$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer File: j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer (raw, json) Hash identifier: QWH6RPrNvPqz9LSnPOVG6ctAYGhtjP14d7nAGwaClSE= Subject key identifier: 8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BC6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:56:09 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 103.101.12.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48237 (0xbc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:56:09 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:d8:9e:8a:9c:9d:a8:52:4f:d9:03:3c:b5: 89:51:30:01:00:bf:96:e6:eb:74:88:ff:0b:4f:0f: 0a:4d:ec:a0:14:f7:91:51:a8:06:f0:56:95:c7:a2: 40:e0:f2:1b:99:1c:95:7a:2e:f4:78:13:f5:e5:33: 3f:96:47:d8:47:69:6a:4e:47:58:67:ff:f1:b5:53: 80:b6:49:05:86:f1:db:62:18:49:19:1c:10:8a:96: 3a:e3:cc:df:2e:2f:3c:f2:8f:c6:d0:9e:3c:43:e1: 2e:4b:4e:b8:df:03:0f:66:6d:2f:83:f0:cf:05:d2: 27:f9:0a:51:40:5a:82:45:53:53:3d:5e:2f:de:b3: 90:f3:57:a6:00:ba:b8:f4:86:c9:f7:c0:3e:02:3d: 6d:c0:69:e7:66:32:35:88:51:21:f4:59:b3:72:65: 3f:9c:00:94:60:8c:c5:39:7a:82:d2:5f:03:f9:ae: f4:d2:8e:ce:e9:77:41:0a:92:32:09:1b:2e:c3:87: 36:c0:64:06:f5:fe:4a:bc:fa:70:dc:83:0e:cd:92: c2:b0:04:c4:32:b9:fe:4d:93:a9:bc:7e:cd:66:b9: d6:49:38:ad:96:4d:9c:17:8c:82:a5:ee:9a:e6:30: a7:7b:44:3d:ab:fc:80:05:4f:39:07:4a:b7:9b:10: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.101.12.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:6b:45:61:38:8d:e7:2e:2f:ed:dd:e5:89:00:c3:7c:f9:57: 11:ca:33:fb:cc:46:2e:15:41:9b:9d:13:77:bd:7d:22:5b:8f: 44:08:1d:ec:c4:dd:db:0b:1b:01:57:fc:2c:2c:6a:6e:f3:e4: 40:0f:6e:c5:5b:92:c1:a2:0f:9a:6c:f7:10:fc:6e:9e:53:c0: ce:1f:c6:44:b6:37:1a:5e:8d:6f:cf:22:30:e3:4a:59:4c:9b: bf:f0:7e:7b:b5:cc:e7:c1:76:f5:a8:cb:a3:c8:52:68:b3:7c: 24:a7:b4:3f:b9:03:e5:9e:ba:2c:b5:3f:4d:7f:73:60:1c:62: f3:b5:1b:a7:21:57:ed:e5:98:5d:01:eb:90:b6:11:40:13:17: c9:61:08:f7:8b:13:6b:da:8a:9b:9d:ec:27:77:a7:57:de:6b: 92:63:86:2b:ce:16:44:3a:48:f5:d1:89:be:cb:ed:75:79:84: ec:51:66:52:b1:8e:c7:4d:de:03:1d:42:28:2f:2f:c8:bb:1e: 24:ea:a7:5b:69:de:38:8c:ff:78:80:62:2f:ac:4c:46:a9:9a: 3a:c9:51:b0:6f:05:17:fe:0e:6e:db:03:a5:83:53:74:18:f5: a1:35:25:1d:76:07:0d:a8:39:e2:5f:8a:e2:49:d7:0f:a3:62: 68:ab:2f:5b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDALxtMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU2MDlaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDhGQzZEM0QwQTA5REI1MkVBM0RFQzBEMjZGNTQ5RDVGMTFBQTM5 NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7NieipydqFJP2QM8 tYlRMAEAv5bm63SI/wtPDwpN7KAU95FRqAbwVpXHokDg8huZHJV6LvR4E/XlMz+W R9hHaWpOR1hn//G1U4C2SQWG8dtiGEkZHBCKljrjzN8uLzzyj8bQnjxD4S5LTrjf Aw9mbS+D8M8F0if5ClFAWoJFU1M9Xi/es5DzV6YAurj0hsn3wD4CPW3AaedmMjWI USH0WbNyZT+cAJRgjMU5eoLSXwP5rvTSjs7pd0EKkjIJGy7DhzbAZAb1/kq8+nDc gw7NksKwBMQyuf5Nk6m8fs1mudZJOK2WTZwXjIKl7prmMKd7RD2r/IAFTzkHSreb EGuLAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUj8bT0KCdtS6j3sDSb1SdXxGqOWMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 MDMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjYwMy9qOGJUMEtDZHRTNmozc0RTYjFTZFh4R3FPV00ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2UMMA0GCSqGSIb3DQEBCwUA A4IBAQB9a0VhOI3nLi/t3eWJAMN8+VcRyjP7zEYuFUGbnRN3vX0iW49ECB3sxN3b CxsBV/wsLGpu8+RAD27FW5LBog+abPcQ/G6eU8DOH8ZEtjcaXo1vzyIw40pZTJu/ 8H57tcznwXb1qMujyFJos3wkp7Q/uQPlnrostT9Nf3NgHGLztRunIVft5ZhdAeuQ thFAExfJYQj3ixNr2oqbnewnd6dX3muSY4YrzhZEOkj10Ym+y+11eYTsUWZSsY7H Td4DHUIoLy/Iux4k6qdbad44jP94gGIvrExGqZo6yVGwbwUX/g5u2wOlg1N0GPWh NSUddgcNqDniX4riSdcPo2Joqy9b -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:28 2024 by rpki-client on console-ams.rpki-client.org