$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer File: kOpMYj8LihBi2qgOqaj0R49Z3oU.cer (raw, json) Hash identifier: M+s1bp7YYD+2jEUpmFSxDP8OPuGmIQGnNUVDoiTSNgk= Subject key identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: B137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 03 Apr 2024 09:40:35 +0000 Certificate not after: Wed 02 Apr 2025 06:12:26 +0000 Subordinate resources: IP: 2401:90a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 15:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45367 (0xb137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 09:40:35 2024 GMT Not After : Apr 2 06:12:26 2025 GMT Subject: CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:00:5c:6a:e8:b9:e6:7d:20:e0:a9:d6:e2: a3:17:09:2e:d2:25:3d:52:2f:8f:1d:f4:27:b7:cd: 35:a1:47:6b:c5:c5:68:3a:81:59:a3:5d:d1:f6:3d: 40:15:59:f4:c0:b0:61:d0:bb:cf:87:bf:89:e1:3d: 01:78:e2:b4:36:81:f1:b4:22:28:f7:da:c0:5f:dd: f7:8b:ca:d6:c8:85:2b:2d:fc:2e:29:12:f5:66:c2: 46:29:15:fa:83:88:25:48:e0:f4:de:bf:da:6b:29: cb:67:3b:c9:5b:01:ae:8e:58:8d:aa:5c:ac:c1:e8: cb:e9:bd:39:7c:7c:a0:72:39:e3:bb:b1:23:1b:ea: 1f:b6:d5:4c:e9:6a:de:eb:23:9c:0d:05:da:f7:64: 1f:6f:bb:85:76:15:14:23:f1:a9:e3:1d:0a:ca:c5: 9a:35:56:fb:7d:65:f5:93:6d:c6:61:0f:ac:af:95: 3f:9c:06:9c:76:63:7d:43:59:53:31:6d:32:ce:8e: fc:1f:8f:22:91:ee:7b:7f:40:d2:86:dd:1f:9e:77: 72:57:07:c1:ab:ca:28:7a:bc:4f:f1:d8:ad:a6:4e: 02:c7:8e:50:59:e0:ef:bc:54:ac:ab:0e:bd:72:26: 4b:91:a7:07:df:ae:74:f5:45:d4:d3:8f:29:b7:36: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:90a0::/32 Signature Algorithm: sha256WithRSAEncryption 50:c3:1a:f9:a1:a1:54:7e:40:a8:ad:02:b3:15:13:6d:6a:81: d4:1e:95:0f:f7:12:af:d0:92:48:6f:90:66:00:e5:fc:0c:54: 73:de:aa:71:2d:87:63:06:7c:58:07:d4:51:86:25:30:e9:ac: 84:ea:6d:9b:db:cb:97:80:1a:94:c3:92:35:73:66:bf:71:72: cb:60:cd:97:18:9c:7f:fa:15:9a:83:cf:c4:b5:ce:43:85:8f: 3a:9d:f5:2d:ec:9d:54:e6:ff:be:03:95:47:ff:31:e6:58:15: 19:7f:4f:9a:49:11:fb:69:d8:aa:b0:3d:73:52:f7:b8:f1:8a: 2d:b7:74:a0:36:bc:ed:7c:8e:ca:02:2d:aa:7d:3e:f6:e2:83: 38:42:da:60:8f:7a:3f:84:35:64:2f:ab:a5:77:be:6d:cb:ef: 87:b4:15:40:72:e6:e5:5b:50:73:08:14:59:03:e2:a0:a0:6d: ea:d7:19:09:7e:fe:ff:7b:83:a6:5b:24:83:a8:6a:cd:19:80: 1d:c0:35:6f:0a:2f:9b:66:97:78:53:39:74:29:03:6e:94:d8: 05:ec:7e:d5:ad:ce:a1:22:0c:f4:3d:cc:f6:c4:97:76:d1:19: ec:a0:1e:23:43:8d:28:cd:86:aa:d9:21:6d:ce:fe:98:2a:4b: eb:39:3f:17 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDALE3MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA0MDMwOTQwMzVaFw0yNTA0MDIwNjEyMjZaMDMx MTAvBgNVBAMTKDkwRUE0QzYyM0YwQjhBMTA2MkRBQTgwRUE5QThGNDQ3OEY1OURF ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtgBcaui55n0g4KnW 4qMXCS7SJT1SL48d9Ce3zTWhR2vFxWg6gVmjXdH2PUAVWfTAsGHQu8+Hv4nhPQF4 4rQ2gfG0Iij32sBf3feLytbIhSst/C4pEvVmwkYpFfqDiCVI4PTev9prKctnO8lb Aa6OWI2qXKzB6MvpvTl8fKByOeO7sSMb6h+21Uzpat7rI5wNBdr3ZB9vu4V2FRQj 8anjHQrKxZo1Vvt9ZfWTbcZhD6yvlT+cBpx2Y31DWVMxbTLOjvwfjyKR7nt/QNKG 3R+ed3JXB8Gryih6vE/x2K2mTgLHjlBZ4O+8VKyrDr1yJkuRpwffrnT1RdTTjym3 NqdDAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUkOpMYj8LihBi2qgOqaj0R49Z3oUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NS9rT3BNWWo4TGloQmkycWdPcWFqMFI0OVozb1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGQoDANBgkqhkiG9w0BAQsF AAOCAQEAUMMa+aGhVH5AqK0CsxUTbWqB1B6VD/cSr9CSSG+QZgDl/AxUc96qcS2H YwZ8WAfUUYYlMOmshOptm9vLl4AalMOSNXNmv3Fyy2DNlxicf/oVmoPPxLXOQ4WP Op31LeydVOb/vgOVR/8x5lgVGX9PmkkR+2nYqrA9c1L3uPGKLbd0oDa87XyOygIt qn0+9uKDOELaYI96P4Q1ZC+rpXe+bcvvh7QVQHLm5VtQcwgUWQPioKBt6tcZCX7+ /3uDplskg6hqzRmAHcA1bwovm2aXeFM5dCkDbpTYBex+1a3OoSIM9D3M9sSXdtEZ 7KAeI0ONKM2Gqtkhbc7+mCpL6zk/Fw== -----END CERTIFICATE-----Generated at Sat May 18 09:48:27 2024 by rpki-client on console-ams.rpki-client.org