$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bg7MO7fHsBvgmhGJ-9IjV551o58.cer File: bg7MO7fHsBvgmhGJ-9IjV551o58.cer (raw, json) Hash identifier: fslwOeoN2Gw3XZWZl+5ZFsFDX5k7XCUZB3o1Bgq05dU= Subject key identifier: 6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:54:29 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 132019 IP: 103.69.116.0/22 IP: 2405:f580::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48173 (0xbc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:54:29 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6E0ECC3BB7C7B01BE09A1189FBD223579E75A39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:7c:31:26:b3:3a:0a:6a:a5:af:f3:a7:f8: 21:4f:4d:54:47:d7:0b:ee:77:7c:56:64:06:26:3f: 54:66:60:05:e5:cb:8e:f8:61:5b:66:b0:b5:cb:0d: e6:fc:6a:a1:bf:f4:63:53:45:ee:12:b7:41:34:a1: af:f6:17:fc:fd:26:4b:f6:23:fa:51:f2:e5:f5:50: 3c:f6:2f:44:8d:bb:f3:45:b3:7a:2e:58:cd:74:40: 71:e8:7e:c9:83:96:06:d1:c6:94:d4:84:18:9f:fb: 51:60:7c:63:0b:1a:ab:a8:78:e2:40:d8:38:00:44: 23:eb:a6:bf:65:c4:11:fb:36:bc:e4:78:98:10:38: 41:df:bb:d6:d2:1e:79:79:39:c7:51:6f:61:62:79: 24:ed:1f:b2:ef:c8:f1:fd:f7:62:64:1d:47:fd:d4: 30:d9:d6:58:a1:04:fc:5a:5c:1b:50:af:78:92:98: 6e:07:34:ea:d1:57:4a:d6:51:2f:71:88:e6:27:39: ab:54:23:7e:f8:27:97:16:0a:08:98:9a:6c:89:df: f4:15:ad:9b:ad:0d:27:b8:49:82:81:cf:fd:5a:c6: 98:37:4b:e2:d2:0b:36:b2:5f:6e:d0:44:4b:98:b0: 3d:f9:6c:d3:1c:78:85:a0:d8:bd:1e:5e:2f:cc:39: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132019 sbgp-ipAddrBlock: critical IPv4: 103.69.116.0/22 IPv6: 2405:f580::/32 Signature Algorithm: sha256WithRSAEncryption 56:b1:b3:bf:2e:07:81:3d:9c:61:95:51:da:7d:7a:75:39:aa: 44:b8:f5:52:04:50:26:11:b9:2f:b8:21:b9:27:b9:0c:b0:34: c4:10:96:12:7a:56:6c:81:18:9a:f6:44:35:a4:aa:74:f8:8a: 74:07:83:76:f2:b3:54:86:ad:2e:f3:e2:9c:ea:ea:d3:22:65: 44:e5:f7:01:0d:63:1f:09:dc:6a:f5:cf:f4:9f:92:b5:44:9c: f7:84:38:87:9d:8a:2b:ac:12:1d:65:c3:78:5a:aa:16:b8:6f: e1:51:fa:10:18:77:7c:38:c8:88:6c:ea:ae:79:66:ed:bf:8e: 2f:02:de:43:fc:64:05:e8:83:40:48:3e:c0:ef:84:f8:2d:20: b8:08:d7:42:f8:13:31:37:24:b0:7b:2a:ca:33:8d:ad:b4:c0: 19:2a:fc:49:4d:d6:be:ed:c7:fa:0c:4f:57:87:84:dd:6d:b5: ff:44:38:bf:51:50:6f:a7:8e:49:fd:1f:66:54:07:c1:fb:2e: 84:ce:4c:60:c4:b3:b0:9c:3e:cd:9c:b8:76:a1:01:86:5c:09: 2a:2d:4d:b9:24:6e:a9:9f:2a:13:07:71:dd:27:60:73:d8:07: 84:38:62:2e:46:38:16:37:2d:9f:0d:96:9f:0c:bc:34:84:4a: a8:51:7c:af -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDALwtMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU0MjlaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDZFMEVDQzNCQjdDN0IwMUJFMDlBMTE4OUZCRDIyMzU3OUU3NUEz OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwXwxJrM6Cmqlr/On +CFPTVRH1wvud3xWZAYmP1RmYAXly474YVtmsLXLDeb8aqG/9GNTRe4St0E0oa/2 F/z9Jkv2I/pR8uX1UDz2L0SNu/NFs3ouWM10QHHofsmDlgbRxpTUhBif+1FgfGML GquoeOJA2DgARCPrpr9lxBH7NrzkeJgQOEHfu9bSHnl5OcdRb2FieSTtH7LvyPH9 92JkHUf91DDZ1lihBPxaXBtQr3iSmG4HNOrRV0rWUS9xiOYnOatUI374J5cWCgiY mmyJ3/QVrZutDSe4SYKBz/1axpg3S+LSCzayX27QREuYsD35bNMceIWg2L0eXi/M OerLAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUbg7MO7fHsBvgmhGJ+9IjV551o58w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4 MTUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjgxNS9iZzdNTzdmSHNCdmdtaEdKLTlJalY1NTFvNTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIDszAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdFdDANBAIAAjAHAwUAJAX1gDANBgkqhkiG9w0BAQsFAAOCAQEA VrGzvy4HgT2cYZVR2n16dTmqRLj1UgRQJhG5L7ghuSe5DLA0xBCWEnpWbIEYmvZE NaSqdPiKdAeDdvKzVIatLvPinOrq0yJlROX3AQ1jHwncavXP9J+StUSc94Q4h52K K6wSHWXDeFqqFrhv4VH6EBh3fDjIiGzqrnlm7b+OLwLeQ/xkBeiDQEg+wO+E+C0g uAjXQvgTMTcksHsqyjONrbTAGSr8SU3Wvu3H+gxPV4eE3W21/0Q4v1FQb6eOSf0f ZlQHwfsuhM5MYMSzsJw+zZy4dqEBhlwJKi1NuSRuqZ8qEwdx3Sdgc9gHhDhiLkY4 Fjctnw2Wnwy8NIRKqFF8rw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:28 2024 by rpki-client on console-ams.rpki-client.org