$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer File: qmXpFa-Nrt6rqnw2bEzO5KHBslA.cer (raw, json) Hash identifier: PIpXnP6tPRD9nOJ8uReLmUVG6lYoVqJLUM4i/RL8Ips= Subject key identifier: AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 37C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:53:48 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 160.20.130.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14281 (0x37c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Sep 27 02:53:48 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AA65E915AF8DAEDEABAA7C366C4CCEE4A1C1B250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:8e:6c:ba:f6:5c:3d:0c:f6:e5:ac:00:4b: fe:cd:f6:ce:01:0b:c9:99:0b:08:de:36:44:19:a5: 40:6f:da:43:20:ce:1e:91:67:82:ce:78:df:cb:04: 33:cb:ef:2b:93:10:29:9c:54:1c:a4:72:ac:0e:f2: 0c:02:3e:60:01:5b:81:37:d6:89:35:a9:d0:a0:68: 34:80:11:22:e4:be:9e:f5:99:7a:82:8c:c0:f7:c5: ae:c2:47:d8:52:a3:75:96:ec:4d:34:8f:71:a0:52: 42:44:6c:b1:95:a5:da:25:b8:eb:8f:3a:c5:ba:41: 09:8b:cd:63:d8:1d:6f:15:7e:4a:51:3f:09:c5:75: 9f:55:61:b1:1a:a8:a2:c5:12:ac:1b:c8:13:2b:a7: 27:67:05:5e:39:4c:01:80:c5:9e:e2:17:5b:f5:5c: 8f:33:1b:60:0f:9a:da:35:2f:c0:27:2c:24:74:4c: 86:f5:14:46:3d:6e:d8:33:67:a5:b4:1d:e2:27:12: 6f:88:40:da:c2:dc:2a:62:cf:30:ca:23:05:f0:36: 63:39:8a:ad:94:51:23:e5:a7:05:b5:5b:12:77:fc: db:08:a9:2b:f7:34:b3:dd:71:68:26:7a:ba:0c:19: 6a:8a:9b:9b:ac:58:65:92:a2:91:d4:16:26:79:16: d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:65:E9:15:AF:8D:AE:DE:AB:AA:7C:36:6C:4C:CE:E4:A1:C1:B2:50 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/qmXpFa-Nrt6rqnw2bEzO5KHBslA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.20.130.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:f7:88:90:16:c7:8a:a7:4c:d0:96:3f:9d:ed:4f:7e:2c:db: 78:cf:25:f3:39:50:b2:80:7c:30:e5:fa:d3:3e:58:7f:62:cb: be:f1:7b:e3:31:f0:cb:ad:b7:6c:4a:51:67:c7:c5:27:16:85: f1:3b:2d:db:82:46:bf:0b:24:b6:43:90:39:74:95:26:ca:8a: 4e:7c:66:ab:d0:1d:ed:52:5a:21:85:ba:cc:60:17:5f:af:a2: fe:e0:0b:99:d1:a6:90:aa:6e:63:8b:49:b0:ab:ee:63:ac:54: c8:ab:af:48:fc:b0:b9:ed:99:d6:ce:4a:a9:a7:d9:b8:47:47: 80:83:f7:7b:1c:55:bc:c1:90:5f:89:10:f1:e6:68:19:df:74: f0:46:e4:06:ca:78:b9:87:44:0d:33:dd:89:c3:3e:45:e7:ab: b1:18:96:86:e7:ba:18:65:2e:10:fe:8e:87:ee:5f:25:42:5e: b7:e7:ce:cc:1d:ff:a1:e5:ce:53:8a:d4:97:0d:56:4f:79:c0: 21:4a:6d:51:5d:95:b5:28:00:31:83:89:44:31:cf:48:8e:49: 4f:a2:0e:17:8e:32:65:af:f5:67:67:e5:5c:cc:56:df:66:4c: 79:7a:71:98:53:fd:4a:64:c8:cc:33:53:c7:a3:34:d6:47:64: 4c:ac:70:a5 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICN8kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNTM0OFoXDTI1MDkyNzAyNDAxNFowMzEx MC8GA1UEAxMoQUE2NUU5MTVBRjhEQUVERUFCQUE3QzM2NkM0Q0NFRTRBMUMxQjI1 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANK2jmy69lw9DPblrABL /s32zgELyZkLCN42RBmlQG/aQyDOHpFngs5438sEM8vvK5MQKZxUHKRyrA7yDAI+ YAFbgTfWiTWp0KBoNIARIuS+nvWZeoKMwPfFrsJH2FKjdZbsTTSPcaBSQkRssZWl 2iW46486xbpBCYvNY9gdbxV+SlE/CcV1n1VhsRqoosUSrBvIEyunJ2cFXjlMAYDF nuIXW/VcjzMbYA+a2jUvwCcsJHRMhvUURj1u2DNnpbQd4icSb4hA2sLcKmLPMMoj BfA2YzmKrZRRI+WnBbVbEnf82wipK/c0s91xaCZ6ugwZaoqbm6xYZZKikdQWJnkW 0M0CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSqZekVr42u3quqfDZsTM7kocGyUDAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4 NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjg1L3FtWHBGYS1OcnQ2cnFudzJiRXpPNUtIQnNsQS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgFIIwDQYJKoZIhvcNAQELBQAD ggEBAG33iJAWx4qnTNCWP53tT34s23jPJfM5ULKAfDDl+tM+WH9iy77xe+Mx8Mut t2xKUWfHxScWhfE7LduCRr8LJLZDkDl0lSbKik58ZqvQHe1SWiGFusxgF1+vov7g C5nRppCqbmOLSbCr7mOsVMirr0j8sLntmdbOSqmn2bhHR4CD93scVbzBkF+JEPHm aBnfdPBG5AbKeLmHRA0z3YnDPkXnq7EYlobnuhhlLhD+jofuXyVCXrfnzswd/6Hl zlOK1JcNVk95wCFKbVFdlbUoADGDiUQxz0iOSU+iDheOMmWv9Wdn5VzMVt9mTHl6 cZhT/UpkyMwzU8ejNNZHZEyscKU= -----END CERTIFICATE-----Generated at Mon Nov 25 04:45:28 2024 by rpki-client on console-ams.rpki-client.org