$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fie0dMJw_8OVTclBg_bVRo8fV3Q.cer File: fie0dMJw_8OVTclBg_bVRo8fV3Q.cer (raw, json) Hash identifier: yX198/1j9/iqD+l8IXqePcrXy5fX5b/u1btfg8rSaYw= Subject key identifier: 7E:27:B4:74:C2:70:FF:C3:95:4D:C9:41:83:F6:D5:46:8F:1F:57:74 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3948 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/fie0dMJw_8OVTclBg_bVRo8fV3Q.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 28 Nov 2024 02:10:28 +0000 Certificate not after: Fri 28 Nov 2025 01:56:32 +0000 Subordinate resources: IP: 160.250.104.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 21:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14664 (0x3948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Nov 28 02:10:28 2024 GMT Not After : Nov 28 01:56:32 2025 GMT Subject: CN=7E27B474C270FFC3954DC94183F6D5468F1F5774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:24:77:96:27:a2:03:28:ab:b4:19:97:a5:af: 60:e7:b4:64:06:1d:c1:fb:b5:74:52:91:d9:d7:d7: 04:6d:e4:31:08:ee:7f:44:42:c6:a9:a9:ed:82:63: 78:c9:46:1f:7e:09:ca:c5:d1:f6:0b:2a:8d:5f:0d: 69:77:45:fb:c5:ce:05:44:51:d5:03:7e:b8:fc:9c: a0:dc:bf:27:ad:20:04:ca:2c:fe:75:82:87:e9:48: af:16:8a:6e:08:31:69:e1:dc:a8:77:62:c7:e9:cd: 8e:56:65:b8:e1:ba:7f:91:9a:bd:a9:35:0b:3b:e0: 33:2f:a2:e2:ea:46:f9:70:cd:22:45:63:20:de:fa: 3a:71:93:19:08:79:b4:f8:5d:20:74:b4:09:90:f2: 47:cc:e2:b1:8c:26:12:55:2a:0d:e6:e8:60:4f:3f: eb:eb:ba:1b:72:49:38:7b:c1:ec:02:8f:d8:21:ac: 01:4a:27:7d:84:65:58:0f:c4:e1:0a:33:c0:4b:7a: 16:dc:aa:b9:e5:b3:f8:13:b4:e6:dc:df:c9:fb:da: b1:16:15:04:39:8d:5b:d5:fa:d7:0f:92:b5:3b:6a: 9e:ad:61:81:55:92:6d:93:ae:8e:70:76:b3:6b:a8: a3:4b:6a:92:7f:98:e5:62:89:32:7e:e3:5c:07:7f: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:27:B4:74:C2:70:FF:C3:95:4D:C9:41:83:F6:D5:46:8F:1F:57:74 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/fie0dMJw_8OVTclBg_bVRo8fV3Q.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.250.104.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:66:3f:f9:4c:88:2c:a7:85:59:5a:ce:68:42:c7:a2:e1:59: cd:e9:52:78:af:a8:c6:f5:9e:87:4f:63:c1:17:04:2c:e6:0f: bf:83:89:cf:64:e2:ed:44:47:3b:59:b4:4c:8e:a9:13:fe:1b: ac:46:50:9c:f7:2b:3d:2c:6d:af:fb:4d:46:a2:16:d9:de:75: b1:94:06:d7:21:8f:0d:da:dc:2a:27:08:6e:9e:17:63:a5:34: 16:90:ed:d3:38:4f:e9:7c:de:73:7c:6b:49:27:24:1e:cc:d5: b7:6f:06:70:39:08:e8:2a:21:70:58:38:ce:d9:b4:be:ca:aa: 3f:0d:24:34:56:82:4c:3d:3e:c4:5c:41:a0:e4:af:23:c4:74: 2f:cd:01:82:b9:4b:d0:3c:ea:da:07:59:0a:ed:a3:4f:c8:d6: 5b:b0:ed:c0:c8:30:4f:02:f5:cc:2f:4d:f7:8c:7d:af:c6:78: 57:da:e0:7a:ba:85:4d:2b:d8:0d:3d:33:e6:c9:c3:d5:fd:a9: 6d:fb:b7:e6:4b:1e:a2:81:32:04:a6:cd:c5:05:99:59:35:27: ac:f5:45:8d:2c:35:9f:17:63:e7:25:8c:42:38:27:c2:ec:83: 3a:ac:6a:10:5b:fc:5c:84:31:19:55:db:ae:f5:ee:cd:60:1a: c9:aa:b1:78 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOUgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MTEyODAyMTAyOFoXDTI1MTEyODAxNTYzMlowMzEx MC8GA1UEAxMoN0UyN0I0NzRDMjcwRkZDMzk1NERDOTQxODNGNkQ1NDY4RjFGNTc3 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOwkd5YnogMoq7QZl6Wv YOe0ZAYdwfu1dFKR2dfXBG3kMQjuf0RCxqmp7YJjeMlGH34JysXR9gsqjV8NaXdF +8XOBURR1QN+uPycoNy/J60gBMos/nWCh+lIrxaKbggxaeHcqHdix+nNjlZluOG6 f5Gavak1CzvgMy+i4upG+XDNIkVjIN76OnGTGQh5tPhdIHS0CZDyR8zisYwmElUq DeboYE8/6+u6G3JJOHvB7AKP2CGsAUonfYRlWA/E4QozwEt6FtyqueWz+BO05tzf yfvasRYVBDmNW9X61w+StTtqnq1hgVWSbZOujnB2s2uoo0tqkn+Y5WKJMn7jXAd/ m7kCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR+J7R0wnD/w5VNyUGD9tVGjx9XdDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzMzL2ZpZTBkTUp3XzhPVlRjbEJnX2JWUm84ZlYzUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg+mgwDQYJKoZIhvcNAQELBQAD ggEBADxmP/lMiCynhVlazmhCx6LhWc3pUnivqMb1nodPY8EXBCzmD7+Dic9k4u1E RztZtEyOqRP+G6xGUJz3Kz0sba/7TUaiFtnedbGUBtchjw3a3ConCG6eF2OlNBaQ 7dM4T+l83nN8a0knJB7M1bdvBnA5COgqIXBYOM7ZtL7Kqj8NJDRWgkw9PsRcQaDk ryPEdC/NAYK5S9A86toHWQrto0/I1luw7cDIME8C9cwvTfeMfa/GeFfa4Hq6hU0r 2A09M+bJw9X9qW37t+ZLHqKBMgSmzcUFmVk1J6z1RY0sNZ8XY+cljEI4J8Lsgzqs ahBb/FyEMRlV26717s1gGsmqsXg= -----END CERTIFICATE-----Generated at Wed Feb 19 20:37:13 2025 by rpki-client