$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer File: j8bT0KCdtS6j3sDSb1SdXxGqOWM.cer (raw, json) Hash identifier: 9NxJSaZtysfw1BvrzIs7yVls6LN/xhZfYAbq+JuOass= Subject key identifier: 8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AF4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:23:37 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 103.101.12.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 05:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44875 (0xaf4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:23:37 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=8FC6D3D0A09DB52EA3DEC0D26F549D5F11AA3963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:d8:9e:8a:9c:9d:a8:52:4f:d9:03:3c:b5: 89:51:30:01:00:bf:96:e6:eb:74:88:ff:0b:4f:0f: 0a:4d:ec:a0:14:f7:91:51:a8:06:f0:56:95:c7:a2: 40:e0:f2:1b:99:1c:95:7a:2e:f4:78:13:f5:e5:33: 3f:96:47:d8:47:69:6a:4e:47:58:67:ff:f1:b5:53: 80:b6:49:05:86:f1:db:62:18:49:19:1c:10:8a:96: 3a:e3:cc:df:2e:2f:3c:f2:8f:c6:d0:9e:3c:43:e1: 2e:4b:4e:b8:df:03:0f:66:6d:2f:83:f0:cf:05:d2: 27:f9:0a:51:40:5a:82:45:53:53:3d:5e:2f:de:b3: 90:f3:57:a6:00:ba:b8:f4:86:c9:f7:c0:3e:02:3d: 6d:c0:69:e7:66:32:35:88:51:21:f4:59:b3:72:65: 3f:9c:00:94:60:8c:c5:39:7a:82:d2:5f:03:f9:ae: f4:d2:8e:ce:e9:77:41:0a:92:32:09:1b:2e:c3:87: 36:c0:64:06:f5:fe:4a:bc:fa:70:dc:83:0e:cd:92: c2:b0:04:c4:32:b9:fe:4d:93:a9:bc:7e:cd:66:b9: d6:49:38:ad:96:4d:9c:17:8c:82:a5:ee:9a:e6:30: a7:7b:44:3d:ab:fc:80:05:4f:39:07:4a:b7:9b:10: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C6:D3:D0:A0:9D:B5:2E:A3:DE:C0:D2:6F:54:9D:5F:11:AA:39:63 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/j8bT0KCdtS6j3sDSb1SdXxGqOWM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.101.12.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:cb:f5:37:f2:3c:ac:c3:39:de:67:5b:c4:a6:47:dd:49:97: 42:ab:44:e4:b0:4d:8f:c9:99:3a:b4:98:2d:20:ef:07:e2:a0: 62:32:f6:f9:02:36:10:68:9c:67:62:f4:bd:fe:87:51:13:b2: 8d:15:5b:3a:cc:2b:ef:7a:c2:eb:f1:fb:30:63:b0:18:1c:83: 19:46:7b:40:5c:21:d3:55:7b:1c:af:bf:69:7a:16:25:92:42: ea:b6:a0:4c:0d:02:4e:84:66:a4:5d:d7:ad:85:90:3e:8b:ea: c5:ac:9b:5b:58:88:c3:88:d8:0e:3a:04:35:75:85:05:c7:10: 1b:18:e3:cd:e3:81:e6:b5:50:07:d6:be:59:ce:7c:95:58:61: 2f:d0:1b:9c:ec:29:10:ae:41:a5:df:2f:e6:97:a8:1e:80:98: 31:b3:f7:0b:56:b5:7f:e8:f8:a1:af:e9:b1:11:5e:3e:fd:f9: d1:d2:7b:ae:28:1b:a9:2a:80:c3:02:16:ee:8a:21:85:05:e9: 9a:a7:32:d7:33:de:15:cf:5b:57:53:2f:1c:c9:4e:c4:00:7f: 37:f9:ce:a9:bb:1f:75:d1:2a:b4:26:2c:99:08:42:28:88:12: c0:bd:26:d9:0d:f7:c2:f3:bf:6d:5d:c7:26:52:12:e3:c3:14: e7:a4:ec:89 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAK9LMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIzMzdaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKDhGQzZEM0QwQTA5REI1MkVBM0RFQzBEMjZGNTQ5RDVGMTFBQTM5 NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7NieipydqFJP2QM8 tYlRMAEAv5bm63SI/wtPDwpN7KAU95FRqAbwVpXHokDg8huZHJV6LvR4E/XlMz+W R9hHaWpOR1hn//G1U4C2SQWG8dtiGEkZHBCKljrjzN8uLzzyj8bQnjxD4S5LTrjf Aw9mbS+D8M8F0if5ClFAWoJFU1M9Xi/es5DzV6YAurj0hsn3wD4CPW3AaedmMjWI USH0WbNyZT+cAJRgjMU5eoLSXwP5rvTSjs7pd0EKkjIJGy7DhzbAZAb1/kq8+nDc gw7NksKwBMQyuf5Nk6m8fs1mudZJOK2WTZwXjIKl7prmMKd7RD2r/IAFTzkHSreb EGuLAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUj8bT0KCdtS6j3sDSb1SdXxGqOWMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 MDMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjYwMy9qOGJUMEtDZHRTNmozc0RTYjFTZFh4R3FPV00ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2UMMA0GCSqGSIb3DQEBCwUA A4IBAQAdy/U38jyswzneZ1vEpkfdSZdCq0TksE2PyZk6tJgtIO8H4qBiMvb5AjYQ aJxnYvS9/odRE7KNFVs6zCvvesLr8fswY7AYHIMZRntAXCHTVXscr79pehYlkkLq tqBMDQJOhGakXdethZA+i+rFrJtbWIjDiNgOOgQ1dYUFxxAbGOPN44HmtVAH1r5Z znyVWGEv0Buc7CkQrkGl3y/ml6gegJgxs/cLVrV/6Pihr+mxEV4+/fnR0nuuKBup KoDDAhbuiiGFBemapzLXM94Vz1tXUy8cyU7EAH83+c6pux910Sq0JiyZCEIoiBLA vSbZDffC879tXccmUhLjwxTnpOyJ -----END CERTIFICATE-----Generated at Sun May 19 00:38:45 2024 by rpki-client on console-ams.rpki-client.org