$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vCE9aodm-DafWThfda8AgjreZgQ.cer File: vCE9aodm-DafWThfda8AgjreZgQ.cer (raw, json) Hash identifier: zTxUCGIaNdYWRbmmaegKCDp7CilJpY0WlVMJn+mucfw= Subject key identifier: BC:21:3D:6A:87:66:F8:36:9F:59:38:5F:75:AF:00:82:3A:DE:66:04 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BCD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/vCE9aodm-DafWThfda8AgjreZgQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:57:56 +0000 Certificate not after: Sat 27 Sep 2025 02:44:45 +0000 Subordinate resources: AS: 63573 IP: 103.198.20.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48341 (0xbcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:57:56 2024 GMT Not After : Sep 27 02:44:45 2025 GMT Subject: CN=BC213D6A8766F8369F59385F75AF00823ADE6604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:5a:f9:a8:11:98:f4:4a:c5:50:be:ec:0c: 3e:c2:d6:b3:f9:d9:40:fc:b4:58:c2:00:2b:29:59: ca:9d:c7:ef:04:4e:d7:98:8d:1b:2b:df:74:a3:36: 6b:bc:27:7b:6f:47:c5:5b:7d:80:0a:1a:1a:2f:cb: 6b:a9:e7:4a:09:e8:c6:bc:c4:27:7d:5f:04:97:78: e8:b7:00:65:8e:f9:e9:ae:91:33:61:95:84:dd:ea: 80:bb:d2:fe:b5:8b:1e:64:7b:62:f3:69:c4:b4:54: 5e:e2:ce:8c:65:93:6d:8a:c0:a0:85:2c:d5:a2:20: 3a:83:f8:72:7d:4f:7e:e9:10:b2:a1:a4:b9:1e:de: 08:3e:b7:5e:3f:ef:d7:65:29:41:c6:90:8b:0c:71: 10:2a:b6:8c:55:d5:ec:5c:94:81:c3:46:f4:19:d5: 63:db:2d:7c:70:59:64:21:09:74:cc:12:a5:77:d6: 32:41:af:29:8f:41:0a:f8:44:62:64:0f:cd:aa:a7: 54:93:42:d1:38:02:ef:30:a6:9f:96:ca:bd:15:73: 24:25:94:f4:e7:5a:18:01:d1:65:d8:57:da:e9:2f: 0b:ab:78:74:92:80:a2:ea:e5:0c:18:03:42:0b:72: a7:b6:42:1d:16:1b:66:69:0a:1e:80:73:7b:f0:d8: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:21:3D:6A:87:66:F8:36:9F:59:38:5F:75:AF:00:82:3A:DE:66:04 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/vCE9aodm-DafWThfda8AgjreZgQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63573 sbgp-ipAddrBlock: critical IPv4: 103.198.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:3e:a6:bc:ee:2b:20:17:c1:48:b9:64:fd:76:16:04:8b:9d: 9b:0e:22:27:27:be:89:75:3f:f1:bd:42:a4:40:04:de:65:f0: 0a:04:70:f3:b2:4f:08:d3:eb:78:66:82:b3:92:20:e7:06:e9: 19:a7:a0:5c:f0:00:df:36:23:e8:42:64:7c:13:d8:6a:07:eb: 43:0a:76:c1:54:d4:97:da:ee:b5:1a:49:e2:95:79:c6:ac:ef: 74:d2:56:c0:d6:80:27:54:e4:93:6d:25:2e:c6:26:bd:9b:91: 81:56:67:de:ac:35:c3:41:5d:17:ef:73:64:bc:0c:b7:38:05: 7e:8e:97:09:e0:7a:04:4a:81:f3:5d:42:a2:85:c8:db:0d:43: 02:43:e6:5a:49:da:aa:d1:af:85:07:92:29:0d:43:69:56:9e: 32:cf:d7:06:99:7f:bc:f7:61:32:5f:f4:c7:e8:cf:a9:82:25: f7:23:80:01:7c:2b:a9:81:c5:a6:f6:d8:22:e8:11:5f:07:ea: 59:78:23:6b:95:41:b3:48:1d:d9:50:5d:1f:4a:78:06:5a:e5: 49:f6:29:ab:a0:28:7a:96:48:34:c4:18:92:12:a7:b1:ba:92: ee:f4:1f:09:1f:08:5d:5e:32:e3:1e:c1:b4:7a:a8:c8:02:95: 90:9f:72:82 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDALzVMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU3NTZaFw0yNTA5MjcwMjQ0NDVaMDMx MTAvBgNVBAMTKEJDMjEzRDZBODc2NkY4MzY5RjU5Mzg1Rjc1QUYwMDgyM0FERTY2 MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztVr5qBGY9ErFUL7s DD7C1rP52UD8tFjCACspWcqdx+8ETteYjRsr33SjNmu8J3tvR8VbfYAKGhovy2up 50oJ6Ma8xCd9XwSXeOi3AGWO+emukTNhlYTd6oC70v61ix5ke2LzacS0VF7izoxl k22KwKCFLNWiIDqD+HJ9T37pELKhpLke3gg+t14/79dlKUHGkIsMcRAqtoxV1exc lIHDRvQZ1WPbLXxwWWQhCXTMEqV31jJBrymPQQr4RGJkD82qp1STQtE4Au8wpp+W yr0VcyQllPTnWhgB0WXYV9rpLwureHSSgKLq5QwYA0ILcqe2Qh0WG2ZpCh6Ac3vw 2LeRAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUvCE9aodm+DafWThfda8AgjreZgQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEz NzcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMTM3Ny92Q0U5YW9kbS1EYWZXVGhmZGE4QWdqcmVaZ1EubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4VTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfGFDANBgkqhkiG9w0BAQsFAAOCAQEATz6mvO4rIBfBSLlk/XYW BIudmw4iJye+iXU/8b1CpEAE3mXwCgRw87JPCNPreGaCs5Ig5wbpGaegXPAA3zYj 6EJkfBPYagfrQwp2wVTUl9rutRpJ4pV5xqzvdNJWwNaAJ1Tkk20lLsYmvZuRgVZn 3qw1w0FdF+9zZLwMtzgFfo6XCeB6BEqB811CooXI2w1DAkPmWknaqtGvhQeSKQ1D aVaeMs/XBpl/vPdhMl/0x+jPqYIl9yOAAXwrqYHFpvbYIugRXwfqWXgja5VBs0gd 2VBdH0p4BlrlSfYpq6AoepZINMQYkhKnsbqS7vQfCR8IXV4y4x7BtHqoyAKVkJ9y gg== -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:41 2024 by rpki-client on console-ams.rpki-client.org