$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer File: vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer (raw, json) Hash identifier: VrjYvwgL0xXgEIfHftzhH2ZBElb4Yf9f58H/z/tS0Eo= Subject key identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AE57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:20:09 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 103.67.172.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44631 (0xae57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:20:09 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BCF4017A6E2915F26147D419E5F7A7D164D04984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:62:fb:4f:f0:7b:64:a8:4b:02:5a:5d:25: 5c:6d:08:f9:5c:91:98:b7:58:4c:c9:46:d9:6f:95: 51:5a:75:50:cd:88:28:aa:32:a4:88:b3:a5:be:fc: 66:dd:eb:d2:b8:7c:57:c7:60:52:46:15:56:eb:84: ce:b9:22:3e:28:0c:5c:8e:ec:08:f8:07:80:8f:82: 1a:c5:6d:91:d9:ea:bf:d0:71:f3:f4:47:35:8f:bb: b5:1a:b4:2a:4c:53:30:6c:0e:18:94:dd:00:ff:8d: af:2a:b1:92:b5:6c:b0:3c:07:44:24:a6:ae:52:33: 9d:a9:c3:a8:cf:e5:60:dd:b0:51:d5:ac:75:3c:69: dc:53:3b:0f:4e:f2:b6:b4:0d:12:36:d9:fb:32:c2: 89:1e:7c:4e:1f:7c:31:c5:e2:c2:af:59:ca:6d:d9: 6b:f4:0a:78:52:74:5f:c8:53:71:75:df:6e:3a:21: 0f:bf:d7:4f:ff:1b:ae:2e:04:98:e9:02:39:24:77: 29:bd:0b:fa:1c:01:a5:85:f0:13:f5:a7:85:b2:cf: fb:2c:c9:0a:f3:5b:04:d1:52:af:42:4c:08:cf:5a: 0b:7a:f8:71:54:5c:b5:e5:89:28:99:42:76:5d:2d: ec:04:dd:2c:75:23:19:76:8e:1b:e2:27:8e:9c:31: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.172.0/22 Signature Algorithm: sha256WithRSAEncryption 80:3a:d6:06:47:33:e8:93:11:e5:40:e0:08:0a:07:b0:8b:ca: 52:f8:ce:4b:4b:da:e0:df:6a:54:1d:a2:e4:50:e5:77:e7:82: 45:10:93:ca:f6:cf:0f:ed:a6:8b:3b:04:42:98:d3:f4:9c:28: 2d:dc:66:a4:68:6a:43:20:02:0d:a7:17:6a:e1:b8:79:f4:f1: 14:30:2f:aa:0a:d5:fa:20:dd:ac:bd:d1:42:e9:d9:bb:8a:29: b1:34:da:49:95:9b:ca:26:d8:c1:01:86:fd:9f:b5:41:6e:04: 1b:da:c9:19:ef:d1:9a:f7:55:3e:9a:23:de:a4:d4:c4:f1:a5: df:6e:fc:e4:3c:fb:34:23:5e:b6:c1:ee:63:f9:63:9d:dc:95: e6:69:a0:b6:32:71:9c:d8:54:ea:fd:d9:18:09:04:42:30:cc: e4:ae:8a:bc:29:d5:c0:a2:2b:ec:0f:3f:68:51:fa:f7:89:e2: 84:5b:0c:87:6c:3f:a3:19:95:9c:66:23:c9:f1:69:cb:66:29: d8:85:04:23:00:96:10:c1:cd:50:41:fa:13:b9:21:d3:27:1e: 8d:9c:89:97:7f:f7:bf:d0:3c:ed:48:57:2d:5b:47:ae:b0:2a: ae:88:26:d8:da:8a:ba:dd:01:11:e3:b7:01:74:6d:a9:66:e8: 0c:dc:7a:58 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAK5XMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIwMDlaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKEJDRjQwMTdBNkUyOTE1RjI2MTQ3RDQxOUU1RjdBN0QxNjREMDQ5 ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FmL7T/B7ZKhLAlpd JVxtCPlckZi3WEzJRtlvlVFadVDNiCiqMqSIs6W+/Gbd69K4fFfHYFJGFVbrhM65 Ij4oDFyO7Aj4B4CPghrFbZHZ6r/QcfP0RzWPu7UatCpMUzBsDhiU3QD/ja8qsZK1 bLA8B0Qkpq5SM52pw6jP5WDdsFHVrHU8adxTOw9O8ra0DRI22fsywokefE4ffDHF 4sKvWcpt2Wv0CnhSdF/IU3F13246IQ+/10//G64uBJjpAjkkdym9C/ocAaWF8BP1 p4Wyz/ssyQrzWwTRUq9CTAjPWgt6+HFUXLXliSiZQnZdLewE3Sx1Ixl2jhviJ46c MZghAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUvPQBem4pFfJhR9QZ5fen0WTQSYQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3Mi92UFFCZW00cEZmSmhSOVFaNWZlbjBXVFFTWVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0OsMA0GCSqGSIb3DQEBCwUA A4IBAQCAOtYGRzPokxHlQOAICgewi8pS+M5LS9rg32pUHaLkUOV354JFEJPK9s8P 7aaLOwRCmNP0nCgt3GakaGpDIAINpxdq4bh59PEUMC+qCtX6IN2svdFC6dm7iimx NNpJlZvKJtjBAYb9n7VBbgQb2skZ79Ga91U+miPepNTE8aXfbvzkPPs0I162we5j +WOd3JXmaaC2MnGc2FTq/dkYCQRCMMzkroq8KdXAoivsDz9oUfr3ieKEWwyHbD+j GZWcZiPJ8WnLZinYhQQjAJYQwc1QQfoTuSHTJx6NnImXf/e/0DztSFctW0eusCqu iCbY2oq63QER47cBdG2pZugM3HpY -----END CERTIFICATE-----Generated at Mon May 6 12:47:41 2024 by rpki-client on console-ams.rpki-client.org