$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VZPMkzM9chHxN7wfzRxXcSWoWyo.cer File: VZPMkzM9chHxN7wfzRxXcSWoWyo.cer (raw, json) Hash identifier: It2HEKuIcERMr/+WkM4dBptn6QoTdhUTnZFuxHMg3Ac= Subject key identifier: 55:93:CC:93:33:3D:72:11:F1:37:BC:1F:CD:1C:57:71:25:A8:5B:2A Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AF07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:22:12 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 146774 IP: 103.18.186.0/23 IP: 2400:b620::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 11:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44807 (0xaf07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:22:12 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5593CC93333D7211F137BC1FCD1C577125A85B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:74:d1:55:91:c2:54:82:c1:1e:ab:9f:15: 5a:f6:50:c7:a1:0b:dd:38:c5:bc:cc:64:1c:48:43: 33:18:6f:75:78:83:a0:3f:60:a5:56:8a:9f:a0:69: 4b:7b:9a:b7:b6:d4:f8:03:4f:d7:b9:88:30:1d:85: d7:f0:ea:7e:2a:a1:a4:f6:36:fb:9b:82:2b:81:f4: a9:c1:f9:dc:28:25:4c:bc:5a:4c:6c:04:10:57:0a: 62:77:de:e3:3a:23:c0:ad:2e:e9:5a:16:72:5e:8d: ab:0a:04:22:66:8e:06:08:0c:6e:ae:b5:fc:0d:51: 16:6b:6b:36:3c:e8:db:b5:2b:64:56:35:53:81:46: 3b:d5:c7:d3:50:b6:6d:95:4e:81:b1:43:7e:6a:89: 98:3e:7f:04:86:02:df:f0:d0:08:bb:99:17:5f:5c: c1:16:c6:22:a9:0e:e4:33:92:96:23:16:7f:63:69: fe:31:10:0e:bf:a2:5b:66:4c:2b:5f:32:4d:0a:e3: 4d:de:c6:c0:62:a5:b4:e0:45:33:2f:c5:84:e8:c2: 8d:61:1a:13:c6:1f:4a:7e:f7:e8:bf:d3:79:c7:e6: 23:d3:7a:1a:bc:22:32:a5:92:c6:d4:94:46:7e:d3: 93:f1:c8:15:19:44:ee:f7:fe:5e:b4:16:b0:7a:fa: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:93:CC:93:33:3D:72:11:F1:37:BC:1F:CD:1C:57:71:25:A8:5B:2A X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3177/VZPMkzM9chHxN7wfzRxXcSWoWyo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 146774 sbgp-ipAddrBlock: critical IPv4: 103.18.186.0/23 IPv6: 2400:b620::/32 Signature Algorithm: sha256WithRSAEncryption 91:42:48:db:df:d7:be:39:10:57:88:5c:d5:e7:07:30:78:65: 30:ca:a9:99:8b:c1:2b:76:89:28:6a:8c:f7:6b:8b:97:fc:46: 97:7f:3d:cc:1f:26:5c:7b:5d:d1:81:52:27:c4:97:fa:04:ab: 0a:d9:da:cd:3b:4a:b4:28:62:68:c6:0e:9a:b3:5e:e0:17:73: 95:48:5f:ec:1b:8e:6f:71:de:dc:9f:d2:eb:a8:06:4f:6a:1a: 29:3c:d1:d8:d5:15:5e:e3:aa:39:47:f5:14:ed:5d:af:5a:33: 80:1a:46:b4:bf:1f:c8:9a:56:05:54:ee:63:47:5b:90:d6:56: 7e:0a:39:1f:5d:41:27:0c:44:2b:9b:86:3a:92:d3:91:11:3b: 6b:01:64:02:ce:98:22:0b:e4:f0:e1:cf:29:5b:2f:d8:ed:42: 26:97:11:80:58:a8:ec:d0:0f:99:ae:4d:84:86:12:98:4d:20: 07:d6:cb:d7:82:22:70:1e:50:7b:69:9f:55:8c:2b:00:15:46: 66:a9:ca:61:22:82:f8:0c:1c:1d:bd:21:cc:ea:0b:a9:4d:5d: 9a:c1:0b:ec:74:91:93:27:e5:5d:2f:1a:dc:e7:1f:ce:78:08: a4:df:00:2a:c3:d4:2a:2a:43:b4:1e:82:da:da:5b:20:6e:a4: 0d:e9:2f:6b -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAK8HMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIyMTJaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKDU1OTNDQzkzMzMzRDcyMTFGMTM3QkMxRkNEMUM1NzcxMjVBODVC MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAHTRVZHCVILBHquf FVr2UMehC904xbzMZBxIQzMYb3V4g6A/YKVWip+gaUt7mre21PgDT9e5iDAdhdfw 6n4qoaT2NvubgiuB9KnB+dwoJUy8WkxsBBBXCmJ33uM6I8CtLulaFnJejasKBCJm jgYIDG6utfwNURZrazY86Nu1K2RWNVOBRjvVx9NQtm2VToGxQ35qiZg+fwSGAt/w 0Ai7mRdfXMEWxiKpDuQzkpYjFn9jaf4xEA6/oltmTCtfMk0K403exsBipbTgRTMv xYTowo1hGhPGH0p+9+i/03nH5iPTehq8IjKlksbUlEZ+05PxyBUZRO73/l60FrB6 +rndAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUVZPMkzM9chHxN7wfzRxXcSWoWyow HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx NzcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzE3Ny9WWlBNa3pNOWNoSHhON3dmelJ4WGNTV29XeW8ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwI9VjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWcSujANBAIAAjAHAwUAJAC2IDANBgkqhkiG9w0BAQsFAAOCAQEA kUJI29/XvjkQV4hc1ecHMHhlMMqpmYvBK3aJKGqM92uLl/xGl389zB8mXHtd0YFS J8SX+gSrCtnazTtKtChiaMYOmrNe4BdzlUhf7BuOb3He3J/S66gGT2oaKTzR2NUV XuOqOUf1FO1dr1ozgBpGtL8fyJpWBVTuY0dbkNZWfgo5H11BJwxEK5uGOpLTkRE7 awFkAs6YIgvk8OHPKVsv2O1CJpcRgFio7NAPma5NhIYSmE0gB9bL14IicB5Qe2mf VYwrABVGZqnKYSKC+AwcHb0hzOoLqU1dmsEL7HSRkyflXS8a3OcfzngIpN8AKsPU KipDtB6C2tpbIG6kDekvaw== -----END CERTIFICATE-----Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org