTI1NDBEOTlCRTEyQ0UyMEY2QjhC MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJSLdoon/MKjYb/vm9d8 8M4gsKs3MtuWTMnlj+Pnd+JSc4iEmN419z2qYs2WPIK0xkZHcKWqSL8Hq1rHgUwn xG0v4C16L3tIv9VeYmU3B9RTHNuS9MIQ9BCiVDDVOvfcpapJ4dLK2ye8rTDt0bbV +UByBGZD39TKUmpgDY67E/9he0W122FnRRdPFyOUFz84oTNZhrYrkXVzU1IhAOTR bpjaRg90o8IbAW0WK6KDY1Eh7dUE59Mp1cJGH0H0lp1o0LNXBQtvGYcMMtv7sNol /lc67ALq57ctFXyySdXYxjg8mSwV3LxzfVm288ImGYfPmCYMpWsIgRNM9m+civLO nzMCAwEAAaOCAlIwggJOMB0GA1UdDgQWBBROeGyJyMwvvZziVA2ZvhLOIPa4szAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzM0MS9UbmhzaWNqTUw3MmM0bFFObWI0U3ppRDJ1TE0ubWZ0MDEGCCsG AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMB4G CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjM0wDQYJKoZIhvcNAQELBQADggEB AIsX/Tmj5EjhRBUT0FUzFoHUIlKBTKESrLUrA6Xh/QYnAV3D8fSQ2KQyjQ+3+mMu kFeVi986AKhEbN9p1IKnoHBXSylL0VBa63ATlrFUEhxX3zeqszWySIBfDCSF/eSA 555POLDU6Ni6J/dOn4BryINOPbvPmgeo3QWCtTgGHzyA7sx5c8aIdDcHwjB+/nKY rAifkbjQi/XaeADPJk5OIWYdT4olPRpXwz8Q36Ih/8KZvV0jQCm5VMJFHDukw6n6 RcKA4MEjE9EJZw2/k/AiIHh+qINBPXMdPEjCaVylO2gSbR+lyKOEJm6EXAl5hXux WrIDOczNy/6pC4wLMStGYkk= -----END CERTIFICATE-----Generated at Sun May 19 10:14:57 2024 by rpki-client on console-fra.rpki-client.org