$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.cer File: j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.cer (raw, json) Hash identifier: P0vNga642CB5cE+K4AMpcT65MXOj5GeVBszuMkPR91s= Subject key identifier: 8F:E6:00:FF:63:5D:F4:C3:55:18:19:CE:CD:16:48:26:EA:16:65:94 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 3A0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 02 Jan 2025 02:25:38 +0000 Certificate not after: Fri 02 Jan 2026 02:11:12 +0000 Subordinate resources: IP: 161.248.84.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 21:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14859 (0x3a0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000 Validity Not Before: Jan 2 02:25:38 2025 GMT Not After : Jan 2 02:11:12 2026 GMT Subject: CN=8FE600FF635DF4C3551819CECD164826EA166594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:01:77:83:f9:b9:22:a4:d5:ea:bf:5a:2c: 5c:38:63:35:e9:f0:ad:e6:4c:3d:e6:4b:dc:b4:96: 67:3a:70:f3:61:41:3b:30:1e:94:b8:59:23:68:ba: cc:65:a3:34:f8:f0:a3:0e:25:e7:17:81:9d:28:26: 00:97:b0:01:33:cd:12:56:d2:5f:84:a9:2f:41:1c: 4e:af:3c:e8:38:83:0f:26:12:29:12:55:50:6c:74: da:13:3d:1a:78:3c:16:a8:64:ad:af:9f:be:3b:83: 65:a8:18:60:18:a7:fe:1c:92:cf:81:e1:4f:2a:39: 8e:5b:b4:7b:ad:0f:ce:9b:ac:fd:bb:ee:b0:76:ac: f5:47:39:9f:57:61:c5:1d:cd:64:bf:2b:57:2d:14: c3:86:77:ab:bc:4e:6c:18:9c:b3:f1:b6:b2:a4:26: c1:c0:53:53:ec:4e:71:a9:ec:02:05:ab:26:2b:c1: 1a:72:52:21:f0:c6:74:7a:55:1a:d3:40:c6:85:bd: 8a:18:fe:4d:94:fd:bf:51:1e:b2:42:10:90:87:09: 84:fa:96:db:ff:e5:b7:05:bc:a9:5f:b9:59:72:8a: fe:2e:44:ce:6f:fa:08:c5:5d:38:27:ae:ed:70:18: 50:6e:95:b8:f4:e2:a9:bc:6e:47:dc:c6:fc:07:e4: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E6:00:FF:63:5D:F4:C3:55:18:19:CE:CD:16:48:26:EA:16:65:94 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/j-YA_2Nd9MNVGBnOzRZIJuoWZZQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.84.0/23 Signature Algorithm: sha256WithRSAEncryption 98:15:4b:c5:c8:f4:16:43:e1:f9:e5:b3:67:4e:67:3e:44:f0: aa:ea:6d:dc:29:2a:b0:34:9e:2b:0d:61:60:05:58:59:97:2e: bb:2d:d3:96:d6:37:11:68:c7:b3:a7:a6:4e:fb:3f:1a:ba:60: 0d:35:6c:d8:b7:66:e2:e2:cc:24:9b:99:93:e6:22:c0:b2:ac: d3:ff:e4:30:45:39:d8:2d:ef:60:db:0b:b4:a2:1f:42:7a:f6: e2:c6:c0:f3:ff:eb:67:b9:ec:ff:fe:3a:79:31:3e:17:c4:a4: 8c:60:86:fa:f0:ef:0e:af:ef:e8:ae:0c:bd:9a:1d:74:74:16: 33:3b:fd:3d:a3:4a:2e:8d:08:26:77:f1:ad:39:35:19:18:7b: 2f:c1:0b:11:ef:7d:54:60:a3:a0:44:6d:7c:3f:c8:9b:bd:b8: 96:68:8c:90:20:93:e1:55:eb:d9:41:48:7c:4c:43:82:77:f9: bb:d9:40:66:10:c7:05:e6:4d:9a:9b:2b:b1:27:84:a1:a0:0e: e6:32:18:44:4d:0b:91:a7:e5:db:2c:c0:a0:ef:3a:d9:6a:39: 30:6e:a6:55:67:4b:15:6b:4d:c8:af:71:42:58:3e:97:95:17: b2:8f:03:ba:15:78:c5:74:63:d3:f5:df:b5:ca:1f:5a:f9:61: a0:a0:a8:99 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICOgswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MDEwMjAyMjUzOFoXDTI2MDEwMjAyMTExMlowMzEx MC8GA1UEAxMoOEZFNjAwRkY2MzVERjRDMzU1MTgxOUNFQ0QxNjQ4MjZFQTE2NjU5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbtAXeD+bkipNXqv1os XDhjNenwreZMPeZL3LSWZzpw82FBOzAelLhZI2i6zGWjNPjwow4l5xeBnSgmAJew ATPNElbSX4SpL0EcTq886DiDDyYSKRJVUGx02hM9Gng8Fqhkra+fvjuDZagYYBin /hySz4HhTyo5jlu0e60Pzpus/bvusHas9Uc5n1dhxR3NZL8rVy0Uw4Z3q7xObBic s/G2sqQmwcBTU+xOcansAgWrJivBGnJSIfDGdHpVGtNAxoW9ihj+TZT9v1EeskIQ kIcJhPqW2//ltwW8qV+5WXKK/i5Ezm/6CMVdOCeu7XAYUG6VuPTiqbxuR9zG/Afk +MUCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSP5gD/Y130w1UYGc7NFkgm6hZllDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzQ1L2otWUFfMk5kOU1OVkdCbk96UlpJSnVvV1paUS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGh+FQwDQYJKoZIhvcNAQELBQAD ggEBAJgVS8XI9BZD4fnls2dOZz5E8KrqbdwpKrA0nisNYWAFWFmXLrst05bWNxFo x7Onpk77Pxq6YA01bNi3ZuLizCSbmZPmIsCyrNP/5DBFOdgt72DbC7SiH0J69uLG wPP/62e57P/+OnkxPhfEpIxghvrw7w6v7+iuDL2aHXR0FjM7/T2jSi6NCCZ38a05 NRkYey/BCxHvfVRgo6BEbXw/yJu9uJZojJAgk+FV69lBSHxMQ4J3+bvZQGYQxwXm TZqbK7EnhKGgDuYyGERNC5Gn5dsswKDvOtlqOTBuplVnSxVrTcivcUJYPpeVF7KP A7oVeMV0Y9P137XKH1r5YaCgqJk= -----END CERTIFICATE-----Generated at Wed Feb 19 20:37:18 2025 by rpki-client