$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer File: UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer (raw, json) Hash identifier: lHB7mjFx/4flBsG3UZg9jI8XHjRZAwcUA5+HKO/NCTs= Subject key identifier: 51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3841 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 11 Oct 2024 07:58:23 +0000 Certificate not after: Sat 11 Oct 2025 07:33:20 +0000 Subordinate resources: IP: 160.187.254.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14401 (0x3841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Oct 11 07:58:23 2024 GMT Not After : Oct 11 07:33:20 2025 GMT Subject: CN=5155BE679611E624575D7938070076A333C5B9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:6c:33:d0:60:d1:f2:32:0b:a7:c6:9d:89: 62:3a:18:06:80:96:30:e2:33:ea:ad:e1:28:a1:30: b4:30:a5:f9:47:65:a4:6c:25:c9:a4:e8:33:a5:4c: e9:23:da:52:b2:40:92:85:13:c3:a3:56:18:ed:eb: 17:6e:64:b1:d9:05:9e:3e:d0:7c:b1:3c:6a:05:58: 35:55:41:5c:0e:dd:e7:ac:40:96:04:36:7c:bb:14: aa:e7:22:da:e2:f6:c8:7d:70:db:2f:df:1e:3c:e8: ee:65:49:38:c0:90:8e:2c:4d:20:ff:b0:06:30:db: 61:fd:6d:38:94:be:4a:f4:e5:88:5c:85:24:5a:89: ea:ab:aa:fd:d9:05:1d:18:18:e6:47:62:e7:e7:00: 53:30:2b:5d:6c:c2:f0:98:c9:60:22:27:7f:2e:a1: 44:69:c8:94:4f:7a:81:d7:e2:39:24:3f:ab:37:c1: 15:58:2e:cc:eb:1d:83:e7:1f:1c:e5:f3:0c:a6:31: d3:80:a3:23:6b:26:13:aa:48:d7:d7:0d:a1:b6:cf: ef:ce:50:90:7e:54:5b:47:18:e5:16:e0:ee:9d:2d: fa:62:e5:81:1d:e9:41:83:75:66:8a:8b:99:23:53: 26:60:ed:6f:f3:4f:bf:27:18:bf:05:b9:ac:4b:3e: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.254.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:96:25:0b:4a:4a:db:3d:07:41:e0:f2:da:cc:4f:b2:aa:01: 2d:19:26:ef:6c:6d:7c:50:74:d9:1d:30:2c:3f:30:7f:ee:bf: 08:17:05:1e:60:ad:a4:bd:c9:37:43:ca:4f:79:ab:67:40:d0: 46:e0:04:ca:34:c0:ee:b9:da:40:02:36:6a:63:a1:71:06:6b: 8e:57:b7:2a:a9:05:35:a4:ff:49:0c:49:9a:0c:5e:81:b1:78: a1:33:95:65:97:d4:97:71:c5:47:46:32:69:8d:dd:8b:16:54: 7d:87:5c:7e:4c:0b:b4:54:2c:c3:ce:09:36:ee:a8:a0:4b:d1: a4:49:2a:11:99:49:11:4e:8b:5b:c9:0e:d1:37:d4:4f:a7:f4: d7:a1:0a:1b:66:2b:45:e8:08:89:ca:8a:d9:ec:8e:15:aa:f1: 41:92:b5:37:63:ce:0e:d6:4f:c5:a2:93:be:a4:22:f0:79:e0: d1:e6:72:77:69:6a:a3:6c:fb:a3:62:10:60:21:34:be:65:00: 18:07:2a:e3:6c:0e:0e:2e:06:fe:ec:9d:e1:11:80:bc:a1:a3: 1a:0e:31:6b:23:05:c8:6e:30:0b:9b:0b:e4:fa:ae:a6:b0:25: 2c:c7:3d:03:29:db:2e:60:cb:be:94:38:ef:6f:7c:19:4f:5d: a0:f6:49:47 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOEEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MTAxMTA3NTgyM1oXDTI1MTAxMTA3MzMyMFowMzEx MC8GA1UEAxMoNTE1NUJFNjc5NjExRTYyNDU3NUQ3OTM4MDcwMDc2QTMzM0M1QjlB RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKb/bDPQYNHyMgunxp2J YjoYBoCWMOIz6q3hKKEwtDCl+UdlpGwlyaToM6VM6SPaUrJAkoUTw6NWGO3rF25k sdkFnj7QfLE8agVYNVVBXA7d56xAlgQ2fLsUquci2uL2yH1w2y/fHjzo7mVJOMCQ jixNIP+wBjDbYf1tOJS+SvTliFyFJFqJ6quq/dkFHRgY5kdi5+cAUzArXWzC8JjJ YCInfy6hRGnIlE96gdfiOSQ/qzfBFVguzOsdg+cfHOXzDKYx04CjI2smE6pI19cN obbP785QkH5UW0cY5Rbg7p0t+mLlgR3pQYN1ZoqLmSNTJmDtb/NPvycYvwW5rEs+ RIsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRRVb5nlhHmJFddeTgHAHajM8W5rjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzIxL1VWVy1aNVlSNWlSWFhYazRCd0Iyb3pQRnVhNC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu/4wDQYJKoZIhvcNAQELBQAD ggEBAC6WJQtKSts9B0Hg8trMT7KqAS0ZJu9sbXxQdNkdMCw/MH/uvwgXBR5graS9 yTdDyk95q2dA0EbgBMo0wO652kACNmpjoXEGa45XtyqpBTWk/0kMSZoMXoGxeKEz lWWX1JdxxUdGMmmN3YsWVH2HXH5MC7RULMPOCTbuqKBL0aRJKhGZSRFOi1vJDtE3 1E+n9NehChtmK0XoCInKitnsjhWq8UGStTdjzg7WT8Wik76kIvB54NHmcndpaqNs +6NiEGAhNL5lABgHKuNsDg4uBv7sneERgLyhoxoOMWsjBchuMAubC+T6rqawJSzH PQMp2y5gy76UOO9vfBlPXaD2SUc= -----END CERTIFICATE-----Generated at Mon Nov 25 04:56:13 2024 by rpki-client on console-fra.rpki-client.org