$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bvKvdW1CN346rCRuOiHy_UtAf8U.cer File: bvKvdW1CN346rCRuOiHy_UtAf8U.cer (raw, json) Hash identifier: FPhBaMQtGrLnOhDy0yRsmSuq6j82SK/ewLnh2cdEO6E= Subject key identifier: 6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BAED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:49:36 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 137802 IP: 103.114.4.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47853 (0xbaed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:49:36 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6EF2AF756D42377E3AAC246E3A21F2FD4B407FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:62:31:6a:ec:e7:cb:21:11:85:db:83:7f: 3e:cf:b1:77:2e:40:35:78:13:fe:af:19:7c:6a:f7: 23:5e:c5:55:68:48:57:26:83:66:8a:35:1b:76:bd: 52:e1:0c:a5:2c:cb:fe:9e:71:1b:45:9a:c2:76:3d: 95:2a:8f:e7:b4:4d:0f:7a:a7:11:0f:5d:84:7c:69: 8e:59:30:86:2a:cc:7f:c1:ee:1a:e6:1a:a1:0e:9e: 86:e0:f8:50:11:76:46:bd:49:69:5a:2d:16:4d:85: 6e:c9:46:2c:7e:1c:d2:9d:f9:0f:60:89:2e:1d:fb: 4b:ce:2f:99:44:74:62:cc:e7:10:72:24:7c:1f:e9: 3f:44:e5:10:82:60:1e:d6:7e:bb:01:ba:ac:d0:22: 6e:53:fd:12:6c:6f:a2:82:a8:22:6f:83:47:05:40: 78:f4:af:38:f4:ce:e3:e1:4e:de:af:25:38:c1:ff: f5:f2:17:bd:2b:d6:f4:1c:7f:77:76:e7:6b:a0:f7: 25:ae:2f:b2:a4:14:db:a4:a7:f9:c3:77:77:42:97: 0c:da:29:29:f5:7d:46:15:ba:f4:85:f2:ba:36:18: f0:a3:a7:03:64:f2:a5:bc:88:9a:6f:28:49:20:8b: f8:72:50:66:5f:b8:41:c7:ff:22:03:7d:6b:39:75: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137802 sbgp-ipAddrBlock: critical IPv4: 103.114.4.0/22 Signature Algorithm: sha256WithRSAEncryption 45:38:0b:36:b8:86:ca:8e:1c:97:f5:07:d4:a7:e8:a8:85:c1: 9f:26:52:5e:54:e5:3e:cf:20:24:fb:4c:ea:e9:78:a5:10:0c: fd:86:24:ae:d9:89:eb:a9:e2:e1:9e:de:c5:2b:db:6b:3c:36: c7:d8:17:ae:f0:57:fa:2e:ca:f2:4a:7d:7e:67:30:cd:16:06: 26:83:05:d0:43:fc:ab:c1:c6:f0:a4:d9:66:63:eb:45:86:f7: 0d:8e:4b:c3:cd:42:ea:a0:6a:08:a7:69:df:2f:04:36:13:8a: 89:35:35:4f:9e:09:7e:55:8d:58:91:19:83:20:0c:87:2c:c6: dd:4e:b3:98:9f:d7:c3:ad:a5:46:b2:94:f4:39:3c:af:d7:5a: 37:2f:7d:20:6a:83:29:09:3d:c5:4f:60:a8:2f:6a:81:35:23: da:1d:34:ec:18:ee:cf:d7:9e:e5:0a:0b:92:2f:df:96:ad:5a: 3f:01:3f:29:ca:c8:e7:c6:a3:0d:c3:1f:77:d1:e0:aa:9c:82: 1a:b7:15:a3:70:95:64:8c:55:be:31:b9:48:6f:38:f1:4c:51: b7:7f:37:0c:e0:39:f7:33:c8:e6:98:18:5c:56:6c:cb:1a:c8: 6d:94:44:4d:c9:ca:cb:2c:51:87:bc:56:7e:9a:65:16:25:f7: 9c:e2:45:91 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDALrtMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ5MzZaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDZFRjJBRjc1NkQ0MjM3N0UzQUFDMjQ2RTNBMjFGMkZENEI0MDdG QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFmIxauznyyERhduD fz7PsXcuQDV4E/6vGXxq9yNexVVoSFcmg2aKNRt2vVLhDKUsy/6ecRtFmsJ2PZUq j+e0TQ96pxEPXYR8aY5ZMIYqzH/B7hrmGqEOnobg+FARdka9SWlaLRZNhW7JRix+ HNKd+Q9giS4d+0vOL5lEdGLM5xByJHwf6T9E5RCCYB7WfrsBuqzQIm5T/RJsb6KC qCJvg0cFQHj0rzj0zuPhTt6vJTjB//XyF70r1vQcf3d252ug9yWuL7KkFNukp/nD d3dClwzaKSn1fUYVuvSF8ro2GPCjpwNk8qW8iJpvKEkgi/hyUGZfuEHH/yIDfWs5 dThZAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUbvKvdW1CN346rCRuOiHy/UtAf8Uw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 MTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjcxMy9idkt2ZFcxQ04zNDZyQ1J1T2lIeV9VdEFmOFUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaSjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdyBDANBgkqhkiG9w0BAQsFAAOCAQEARTgLNriGyo4cl/UH1Kfo qIXBnyZSXlTlPs8gJPtM6ul4pRAM/YYkrtmJ66ni4Z7exSvbazw2x9gXrvBX+i7K 8kp9fmcwzRYGJoMF0EP8q8HG8KTZZmPrRYb3DY5Lw81C6qBqCKdp3y8ENhOKiTU1 T54JflWNWJEZgyAMhyzG3U6zmJ/Xw62lRrKU9Dk8r9daNy99IGqDKQk9xU9gqC9q gTUj2h007Bjuz9ee5QoLki/flq1aPwE/KcrI58ajDcMfd9HgqpyCGrcVo3CVZIxV vjG5SG848UxRt383DOA59zPI5pgYXFZsyxrIbZRETcnKyyxRh7xWfpplFiX3nOJF kQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:27 2024 by rpki-client on console-fra.rpki-client.org