$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VxTuvOGWVLbyz1vHyw1__BtTvts.cer File: VxTuvOGWVLbyz1vHyw1__BtTvts.cer (raw, json) Hash identifier: HmGOTB0U+d+Sp7+PNMpVLF8zUcHTlqG6YSJFXpTbaVc= Subject key identifier: 57:14:EE:BC:E1:96:54:B6:F2:CF:5B:C7:CB:0D:7F:FC:1B:53:BE:DB Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3793 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/VxTuvOGWVLbyz1vHyw1__BtTvts.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:49:12 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 160.22.58.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14227 (0x3793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:49:12 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5714EEBCE19654B6F2CF5BC7CB0D7FFC1B53BEDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:05:7f:71:4e:37:56:5a:02:f5:28:a6:a1: ca:f5:46:70:5b:45:60:d8:ed:7b:1f:cb:63:15:03: 9a:0f:16:8a:e9:13:09:8f:ef:96:ae:7e:92:a1:0e: 02:6f:56:69:06:cc:f9:eb:a5:f7:c3:2b:e7:5e:d2: 5a:ca:9f:32:fe:be:82:83:65:2f:32:85:f5:2c:68: 70:8b:29:46:ef:5f:b1:76:83:90:d1:e1:6f:6f:3a: 00:fd:f8:51:e9:f1:a4:01:a3:8b:d7:91:80:a7:a3: c1:53:54:83:fd:dc:7d:10:e8:5b:56:bd:e6:a7:28: 1b:1c:6c:5d:f6:f7:c8:57:bb:80:4d:87:1e:76:3d: 3f:6e:b1:0e:bd:b2:70:23:17:14:47:44:6b:fc:7e: a1:54:b2:b9:f9:c8:6a:08:e7:8d:b7:2d:64:fe:ee: cd:ce:c3:a2:db:dc:b6:f3:92:50:c1:e8:f9:bd:3a: b0:6e:92:d8:32:59:f1:77:a9:e1:72:23:96:60:60: d1:93:08:c5:90:88:13:64:f4:42:3a:1e:c9:a7:c9: 44:da:5a:5a:b0:89:2f:24:9d:59:b4:f7:b9:0b:8b: c7:b4:8c:47:c6:d5:09:57:52:14:57:96:e2:7f:4d: 73:bd:d5:02:0d:cb:24:79:b4:c2:6f:20:4b:d7:04: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:14:EE:BC:E1:96:54:B6:F2:CF:5B:C7:CB:0D:7F:FC:1B:53:BE:DB X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3288/VxTuvOGWVLbyz1vHyw1__BtTvts.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.22.58.0/23 Signature Algorithm: sha256WithRSAEncryption 46:90:63:39:99:2f:53:53:ae:1e:41:e1:83:9c:6e:05:2c:c9: 78:83:89:0f:8e:75:91:f8:6e:cd:6a:5a:70:1e:22:79:aa:75: cc:23:6c:50:7a:b3:2c:03:a7:3c:8c:fe:6b:3d:d7:1e:0c:20: 54:d5:f1:ce:ff:29:11:9c:61:a1:8b:50:0e:99:60:7c:76:09: df:65:31:cd:c9:cf:ef:dd:78:2f:b1:0b:c0:ca:40:9e:7f:fb: 52:0a:77:86:c4:08:a6:e2:47:c4:7f:03:b7:14:18:ac:a4:1a: 46:c1:bc:76:2d:b5:7a:96:30:69:4a:20:8a:46:1f:54:3c:58: cd:2a:b4:94:56:d7:00:34:a5:57:2f:69:85:26:f6:53:af:1d: 39:7e:38:7c:57:86:96:29:86:30:9e:c4:b1:b3:2a:a4:e9:9a: c1:2f:f5:e1:d5:b5:4c:fa:42:1f:89:ab:21:78:09:0f:60:72: 15:21:67:a3:8e:2f:eb:d2:04:f2:64:10:b6:d2:d7:ac:61:c9: e6:e6:2a:c1:11:8d:7e:6b:88:f0:20:0e:29:b3:31:af:ef:95: 9e:ec:5a:58:dd:66:54:c4:ce:f7:b0:c4:62:3a:88:63:a4:32: 83:73:e1:ad:31:e0:3f:58:57:2b:a9:a5:70:48:df:b3:d8:67: b6:6f:a7:f8 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN5MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNDkxMloXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoNTcxNEVFQkNFMTk2NTRCNkYyQ0Y1QkM3Q0IwRDdGRkMxQjUzQkVE QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALAsBX9xTjdWWgL1KKah yvVGcFtFYNjtex/LYxUDmg8WiukTCY/vlq5+kqEOAm9WaQbM+eul98Mr517SWsqf Mv6+goNlLzKF9SxocIspRu9fsXaDkNHhb286AP34UenxpAGji9eRgKejwVNUg/3c fRDoW1a95qcoGxxsXfb3yFe7gE2HHnY9P26xDr2ycCMXFEdEa/x+oVSyufnIagjn jbctZP7uzc7DotvctvOSUMHo+b06sG6S2DJZ8Xep4XIjlmBg0ZMIxZCIE2T0Qjoe yafJRNpaWrCJLySdWbT3uQuLx7SMR8bVCVdSFFeW4n9Nc73VAg3LJHm0wm8gS9cE EVcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRXFO684ZZUtvLPW8fLDX/8G1O+2zAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjg4L1Z4VHV2T0dXVkxieXoxdkh5dzFfX0J0VHZ0cy5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgFjowDQYJKoZIhvcNAQELBQAD ggEBAEaQYzmZL1NTrh5B4YOcbgUsyXiDiQ+OdZH4bs1qWnAeInmqdcwjbFB6sywD pzyM/ms91x4MIFTV8c7/KRGcYaGLUA6ZYHx2Cd9lMc3Jz+/deC+xC8DKQJ5/+1IK d4bECKbiR8R/A7cUGKykGkbBvHYttXqWMGlKIIpGH1Q8WM0qtJRW1wA0pVcvaYUm 9lOvHTl+OHxXhpYphjCexLGzKqTpmsEv9eHVtUz6Qh+JqyF4CQ9gchUhZ6OOL+vS BPJkELbS16xhyebmKsERjX5riPAgDimzMa/vlZ7sWljdZlTEzvewxGI6iGOkMoNz 4a0x4D9YVyuppXBI37PYZ7Zvp/g= -----END CERTIFICATE-----Generated at Sat Nov 23 01:15:53 2024 by rpki-client on console-fra.rpki-client.org