$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_On9lvjAopmBn-sARGCn2GHQu3I.cer File: _On9lvjAopmBn-sARGCn2GHQu3I.cer (raw, json) Hash identifier: dfiv8ErCYEnhURd+j3qJfCtKV6YGoDHl3Uz/L644JRw= Subject key identifier: FC:E9:FD:96:F8:C0:A2:99:81:9F:EB:00:44:60:A7:D8:61:D0:BB:72 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3A13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 03 Jan 2025 06:27:05 +0000 Certificate not after: Sat 03 Jan 2026 02:04:14 +0000 Subordinate resources: IP: 161.248.92.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 21:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14867 (0x3a13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Jan 3 06:27:05 2025 GMT Not After : Jan 3 02:04:14 2026 GMT Subject: CN=FCE9FD96F8C0A299819FEB004460A7D861D0BB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:77:c8:36:46:46:c0:e7:7a:94:81:af:61: 4c:03:88:c1:5b:4f:c6:a2:91:05:61:c6:bb:1c:ae: ad:dc:43:db:8d:18:01:4b:48:ac:41:fb:79:cc:e0: 0d:3b:7f:dc:a7:74:0b:e7:1f:8d:f3:a6:eb:3d:ff: c8:a5:41:fa:6e:e8:bd:bd:9d:92:8a:16:d3:26:8e: a6:3f:dd:0b:49:26:bd:c6:ad:2e:4c:8b:50:ef:d6: b4:4f:f1:b9:2e:ee:cd:4a:7d:83:33:6c:51:36:2b: 6b:f5:8a:57:a3:25:08:53:ec:74:4d:66:a0:34:67: dd:9d:04:6b:46:6e:c6:f3:e5:a9:9f:08:b2:b9:6a: a6:a3:97:61:bb:f9:fb:83:e5:53:75:a5:2b:da:5b: 16:b9:b2:cb:51:3f:07:25:e5:71:b7:29:f8:f7:10: c2:86:79:9f:e4:90:00:17:f0:a7:c5:93:5b:4c:ea: 96:19:01:5a:fb:6f:28:72:af:85:f6:71:10:50:43: 15:f8:32:84:c7:6b:ef:fb:c4:84:c4:10:f9:78:54: b9:ca:04:af:b2:44:19:c6:f7:64:59:1c:89:c5:ae: fe:9b:79:ea:3f:a7:0b:a6:65:06:7c:c5:7e:86:5c: 57:bd:df:b0:79:11:7b:13:06:bc:bd:a4:c2:54:d4: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E9:FD:96:F8:C0:A2:99:81:9F:EB:00:44:60:A7:D8:61:D0:BB:72 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/_On9lvjAopmBn-sARGCn2GHQu3I.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.92.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:4d:cb:e6:da:22:15:36:b6:75:bd:f1:79:9a:6f:f5:c7:c6: 92:c2:92:6e:12:49:9a:46:69:d7:82:14:75:55:5a:8e:a1:25: d0:f3:14:72:24:1a:70:a8:51:9d:ab:8b:d3:25:f6:56:4d:5c: 50:a9:47:6d:03:10:56:16:16:28:31:f6:37:a8:ac:18:cd:df: 1e:67:79:6d:dd:6d:6f:92:dd:e6:3d:e0:6c:ba:f8:58:5d:8c: bc:55:a7:b2:8c:ea:92:cf:08:98:1d:d9:e7:bc:6d:3b:8c:88: ac:5b:f7:ca:d3:9e:85:61:4a:8e:ed:68:73:81:9f:85:ae:17: 33:00:50:82:64:6a:d5:eb:7d:87:db:a9:81:11:f8:f1:a5:4a: 34:13:e2:96:23:d1:83:7b:b0:f1:35:63:de:9f:cb:45:af:7e: 62:0a:11:40:1d:bf:57:dd:ca:a9:a2:cc:ce:a9:7c:52:8e:87: 93:be:6b:f5:ee:d3:fa:92:fc:4a:cd:3f:7f:6c:5a:91:87:b2: 2f:45:1a:2c:b3:8c:e6:05:bf:8d:ad:43:49:0e:63:cb:03:62: bb:eb:a4:21:da:cb:5d:57:23:6f:b8:0c:02:08:4a:3a:53:41: a2:b4:98:3f:8f:f0:25:50:d1:3a:10:35:3f:b5:79:0f:d3:9d: f7:37:87:bc -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOhMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDEwMzA2MjcwNVoXDTI2MDEwMzAyMDQxNFowMzEx MC8GA1UEAxMoRkNFOUZEOTZGOEMwQTI5OTgxOUZFQjAwNDQ2MEE3RDg2MUQwQkI3 MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALHid8g2RkbA53qUga9h TAOIwVtPxqKRBWHGuxyurdxD240YAUtIrEH7eczgDTt/3Kd0C+cfjfOm6z3/yKVB +m7ovb2dkooW0yaOpj/dC0kmvcatLkyLUO/WtE/xuS7uzUp9gzNsUTYra/WKV6Ml CFPsdE1moDRn3Z0Ea0ZuxvPlqZ8IsrlqpqOXYbv5+4PlU3WlK9pbFrmyy1E/ByXl cbcp+PcQwoZ5n+SQABfwp8WTW0zqlhkBWvtvKHKvhfZxEFBDFfgyhMdr7/vEhMQQ +XhUucoEr7JEGcb3ZFkcicWu/pt56j+nC6ZlBnzFfoZcV73fsHkRexMGvL2kwlTU TgsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBT86f2W+MCimYGf6wBEYKfYYdC7cjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzQ2L19PbjlsdmpBb3BtQm4tc0FSR0NuMkdIUXUzSS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGh+FwwDQYJKoZIhvcNAQELBQAD ggEBABtNy+baIhU2tnW98Xmab/XHxpLCkm4SSZpGadeCFHVVWo6hJdDzFHIkGnCo UZ2ri9Ml9lZNXFCpR20DEFYWFigx9jeorBjN3x5neW3dbW+S3eY94Gy6+FhdjLxV p7KM6pLPCJgd2ee8bTuMiKxb98rTnoVhSo7taHOBn4WuFzMAUIJkatXrfYfbqYER +PGlSjQT4pYj0YN7sPE1Y96fy0WvfmIKEUAdv1fdyqmizM6pfFKOh5O+a/Xu0/qS /ErNP39sWpGHsi9FGiyzjOYFv42tQ0kOY8sDYrvrpCHay11XI2+4DAIISjpTQaK0 mD+P8CVQ0ToQNT+1eQ/Tnfc3h7w= -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:05 2025 by rpki-client