$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ezVr3CpINR6PFgi1tMbsZ4uUGHE.cer File: ezVr3CpINR6PFgi1tMbsZ4uUGHE.cer (raw, json) Hash identifier: cvYwmU4qZISDbMeQpb4IU/Q0JfEzWAahRVHjffstMc0= Subject key identifier: 7B:35:6B:DC:2A:48:35:1E:8F:16:08:B5:B4:C6:EC:67:8B:94:18:71 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/ezVr3CpINR6PFgi1tMbsZ4uUGHE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:54:13 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 151220 IP: 2401:aba0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48157 (0xbc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:54:13 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7B356BDC2A48351E8F1608B5B4C6EC678B941871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:15:3c:81:8b:7e:a0:0d:7d:10:19:ae:be:c5: 60:e7:bd:6c:30:49:c9:24:d0:48:05:01:63:30:40: 8a:d4:9b:8a:fb:15:ad:db:95:a6:ab:58:ff:57:88: 5a:18:b3:f3:0d:29:fd:50:7f:f4:2b:4a:43:95:82: 4f:a4:10:26:79:f9:4f:65:d5:1f:86:54:6c:73:26: 3f:fe:1d:a4:69:df:6c:da:43:1a:7b:53:39:0d:c4: c5:ea:77:35:6b:fe:7e:36:f8:e4:0f:0f:b2:f0:bb: 4a:95:22:b9:cd:b8:4c:ca:7a:61:47:07:72:7f:03: 94:92:57:fd:d0:a8:c4:c4:9b:a9:c5:15:12:73:7e: d0:11:3f:24:fc:43:2f:2f:a6:28:97:62:79:d5:54: e9:a0:7e:ec:73:72:7c:d7:c5:aa:5f:4d:04:0e:2c: 9b:fb:d2:3e:76:69:03:47:ac:d1:f4:0c:3d:a7:1e: 5c:d9:d0:6e:5d:a1:3c:87:e1:da:28:d1:31:a9:60: c6:e3:e2:d3:ec:fd:f1:27:4f:bd:5c:36:7d:99:8b: 6f:ee:17:29:b7:33:9c:98:55:73:90:16:62:19:47: 76:4a:7e:08:08:be:79:4a:4a:f3:59:1e:f2:5c:2c: 10:32:f3:91:59:30:6b:a2:34:ec:81:94:72:8e:d0: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:35:6B:DC:2A:48:35:1E:8F:16:08:B5:B4:C6:EC:67:8B:94:18:71 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/ezVr3CpINR6PFgi1tMbsZ4uUGHE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151220 sbgp-ipAddrBlock: critical IPv6: 2401:aba0::/32 Signature Algorithm: sha256WithRSAEncryption 27:0a:c8:39:eb:bb:bc:6c:ee:6d:cb:0b:71:12:b3:5a:7f:05: 85:de:09:6a:ba:9b:c6:f3:15:60:50:f9:32:d7:eb:99:6a:60: e9:55:80:df:7e:29:ba:35:32:6d:79:e6:92:61:c8:30:1a:e1: 3e:b8:a1:51:b2:61:a1:c6:ed:25:96:09:91:f3:7e:3a:a1:1d: fb:13:cb:fa:86:d7:51:d9:65:c9:47:72:2a:59:7e:39:7a:36: 17:86:f5:e3:80:77:28:35:fd:89:d3:91:7e:2c:76:5e:e4:53: 25:d9:09:35:e6:09:57:2d:66:0a:bb:04:3a:9e:9f:a8:e5:54: af:4e:6a:34:18:f6:be:5d:17:3b:8b:a1:db:3e:16:16:18:44: 44:5a:52:ac:b8:ed:52:90:80:41:31:56:0d:cd:35:46:97:04: e6:c3:f6:69:a9:44:16:aa:78:4b:1e:1d:48:e1:fd:51:10:41: 03:6e:b9:60:42:2c:c6:35:df:f1:3d:3f:6a:1f:4f:42:dc:ba: 25:80:06:11:c7:b0:83:ac:38:5e:33:43:8a:6e:9e:53:52:b3: d8:5d:7d:c9:b2:3b:b8:4f:d6:49:75:47:8e:47:35:a8:17:5f: e1:40:d2:f9:d5:63:71:d9:55:fd:48:06:87:6c:e2:92:cd:28: 36:4e:6b:ba -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDALwdMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU0MTNaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDdCMzU2QkRDMkE0ODM1MUU4RjE2MDhCNUI0QzZFQzY3OEI5NDE4 NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtFTyBi36gDX0QGa6+ xWDnvWwwSckk0EgFAWMwQIrUm4r7Fa3blaarWP9XiFoYs/MNKf1Qf/QrSkOVgk+k ECZ5+U9l1R+GVGxzJj/+HaRp32zaQxp7UzkNxMXqdzVr/n42+OQPD7Lwu0qVIrnN uEzKemFHB3J/A5SSV/3QqMTEm6nFFRJzftARPyT8Qy8vpiiXYnnVVOmgfuxzcnzX xapfTQQOLJv70j52aQNHrNH0DD2nHlzZ0G5doTyH4doo0TGpYMbj4tPs/fEnT71c Nn2Zi2/uFym3M5yYVXOQFmIZR3ZKfggIvnlKSvNZHvJcLBAy85FZMGuiNOyBlHKO 0JtLAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUezVr3CpINR6PFgi1tMbsZ4uUGHEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy OTgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI5OC9lelZyM0NwSU5SNlBGZ2kxdE1ic1o0dVVHSEUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOtDAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBq6AwDQYJKoZIhvcNAQELBQADggEBACcKyDnru7xs7m3LC3ES s1p/BYXeCWq6m8bzFWBQ+TLX65lqYOlVgN9+Kbo1Mm155pJhyDAa4T64oVGyYaHG 7SWWCZHzfjqhHfsTy/qG11HZZclHcipZfjl6NheG9eOAdyg1/YnTkX4sdl7kUyXZ CTXmCVctZgq7BDqen6jlVK9OajQY9r5dFzuLods+FhYYRERaUqy47VKQgEExVg3N NUaXBObD9mmpRBaqeEseHUjh/VEQQQNuuWBCLMY13/E9P2ofT0LcuiWABhHHsIOs OF4zQ4punlNSs9hdfcmyO7hP1kl1R45HNagXX+FA0vnVY3HZVf1IBods4pLNKDZO a7o= -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:40 2024 by rpki-client on console-ams.rpki-client.org