$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/d8dGei7gNDZsV_rH8mea6-bWobo.cer File: d8dGei7gNDZsV_rH8mea6-bWobo.cer (raw, json) Hash identifier: r2OH7r0RiWeIEQxUyuHDLnuYylHxQD7F2V6rhpYGCF8= Subject key identifier: 77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BABF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:48:56 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 2401:afa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47807 (0xbabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:48:56 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=77C7467A2EE034366C57FAC7F2679AEBE6D6A1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:62:77:39:a1:52:26:f8:6a:33:d0:de:d8: fb:4f:01:b4:e6:9c:ad:2c:cb:8c:bb:9e:05:07:4b: 1a:85:83:bb:d1:1f:a8:0c:5a:51:48:fe:0f:d6:ed: 6b:18:d1:e2:6a:95:40:39:73:8a:a9:6d:fd:ab:d3: 54:15:88:c6:2b:35:6d:af:5e:7e:43:eb:61:a2:52: 12:be:ba:7e:66:34:af:2c:da:c7:b0:ac:d4:85:e0: 88:bb:a9:f5:b4:81:48:3e:d3:e7:3d:a6:4b:c2:8f: 06:8c:49:e9:66:46:2c:33:5f:44:30:95:7a:3c:b8: 1e:62:02:cf:0e:87:c6:d1:6d:c9:64:1e:af:28:15: eb:f3:73:9c:87:fc:25:8e:e2:93:79:3c:e3:47:c8: 5b:98:94:1e:48:d5:c8:77:1c:c4:e5:f4:dd:e5:0c: 24:c1:64:27:f9:82:a0:d3:ec:57:43:8d:cb:b0:d6: 53:13:77:0f:b6:15:f2:b3:90:b2:37:55:02:75:0b: 66:69:3b:a2:a7:7f:ce:2f:89:11:14:67:27:07:20: 0a:d9:24:2a:49:ed:d1:c7:e9:e0:52:66:7a:ba:8a: 11:c1:7b:cf:b0:be:19:fb:39:29:07:bc:54:c9:ed: 54:df:ae:45:70:33:bf:43:de:d8:26:5f:51:16:ad: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:afa0::/32 Signature Algorithm: sha256WithRSAEncryption a9:3e:76:1f:87:85:5c:c3:31:c3:64:1e:d0:02:af:ea:84:51: df:0c:58:27:b5:ea:a3:44:eb:3c:c0:e6:d1:62:1c:52:08:9a: c8:a3:8f:b0:0f:b9:d0:27:ed:3a:f4:e7:4c:c2:b6:63:64:d0: 65:7c:cd:82:e9:1e:c8:f3:08:e6:72:ca:b3:d3:59:18:63:de: af:02:58:cb:55:9d:4a:ff:ad:e7:e7:4d:a7:bc:d4:e5:46:83: a6:7d:a0:6f:0f:41:58:15:52:42:84:6d:ed:ad:1f:38:b6:e9: 8b:a8:95:c2:cd:68:77:2c:e8:af:e2:29:69:34:53:98:bb:e5: c0:42:b7:98:13:7e:5b:0d:79:f1:62:fc:cc:75:3f:58:3d:1e: c3:e5:73:9b:e4:83:f0:c6:e3:25:28:f1:06:0d:39:ee:20:a4: 80:2f:3b:92:03:e5:e4:b8:f1:af:5e:3c:0b:e0:96:e4:7e:65: 4f:b1:4d:ce:2c:48:dc:b7:31:9f:e1:76:79:77:73:b0:69:e5: 7c:9a:a5:c9:c5:85:64:be:0c:0d:44:5c:fa:0a:39:d1:2b:dc: 4b:87:da:dd:f6:7c:b1:eb:1e:1e:46:0a:d0:2c:5c:e9:9e:48: 74:f7:97:53:0f:f1:26:e3:d4:3f:a4:68:62:f3:df:d4:dc:48: 7c:a2:c3:b6 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALq/MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ4NTZaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDc3Qzc0NjdBMkVFMDM0MzY2QzU3RkFDN0YyNjc5QUVCRTZENkEx QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtY2J3OaFSJvhqM9De 2PtPAbTmnK0sy4y7ngUHSxqFg7vRH6gMWlFI/g/W7WsY0eJqlUA5c4qpbf2r01QV iMYrNW2vXn5D62GiUhK+un5mNK8s2sewrNSF4Ii7qfW0gUg+0+c9pkvCjwaMSelm RiwzX0QwlXo8uB5iAs8Oh8bRbclkHq8oFevzc5yH/CWO4pN5PONHyFuYlB5I1ch3 HMTl9N3lDCTBZCf5gqDT7FdDjcuw1lMTdw+2FfKzkLI3VQJ1C2ZpO6Knf84viREU ZycHIArZJCpJ7dHH6eBSZnq6ihHBe8+wvhn7OSkHvFTJ7VTfrkVwM79D3tgmX1EW rSnBAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUd8dGei7gNDZsV/rH8mea6+bWobow HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMwMS9kOGRHZWk3Z05EWnNWX3JIOG1lYTYtYldvYm8ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGvoDANBgkqhkiG9w0BAQsF AAOCAQEAqT52H4eFXMMxw2Qe0AKv6oRR3wxYJ7Xqo0TrPMDm0WIcUgiayKOPsA+5 0CftOvTnTMK2Y2TQZXzNgukeyPMI5nLKs9NZGGPerwJYy1WdSv+t5+dNp7zU5UaD pn2gbw9BWBVSQoRt7a0fOLbpi6iVws1odyzor+IpaTRTmLvlwEK3mBN+Ww158WL8 zHU/WD0ew+Vzm+SD8MbjJSjxBg057iCkgC87kgPl5Ljxr148C+CW5H5lT7FNzixI 3Lcxn+F2eXdzsGnlfJqlycWFZL4MDURc+go50SvcS4fa3fZ8seseHkYK0Cxc6Z5I dPeXUw/xJuPUP6RoYvPf1NxIfKLDtg== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:28 2024 by rpki-client on console-ams.rpki-client.org