$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer File: sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer (raw, json) Hash identifier: Z4jwM7IG2Siq3BCFYcrdhgBPWhaLY7L5IigRHyKfe9Y= Subject key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BB7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:51:35 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 131563 IP: 103.96.212.0/22 IP: 2403:ba40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47997 (0xbb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:51:35 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:f1:a3:90:68:fd:1b:72:16:01:0c:d8:69: ab:da:fb:05:fb:b2:3d:a9:87:19:0c:6a:36:c3:c1: bd:19:4e:80:c1:c3:1d:a2:52:54:2d:9f:a7:e0:85: b7:e6:92:bb:76:97:fd:ee:d0:c1:d7:7c:42:7b:97: c1:e6:d6:2a:b1:db:bb:91:d7:a8:3b:f7:74:c7:49: 6b:6a:66:54:7e:a8:c9:0d:f5:9e:47:f0:85:df:23: e3:72:08:6f:91:d6:ba:a0:ed:29:bb:5c:a5:2e:20: 2d:f7:4b:b2:b2:7e:a1:12:47:c1:9b:c0:6c:6d:a0: 1b:ed:4a:ce:6e:33:9d:db:a6:11:e6:87:f8:1e:81: 83:12:31:7c:8b:a2:0a:6f:3b:34:93:b9:a5:5c:ac: 8d:0e:86:45:70:c1:0f:7a:ee:84:2f:89:61:0a:0e: 2a:83:a0:67:0d:fd:59:20:3b:2e:42:84:78:94:99: 9f:fe:b7:0b:20:01:42:e8:87:59:ee:05:ba:f1:b4: eb:6d:e0:7e:cb:77:7a:82:fb:12:fc:21:74:6d:76: 33:18:a7:24:fd:d9:29:52:4f:cc:e2:df:b2:5f:8b: 84:c4:68:d7:0b:7a:7f:08:95:95:29:ef:aa:9c:00: 44:1b:85:8d:91:56:20:42:9f:f3:f0:1c:2e:5e:ad: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131563 sbgp-ipAddrBlock: critical IPv4: 103.96.212.0/22 IPv6: 2403:ba40::/32 Signature Algorithm: sha256WithRSAEncryption 68:dc:d8:6e:73:a3:0d:c4:ec:b0:d5:c5:d8:5c:3b:5d:10:31: 3d:2b:2f:be:ff:0c:c4:4c:8a:56:13:d1:21:0c:68:78:18:10: c0:03:8a:23:f4:af:e6:4b:de:c6:0d:e9:30:00:59:db:19:72: 24:e6:70:52:3d:a9:80:3a:f0:70:31:10:12:26:0d:be:48:ab: 1d:9d:93:5c:14:8e:79:d4:5d:a0:fe:45:97:a8:44:6e:07:7d: 30:eb:a8:b3:3b:01:c5:6a:21:9d:f8:cb:a1:1c:c5:34:b8:61: 30:98:3a:58:37:fb:06:ba:d8:a4:26:8a:e4:63:00:99:49:f7: d0:df:93:76:0c:be:8d:70:0f:88:9d:c0:45:31:7a:41:90:27: 2f:09:85:86:27:4f:41:fa:8e:5a:d0:1b:47:70:ad:39:f6:f8: 1b:59:fc:f8:7e:82:9e:8f:11:a3:54:a4:a2:57:ff:75:55:4f: 7b:51:e8:b5:da:11:d1:2d:33:b9:cf:53:23:69:6c:24:25:8f: b9:2f:7b:1a:22:8d:f9:09:e1:66:39:23:26:08:69:5e:5d:40: b0:5c:68:3d:9b:ca:7f:fe:4c:2a:0e:66:83:a9:dc:0d:be:e8: 9e:af:75:b0:de:2f:e9:ce:93:58:e4:fc:4c:10:04:0b:0a:ca: 74:61:0f:8f -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDALt9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUxMzVaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEIxRDg0NEIxOTg2RTczNjQ2NkY1QTE4RkYwNkIyOThFRkNCQkQ2 RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpfGjkGj9G3IWAQzY aava+wX7sj2phxkMajbDwb0ZToDBwx2iUlQtn6fghbfmkrt2l/3u0MHXfEJ7l8Hm 1iqx27uR16g793THSWtqZlR+qMkN9Z5H8IXfI+NyCG+R1rqg7Sm7XKUuIC33S7Ky fqESR8GbwGxtoBvtSs5uM53bphHmh/gegYMSMXyLogpvOzSTuaVcrI0OhkVwwQ96 7oQviWEKDiqDoGcN/VkgOy5ChHiUmZ/+twsgAULoh1nuBbrxtOtt4H7Ld3qC+xL8 IXRtdjMYpyT92SlST8zi37Jfi4TEaNcLen8IlZUp76qcAEQbhY2RViBCn/PwHC5e remTAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUsdhEsZhuc2Rm9aGP8Gspjvy71u0w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1 MjYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjUyNi9zZGhFc1podWMyUm05YUdQOEdzcGp2eTcxdTAubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIB6zAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdg1DANBAIAAjAHAwUAJAO6QDANBgkqhkiG9w0BAQsFAAOCAQEA aNzYbnOjDcTssNXF2Fw7XRAxPSsvvv8MxEyKVhPRIQxoeBgQwAOKI/Sv5kvexg3p MABZ2xlyJOZwUj2pgDrwcDEQEiYNvkirHZ2TXBSOedRdoP5Fl6hEbgd9MOuoszsB xWohnfjLoRzFNLhhMJg6WDf7BrrYpCaK5GMAmUn30N+Tdgy+jXAPiJ3ARTF6QZAn LwmFhidPQfqOWtAbR3CtOfb4G1n8+H6Cno8Ro1Skolf/dVVPe1HotdoR0S0zuc9T I2lsJCWPuS97GiKN+QnhZjkjJghpXl1AsFxoPZvKf/5MKg5mg6ncDb7onq91sN4v 6c6TWOT8TBAECwrKdGEPjw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:28 2024 by rpki-client on console-fra.rpki-client.org