$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.cer File: cWhuC8YzZ_GWeISrs_G3FDUd7SQ.cer (raw, json) Hash identifier: CoYY4xXpMWXat0kG0qP+qqj4QRoOssv3mP/3UNmFu4g= Subject key identifier: 71:68:6E:0B:C6:33:67:F1:96:78:84:AB:B3:F1:B7:14:35:1D:ED:24 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:54:08 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 160.22.148.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 04:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14291 (0x37d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:54:08 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=71686E0BC63367F1967884ABB3F1B714351DED24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:0f:09:c8:69:34:4e:ec:34:24:5d:0f:b1: d2:b2:84:46:2c:46:b3:fd:23:89:f9:c3:86:0d:af: da:8b:df:8c:bc:c9:e3:3c:bb:29:58:09:1e:7c:46: db:7e:59:77:f0:7a:37:87:4f:18:08:58:1f:98:58: 9e:f4:64:30:25:a4:23:18:3d:3c:18:c4:57:a8:0f: 7b:7c:7d:ed:b9:e4:0b:55:73:92:33:a8:43:22:bf: 40:db:13:93:c4:40:dc:1f:d9:e6:38:6c:5b:23:62: 5d:84:73:a0:78:df:13:0c:6d:0a:1e:99:7b:42:ca: 43:82:24:8e:a7:c8:7f:d2:3b:4d:a3:36:d3:eb:3d: 2b:56:0a:7b:c9:ba:92:9d:18:75:09:26:89:01:ff: 55:0d:81:63:b2:c7:22:41:b5:cb:61:22:3b:ff:5b: a6:8c:57:4c:05:0e:bd:36:12:ad:45:f7:ee:2c:0e: aa:c5:af:b3:8b:3f:be:7c:f5:1c:4a:26:44:6c:65: c1:d2:17:6f:ec:8d:aa:ed:0f:11:a1:4f:c8:93:e5: 6b:4b:a8:2c:41:d4:19:35:81:b6:a6:b6:b3:f6:82: 17:56:36:ee:bc:04:6e:91:07:eb:5e:0d:ff:05:2b: 20:a3:7e:e4:3f:a7:08:c6:a3:cf:80:fb:61:d5:19: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:6E:0B:C6:33:67:F1:96:78:84:AB:B3:F1:B7:14:35:1D:ED:24 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/cWhuC8YzZ_GWeISrs_G3FDUd7SQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.22.148.0/23 Signature Algorithm: sha256WithRSAEncryption 58:18:40:a9:3f:ac:89:ed:35:f4:f8:20:91:cc:f6:a4:0f:e5: d4:69:53:15:3f:e7:8c:43:27:cb:24:a8:db:1d:aa:08:f3:53: 80:76:2e:8e:d6:fb:c4:ac:d8:9a:2b:1d:2b:b3:1c:d9:69:78: 31:b2:06:e6:69:a0:58:5f:d2:99:a5:78:37:89:d4:96:fc:26: 7b:d9:bd:c4:ae:7d:24:3d:86:b2:73:74:ce:8f:b3:76:44:26: c1:cd:c6:d0:a5:41:0a:85:3d:4d:21:b4:b2:ad:f9:80:a2:6b: 7e:e7:db:fa:7e:d3:50:2b:58:f6:4b:aa:e3:b7:af:b5:95:ac: 55:cc:7d:1a:dc:69:3d:73:f1:75:55:6a:85:4e:ee:f1:9d:dc: 31:95:77:3c:f6:3d:55:80:56:58:a5:72:60:be:3d:3d:32:cb: b3:98:02:6a:f5:be:82:d2:a1:0f:72:bd:da:43:2f:a1:d5:92: 25:5a:cd:ad:30:62:5c:a7:1a:2f:ed:79:a7:4f:94:e5:26:ce: 1a:2e:f4:a2:f0:b0:71:d9:19:d8:57:95:d0:68:d0:23:83:ad: 63:15:fe:a6:2a:65:e9:5c:5e:de:1e:4b:06:d5:59:f1:dc:27: ac:f0:d5:8f:29:57:04:b5:fa:e6:7f:46:6f:fa:77:83:fe:aa: 2c:0b:ea:33 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN9MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTQwOFoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoNzE2ODZFMEJDNjMzNjdGMTk2Nzg4NEFCQjNGMUI3MTQzNTFERUQy NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMaMDwnIaTRO7DQkXQ+x 0rKERixGs/0jifnDhg2v2ovfjLzJ4zy7KVgJHnxG235Zd/B6N4dPGAhYH5hYnvRk MCWkIxg9PBjEV6gPe3x97bnkC1VzkjOoQyK/QNsTk8RA3B/Z5jhsWyNiXYRzoHjf EwxtCh6Ze0LKQ4IkjqfIf9I7TaM20+s9K1YKe8m6kp0YdQkmiQH/VQ2BY7LHIkG1 y2EiO/9bpoxXTAUOvTYSrUX37iwOqsWvs4s/vnz1HEomRGxlwdIXb+yNqu0PEaFP yJPla0uoLEHUGTWBtqa2s/aCF1Y27rwEbpEH614N/wUrIKN+5D+nCMajz4D7YdUZ /z8CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRxaG4LxjNn8ZZ4hKuz8bcUNR3tJDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjkyL2NXaHVDOFl6Wl9HV2VJU3JzX0czRkRVZDdTUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgFpQwDQYJKoZIhvcNAQELBQAD ggEBAFgYQKk/rIntNfT4IJHM9qQP5dRpUxU/54xDJ8skqNsdqgjzU4B2Lo7W+8Ss 2JorHSuzHNlpeDGyBuZpoFhf0pmleDeJ1Jb8JnvZvcSufSQ9hrJzdM6Ps3ZEJsHN xtClQQqFPU0htLKt+YCia37n2/p+01ArWPZLquO3r7WVrFXMfRrcaT1z8XVVaoVO 7vGd3DGVdzz2PVWAVlilcmC+PT0yy7OYAmr1voLSoQ9yvdpDL6HVkiVaza0wYlyn Gi/teadPlOUmzhou9KLwsHHZGdhXldBo0CODrWMV/qYqZelcXt4eSwbVWfHcJ6zw 1Y8pVwS1+uZ/Rm/6d4P+qiwL6jM= -----END CERTIFICATE-----Generated at Sat Nov 23 01:55:11 2024 by rpki-client on console-ams.rpki-client.org