$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer File: _RcrCSdVjbeuit47T13UnttFtYI.cer (raw, json) Hash identifier: hldv/m6JdpJ1LMBMQgDk7pmpyevIPIMP6tiRSWUaZVM= Subject key identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AEF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:21:55 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 151308 IP: 103.216.156.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 11:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44785 (0xaef1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:21:55 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cf:d6:cf:e3:ac:36:76:f5:ef:b7:8b:6e:47: 29:72:33:e8:da:88:80:cd:51:7a:4b:97:ae:29:0e: 97:30:2e:da:bb:ec:73:2c:14:e4:8e:52:28:80:5d: 38:66:20:eb:ba:f5:01:05:38:63:df:66:94:ca:12: c2:19:39:59:96:60:df:ff:e2:c5:88:96:3e:ea:c8: e4:b5:bf:16:20:3f:cf:9e:8f:cc:df:3c:e6:3e:65: c9:bf:94:f7:11:9f:4e:db:cf:8a:31:56:3c:c7:02: 8d:ce:d6:e7:28:ef:7c:1e:5a:90:9d:90:3d:ed:d9: 2e:2c:8b:de:76:21:59:e5:e9:ad:e7:69:80:30:09: 1d:86:47:1f:d7:da:e1:5e:dd:a2:07:92:07:4d:2f: 16:e1:54:98:a2:69:e1:b0:48:46:4b:7a:09:b0:5c: 80:7e:47:bd:ba:38:20:b8:47:c5:bd:59:b3:e2:d0: da:25:9e:54:79:55:1f:56:84:06:ba:14:0b:02:9c: dc:39:c8:89:f6:e6:21:2c:ce:08:43:7c:87:a3:7f: 1d:3b:01:ac:a5:de:6d:f7:74:13:3b:65:c9:10:8d: c3:0d:5f:42:ae:2d:81:c1:a4:2f:1a:90:e7:aa:82: 52:0e:10:0a:98:b4:9e:e1:66:4e:63:8a:f9:2e:8a: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151308 sbgp-ipAddrBlock: critical IPv4: 103.216.156.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:78:1f:34:c5:70:d3:84:d2:05:ab:30:3b:e5:75:39:4f:8b: b8:e7:be:09:46:8c:c9:7d:a9:56:5e:53:6a:25:54:05:b5:36: ba:e0:2f:53:af:e1:49:0b:77:79:cc:5f:70:0b:fb:ec:12:d1: 40:40:b1:c9:ff:7c:0e:bc:9f:3b:45:5f:e9:c1:37:27:d0:da: 87:1e:07:97:ad:ce:90:c0:c9:f6:da:37:8c:11:48:de:33:39: b6:ca:5e:36:85:fc:fb:59:e2:ae:3f:51:11:4f:40:db:27:d0: 4c:81:9f:0a:27:88:db:3f:34:13:5d:f0:86:13:20:aa:d1:f8: 6d:e9:f1:81:e3:b1:a6:34:74:da:e0:f7:99:98:71:25:18:82: 77:9a:c0:f2:c7:cb:39:1a:45:de:bd:2c:40:07:c7:32:69:f0: 66:ba:79:f8:bf:86:a0:93:6e:ff:f5:c7:fe:1b:10:b3:3b:1a: f0:29:2c:9d:79:8d:18:47:b8:c7:54:aa:f4:68:9e:29:0e:ca: f0:a9:c1:d3:e6:2e:24:b6:e8:33:7c:95:54:b8:72:6e:ea:b2: a1:2d:86:9f:70:cc:db:6a:d6:14:9d:17:05:e4:e8:00:0c:bb: bd:ba:01:a2:ee:a0:20:54:d2:1e:53:33:78:d4:45:49:df:f7: 7b:cd:ba:4b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAK7xMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIxNTVaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKEZEMTcyQjA5Mjc1NThEQjdBRThBREUzQjRGNURENDlFREI0NUI1 ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxz9bP46w2dvXvt4tu RylyM+jaiIDNUXpLl64pDpcwLtq77HMsFOSOUiiAXThmIOu69QEFOGPfZpTKEsIZ OVmWYN//4sWIlj7qyOS1vxYgP8+ej8zfPOY+Zcm/lPcRn07bz4oxVjzHAo3O1uco 73weWpCdkD3t2S4si952IVnl6a3naYAwCR2GRx/X2uFe3aIHkgdNLxbhVJiiaeGw SEZLegmwXIB+R726OCC4R8W9WbPi0NolnlR5VR9WhAa6FAsCnNw5yIn25iEszghD fIejfx07Aayl3m33dBM7ZckQjcMNX0KuLYHBpC8akOeqglIOEAqYtJ7hZk5jivku ikHLAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU/RcrCSdVjbeuit47T13UnttFtYIw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MzYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIzNi9fUmNyQ1NkVmpiZXVpdDQ3VDEzVW50dEZ0WUkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJPDDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfYnDANBgkqhkiG9w0BAQsFAAOCAQEAO3gfNMVw04TSBaswO+V1 OU+LuOe+CUaMyX2pVl5TaiVUBbU2uuAvU6/hSQt3ecxfcAv77BLRQECxyf98Dryf O0Vf6cE3J9Dahx4Hl63OkMDJ9to3jBFI3jM5tspeNoX8+1nirj9REU9A2yfQTIGf CieI2z80E13whhMgqtH4benxgeOxpjR02uD3mZhxJRiCd5rA8sfLORpF3r0sQAfH MmnwZrp5+L+GoJNu//XH/hsQszsa8CksnXmNGEe4x1Sq9GieKQ7K8KnB0+YuJLbo M3yVVLhybuqyoS2Gn3DM22rWFJ0XBeToAAy7vboBou6gIFTSHlMzeNRFSd/3e826 Sw== -----END CERTIFICATE-----Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org