$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer File: _RcrCSdVjbeuit47T13UnttFtYI.cer (raw, json) Hash identifier: oHd1+MqVpAu54ktYUMH7I8KdPmrPs4w4NYuy3g9E8nU= Subject key identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BA71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:47:47 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 151308 IP: 103.216.156.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47729 (0xba71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:47:47 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cf:d6:cf:e3:ac:36:76:f5:ef:b7:8b:6e:47: 29:72:33:e8:da:88:80:cd:51:7a:4b:97:ae:29:0e: 97:30:2e:da:bb:ec:73:2c:14:e4:8e:52:28:80:5d: 38:66:20:eb:ba:f5:01:05:38:63:df:66:94:ca:12: c2:19:39:59:96:60:df:ff:e2:c5:88:96:3e:ea:c8: e4:b5:bf:16:20:3f:cf:9e:8f:cc:df:3c:e6:3e:65: c9:bf:94:f7:11:9f:4e:db:cf:8a:31:56:3c:c7:02: 8d:ce:d6:e7:28:ef:7c:1e:5a:90:9d:90:3d:ed:d9: 2e:2c:8b:de:76:21:59:e5:e9:ad:e7:69:80:30:09: 1d:86:47:1f:d7:da:e1:5e:dd:a2:07:92:07:4d:2f: 16:e1:54:98:a2:69:e1:b0:48:46:4b:7a:09:b0:5c: 80:7e:47:bd:ba:38:20:b8:47:c5:bd:59:b3:e2:d0: da:25:9e:54:79:55:1f:56:84:06:ba:14:0b:02:9c: dc:39:c8:89:f6:e6:21:2c:ce:08:43:7c:87:a3:7f: 1d:3b:01:ac:a5:de:6d:f7:74:13:3b:65:c9:10:8d: c3:0d:5f:42:ae:2d:81:c1:a4:2f:1a:90:e7:aa:82: 52:0e:10:0a:98:b4:9e:e1:66:4e:63:8a:f9:2e:8a: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151308 sbgp-ipAddrBlock: critical IPv4: 103.216.156.0/23 Signature Algorithm: sha256WithRSAEncryption b0:24:2d:24:f2:9b:2b:ee:47:f4:be:77:68:3e:49:77:4d:32: 43:52:5a:cf:63:01:b9:1e:25:1b:79:f6:9f:b7:ce:e6:58:9d: 10:5e:05:32:ca:52:2d:c0:02:cc:2f:ff:bf:c3:fc:79:df:33: 9b:39:85:83:0b:e2:15:fc:fd:a5:0c:1d:70:8e:b8:b7:d0:34: 04:7a:d0:8a:5f:fa:db:a3:3b:dc:c9:3b:c6:b6:ef:de:64:77: a1:86:94:04:00:42:aa:8a:4e:05:a6:cd:f8:88:52:46:97:0b: 21:0c:11:c7:99:af:07:47:8c:3f:aa:50:c5:62:f5:f5:9e:fb: 27:c2:d8:90:02:89:06:0d:62:48:ff:8e:7f:9e:de:f8:ee:c8: 3e:dd:d9:bb:c3:b6:99:8c:f2:80:d3:7e:81:57:7c:2b:fe:39: 0f:30:05:5b:5f:8e:9d:15:46:42:4d:ec:2a:f0:4c:d2:0e:29: 2c:16:b4:58:eb:c8:63:56:48:20:79:5b:86:02:85:ae:99:42: f2:be:b9:78:4e:ec:87:e9:18:c1:c8:06:99:11:5d:a1:8c:f9: 80:b7:dc:ec:76:c4:b4:0c:44:62:88:2b:75:71:2d:05:f0:7d: 13:9d:e0:2d:c7:f3:15:ab:25:29:e0:dd:f6:69:64:71:75:1c: e4:4d:e3:70 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDALpxMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ3NDdaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEZEMTcyQjA5Mjc1NThEQjdBRThBREUzQjRGNURENDlFREI0NUI1 ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxz9bP46w2dvXvt4tu RylyM+jaiIDNUXpLl64pDpcwLtq77HMsFOSOUiiAXThmIOu69QEFOGPfZpTKEsIZ OVmWYN//4sWIlj7qyOS1vxYgP8+ej8zfPOY+Zcm/lPcRn07bz4oxVjzHAo3O1uco 73weWpCdkD3t2S4si952IVnl6a3naYAwCR2GRx/X2uFe3aIHkgdNLxbhVJiiaeGw SEZLegmwXIB+R726OCC4R8W9WbPi0NolnlR5VR9WhAa6FAsCnNw5yIn25iEszghD fIejfx07Aayl3m33dBM7ZckQjcMNX0KuLYHBpC8akOeqglIOEAqYtJ7hZk5jivku ikHLAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU/RcrCSdVjbeuit47T13UnttFtYIw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MzYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIzNi9fUmNyQ1NkVmpiZXVpdDQ3VDEzVW50dEZ0WUkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJPDDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfYnDANBgkqhkiG9w0BAQsFAAOCAQEAsCQtJPKbK+5H9L53aD5J d00yQ1Jaz2MBuR4lG3n2n7fO5lidEF4FMspSLcACzC//v8P8ed8zmzmFgwviFfz9 pQwdcI64t9A0BHrQil/626M73Mk7xrbv3mR3oYaUBABCqopOBabN+IhSRpcLIQwR x5mvB0eMP6pQxWL19Z77J8LYkAKJBg1iSP+Of57e+O7IPt3Zu8O2mYzygNN+gVd8 K/45DzAFW1+OnRVGQk3sKvBM0g4pLBa0WOvIY1ZIIHlbhgKFrplC8r65eE7sh+kY wcgGmRFdoYz5gLfc7HbEtAxEYogrdXEtBfB9E53gLcfzFaslKeDd9mlkcXUc5E3j cA== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:28 2024 by rpki-client on console-ams.rpki-client.org