$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kcYSZfVhPXbfBBk7-onPLVTfiVE.cer File: kcYSZfVhPXbfBBk7-onPLVTfiVE.cer (raw, json) Hash identifier: nmR2PfN6EepOs0C94oCcBKSkv6Dx2Po30xdWsSI2zlc= Subject key identifier: 91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: A50A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 18 Sep 2023 08:12:58 +0000 Certificate not after: Tue 17 Sep 2024 08:06:57 +0000 Subordinate resources: AS: 63573 IP: 103.198.20.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 10:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42250 (0xa50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 18 08:12:58 2023 GMT Not After : Sep 17 08:06:57 2024 GMT Subject: CN=91C61265F5613D76DF04193BFA89CF2D54DF8951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:41:a6:83:1d:99:45:7b:86:39:db:85:9a: 1c:96:c1:f8:52:68:f5:3a:4e:31:21:a0:32:3f:60: 01:9a:bc:dd:25:a3:17:1b:90:0d:f3:00:41:be:dd: 8f:2d:1e:f4:8f:0a:8d:ef:6b:eb:f3:22:ff:39:ac: 7a:20:83:7d:b0:57:9a:f5:de:8d:4d:f6:d4:2b:4a: 1c:cc:71:ad:90:4a:8f:53:81:f6:1e:5d:0a:5f:16: 5a:64:91:3e:32:7d:88:2d:b7:78:bc:d8:bd:28:96: a0:15:6d:0e:99:78:63:0b:24:68:9d:d4:fe:8c:80: b0:1b:68:cf:c3:4b:ae:24:09:49:45:a0:b5:e2:ac: 1e:18:59:15:36:0d:ab:ac:3f:c5:e1:6c:7f:a5:5c: 81:9f:79:16:5c:05:35:ed:9b:cb:f4:b5:ef:bd:87: 05:39:5b:fd:21:db:39:dc:3f:8a:06:6f:e9:8f:2b: 84:f7:b4:3e:42:dd:1f:5a:9d:e3:b8:5a:c8:31:e8: 6b:34:2d:50:fb:59:74:ad:43:cd:dd:24:9c:4d:8a: 86:ed:6f:ca:b6:01:71:e5:41:5f:a9:e6:27:5d:08: 9e:ca:b2:3f:11:32:45:36:69:5a:22:c9:20:0f:ee: 60:56:33:20:7e:04:b4:94:5a:84:c6:98:dd:ed:2e: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63573 sbgp-ipAddrBlock: critical IPv4: 103.198.20.0/22 Signature Algorithm: sha256WithRSAEncryption 60:f0:6d:55:44:12:7b:6f:60:cc:9b:e2:33:a6:ed:a8:d1:7d: 78:5a:28:e8:12:88:fc:76:f7:77:5d:b6:85:fd:4f:61:0e:c7: 3e:9b:9f:fb:f1:b0:57:2e:d9:a0:31:e6:55:f6:b1:ff:a4:ce: 34:d8:b2:bf:c0:58:b4:32:73:45:89:d2:20:cc:fb:bc:74:07: 42:17:74:1f:3d:ae:e1:ed:2b:20:57:92:25:94:cc:3d:db:7f: cf:57:60:da:ee:db:71:c9:23:22:c0:47:17:e5:7d:3c:bb:46: 68:d3:a3:d8:19:19:2a:d7:ba:62:85:92:9a:20:3e:cd:c8:70: 81:56:23:95:0a:30:82:f7:47:23:15:65:b1:7b:8d:f7:7b:17: 4b:ee:c6:38:f2:ae:74:16:2b:61:27:01:f4:1b:43:0e:8e:c2: 8d:11:f6:c5:33:87:c8:67:bf:de:25:a0:1d:3f:f2:ca:6a:76: dd:68:45:fb:4a:eb:9b:cc:17:80:f5:ab:fb:f8:5e:96:c9:69: 4a:e5:e2:8d:a9:b8:e7:f0:e2:51:14:9d:2d:f3:88:d5:f2:08: c2:38:01:23:d1:63:65:d9:42:78:e6:60:26:49:d2:f6:b5:6c: 6d:bf:ee:9c:7d:2a:3b:0a:f1:95:ea:f6:89:d0:a0:40:67:b5: 83:39:c3:3a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAKUKMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yMzA5MTgwODEyNThaFw0yNDA5MTcwODA2NTdaMDMx MTAvBgNVBAMTKDkxQzYxMjY1RjU2MTNENzZERjA0MTkzQkZBODlDRjJENTRERjg5 NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHEGmgx2ZRXuGOduF mhyWwfhSaPU6TjEhoDI/YAGavN0loxcbkA3zAEG+3Y8tHvSPCo3va+vzIv85rHog g32wV5r13o1N9tQrShzMca2QSo9TgfYeXQpfFlpkkT4yfYgtt3i82L0olqAVbQ6Z eGMLJGid1P6MgLAbaM/DS64kCUlFoLXirB4YWRU2DausP8XhbH+lXIGfeRZcBTXt m8v0te+9hwU5W/0h2zncP4oGb+mPK4T3tD5C3R9aneO4Wsgx6Gs0LVD7WXStQ83d JJxNiobtb8q2AXHlQV+p5iddCJ7Ksj8RMkU2aVoiySAP7mBWMyB+BLSUWoTGmN3t LiURAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUkcYSZfVhPXbfBBk7+onPLVTfiVEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEz NzcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMTM3Ny9rY1lTWmZWaFBYYmZCQms3LW9uUExWVGZpVkUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4VTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfGFDANBgkqhkiG9w0BAQsFAAOCAQEAYPBtVUQSe29gzJviM6bt qNF9eFoo6BKI/Hb3d122hf1PYQ7HPpuf+/GwVy7ZoDHmVfax/6TONNiyv8BYtDJz RYnSIMz7vHQHQhd0Hz2u4e0rIFeSJZTMPdt/z1dg2u7bcckjIsBHF+V9PLtGaNOj 2BkZKte6YoWSmiA+zchwgVYjlQowgvdHIxVlsXuN93sXS+7GOPKudBYrYScB9BtD Do7CjRH2xTOHyGe/3iWgHT/yymp23WhF+0rrm8wXgPWr+/helslpSuXijam45/Di URSdLfOI1fIIwjgBI9FjZdlCeOZgJknS9rVsbb/unH0qOwrxler2idCgQGe1gznD Og== -----END CERTIFICATE-----Generated at Sun May 19 06:14:45 2024 by rpki-client on console-ams.rpki-client.org