$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer File: kOpMYj8LihBi2qgOqaj0R49Z3oU.cer (raw, json) Hash identifier: QBF6I0N1zkrJZ9qvaCvhNpzoKbdoV1ELylWBoW5NJsg= Subject key identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BE5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 18 Oct 2024 08:11:07 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 151225 IP: 2401:90a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48734 (0xbe5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 18 08:11:07 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:00:5c:6a:e8:b9:e6:7d:20:e0:a9:d6:e2: a3:17:09:2e:d2:25:3d:52:2f:8f:1d:f4:27:b7:cd: 35:a1:47:6b:c5:c5:68:3a:81:59:a3:5d:d1:f6:3d: 40:15:59:f4:c0:b0:61:d0:bb:cf:87:bf:89:e1:3d: 01:78:e2:b4:36:81:f1:b4:22:28:f7:da:c0:5f:dd: f7:8b:ca:d6:c8:85:2b:2d:fc:2e:29:12:f5:66:c2: 46:29:15:fa:83:88:25:48:e0:f4:de:bf:da:6b:29: cb:67:3b:c9:5b:01:ae:8e:58:8d:aa:5c:ac:c1:e8: cb:e9:bd:39:7c:7c:a0:72:39:e3:bb:b1:23:1b:ea: 1f:b6:d5:4c:e9:6a:de:eb:23:9c:0d:05:da:f7:64: 1f:6f:bb:85:76:15:14:23:f1:a9:e3:1d:0a:ca:c5: 9a:35:56:fb:7d:65:f5:93:6d:c6:61:0f:ac:af:95: 3f:9c:06:9c:76:63:7d:43:59:53:31:6d:32:ce:8e: fc:1f:8f:22:91:ee:7b:7f:40:d2:86:dd:1f:9e:77: 72:57:07:c1:ab:ca:28:7a:bc:4f:f1:d8:ad:a6:4e: 02:c7:8e:50:59:e0:ef:bc:54:ac:ab:0e:bd:72:26: 4b:91:a7:07:df:ae:74:f5:45:d4:d3:8f:29:b7:36: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151225 sbgp-ipAddrBlock: critical IPv6: 2401:90a0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:95:a0:a2:1e:3e:4b:94:6f:06:90:b8:2f:e7:01:16:3b:ad: bf:0a:57:00:c7:1f:75:b9:da:58:59:c8:ce:bc:22:7e:2a:28: 43:10:cd:f5:08:c7:2a:71:31:6e:92:08:68:3c:3a:0e:dc:9e: cd:85:99:9b:aa:5b:d8:a9:ac:5c:b5:a5:0c:6d:e7:79:0b:94: a0:53:5c:2e:be:20:4f:c7:0c:1c:ba:6d:72:a8:3f:9c:58:5c: d9:82:be:6c:ad:7b:cf:06:a8:82:da:04:aa:81:f6:d9:68:0c: 90:a7:c2:8b:72:83:15:1c:0a:c4:af:6d:2e:2d:e3:5d:20:fc: 66:f8:12:30:de:db:6c:44:41:8e:5f:8f:07:59:a2:7f:ea:7c: 71:db:44:94:14:9d:64:93:79:b6:62:6f:ca:8b:98:10:01:50: 11:34:86:0f:25:d4:34:e8:7d:a6:17:4f:75:d1:da:3d:25:ce: 35:b7:7f:46:5e:54:05:c9:b1:22:0e:cf:21:7c:bc:7b:50:d8: d0:89:3a:1e:3d:bb:9c:ab:60:63:55:a2:9b:22:10:86:1b:e6: 97:b4:e8:6d:66:67:1c:91:fb:a3:1c:90:8c:d0:8f:58:a9:a6: ca:1b:46:ca:86:e9:3f:e0:53:fd:a8:8c:62:0c:6f:f7:7b:6a: 7b:e9:f6:99 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDAL5eMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDEwMTgwODExMDdaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDkwRUE0QzYyM0YwQjhBMTA2MkRBQTgwRUE5QThGNDQ3OEY1OURF ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtgBcaui55n0g4KnW 4qMXCS7SJT1SL48d9Ce3zTWhR2vFxWg6gVmjXdH2PUAVWfTAsGHQu8+Hv4nhPQF4 4rQ2gfG0Iij32sBf3feLytbIhSst/C4pEvVmwkYpFfqDiCVI4PTev9prKctnO8lb Aa6OWI2qXKzB6MvpvTl8fKByOeO7sSMb6h+21Uzpat7rI5wNBdr3ZB9vu4V2FRQj 8anjHQrKxZo1Vvt9ZfWTbcZhD6yvlT+cBpx2Y31DWVMxbTLOjvwfjyKR7nt/QNKG 3R+ed3JXB8Gryih6vE/x2K2mTgLHjlBZ4O+8VKyrDr1yJkuRpwffrnT1RdTTjym3 NqdDAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUkOpMYj8LihBi2qgOqaj0R49Z3oUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NS9rT3BNWWo4TGloQmkycWdPcWFqMFI0OVozb1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOuTAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBkKAwDQYJKoZIhvcNAQELBQADggEBADuVoKIePkuUbwaQuC/n ARY7rb8KVwDHH3W52lhZyM68In4qKEMQzfUIxypxMW6SCGg8Og7cns2FmZuqW9ip rFy1pQxt53kLlKBTXC6+IE/HDBy6bXKoP5xYXNmCvmyte88GqILaBKqB9tloDJCn wotygxUcCsSvbS4t410g/Gb4EjDe22xEQY5fjwdZon/qfHHbRJQUnWSTebZib8qL mBABUBE0hg8l1DTofaYXT3XR2j0lzjW3f0ZeVAXJsSIOzyF8vHtQ2NCJOh49u5yr YGNVopsiEIYb5pe06G1mZxyR+6MckIzQj1ippsobRsqG6T/gU/2ojGIMb/d7anvp 9pk= -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:40 2024 by rpki-client on console-ams.rpki-client.org