$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer File: vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer (raw, json) Hash identifier: PoDdTfGhNFd12vWAuvXfqnQIgPpsdWAiTEzuTUhdBxA= Subject key identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BAF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:49:41 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 103.67.172.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47859 (0xbaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:49:41 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BCF4017A6E2915F26147D419E5F7A7D164D04984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:62:fb:4f:f0:7b:64:a8:4b:02:5a:5d:25: 5c:6d:08:f9:5c:91:98:b7:58:4c:c9:46:d9:6f:95: 51:5a:75:50:cd:88:28:aa:32:a4:88:b3:a5:be:fc: 66:dd:eb:d2:b8:7c:57:c7:60:52:46:15:56:eb:84: ce:b9:22:3e:28:0c:5c:8e:ec:08:f8:07:80:8f:82: 1a:c5:6d:91:d9:ea:bf:d0:71:f3:f4:47:35:8f:bb: b5:1a:b4:2a:4c:53:30:6c:0e:18:94:dd:00:ff:8d: af:2a:b1:92:b5:6c:b0:3c:07:44:24:a6:ae:52:33: 9d:a9:c3:a8:cf:e5:60:dd:b0:51:d5:ac:75:3c:69: dc:53:3b:0f:4e:f2:b6:b4:0d:12:36:d9:fb:32:c2: 89:1e:7c:4e:1f:7c:31:c5:e2:c2:af:59:ca:6d:d9: 6b:f4:0a:78:52:74:5f:c8:53:71:75:df:6e:3a:21: 0f:bf:d7:4f:ff:1b:ae:2e:04:98:e9:02:39:24:77: 29:bd:0b:fa:1c:01:a5:85:f0:13:f5:a7:85:b2:cf: fb:2c:c9:0a:f3:5b:04:d1:52:af:42:4c:08:cf:5a: 0b:7a:f8:71:54:5c:b5:e5:89:28:99:42:76:5d:2d: ec:04:dd:2c:75:23:19:76:8e:1b:e2:27:8e:9c:31: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.172.0/22 Signature Algorithm: sha256WithRSAEncryption ab:a7:b1:da:0e:9a:d9:4b:22:9f:b9:d7:04:8e:17:74:9e:05: 39:ce:ca:2c:80:e1:0a:fe:a9:a4:2c:a3:d8:a3:23:8e:a4:7a: 43:f2:94:a7:0c:7c:1e:65:a9:ee:72:58:cc:de:6b:58:b1:2f: 61:92:5d:7e:7e:82:b0:b5:c6:04:0d:0f:21:ca:6c:88:60:af: 3e:f8:a3:28:c7:37:e6:b9:3c:40:96:70:82:f1:04:08:6d:9f: 8d:b8:94:f1:22:e2:4d:9f:a5:7f:51:51:73:84:4b:c4:c1:8c: fd:bb:2b:e0:03:4b:7c:94:9c:f2:33:b6:b3:f0:16:1b:a1:1c: 53:6f:de:da:24:61:c7:b5:23:64:b1:80:af:40:7a:41:e7:90: 53:16:d4:d1:5a:6a:f4:c8:29:97:d5:a3:b3:1c:e5:4e:60:b4: 62:41:80:67:68:69:f9:d2:06:13:f6:76:6d:93:22:7e:a8:fa: fd:8f:52:9e:1b:3a:cb:bd:f2:e3:24:6a:d6:46:bb:16:de:2c: ce:ff:e9:9b:ee:41:74:21:9e:4c:ad:20:b4:64:e3:91:c4:0e: 78:56:74:df:57:64:d8:84:9e:6f:75:1d:ed:e5:53:e6:5d:68: 70:6f:96:b9:1a:c1:75:ac:2d:0a:f0:2c:2c:1f:cf:0d:bc:12: 61:24:c3:73 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDALrzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ5NDFaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEJDRjQwMTdBNkUyOTE1RjI2MTQ3RDQxOUU1RjdBN0QxNjREMDQ5 ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FmL7T/B7ZKhLAlpd JVxtCPlckZi3WEzJRtlvlVFadVDNiCiqMqSIs6W+/Gbd69K4fFfHYFJGFVbrhM65 Ij4oDFyO7Aj4B4CPghrFbZHZ6r/QcfP0RzWPu7UatCpMUzBsDhiU3QD/ja8qsZK1 bLA8B0Qkpq5SM52pw6jP5WDdsFHVrHU8adxTOw9O8ra0DRI22fsywokefE4ffDHF 4sKvWcpt2Wv0CnhSdF/IU3F13246IQ+/10//G64uBJjpAjkkdym9C/ocAaWF8BP1 p4Wyz/ssyQrzWwTRUq9CTAjPWgt6+HFUXLXliSiZQnZdLewE3Sx1Ixl2jhviJ46c MZghAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUvPQBem4pFfJhR9QZ5fen0WTQSYQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3Mi92UFFCZW00cEZmSmhSOVFaNWZlbjBXVFFTWVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0OsMA0GCSqGSIb3DQEBCwUA A4IBAQCrp7HaDprZSyKfudcEjhd0ngU5zsosgOEK/qmkLKPYoyOOpHpD8pSnDHwe ZanucljM3mtYsS9hkl1+foKwtcYEDQ8hymyIYK8++KMoxzfmuTxAlnCC8QQIbZ+N uJTxIuJNn6V/UVFzhEvEwYz9uyvgA0t8lJzyM7az8BYboRxTb97aJGHHtSNksYCv QHpB55BTFtTRWmr0yCmX1aOzHOVOYLRiQYBnaGn50gYT9nZtkyJ+qPr9j1KeGzrL vfLjJGrWRrsW3izO/+mb7kF0IZ5MrSC0ZOORxA54VnTfV2TYhJ5vdR3t5VPmXWhw b5a5GsF1rC0K8CwsH88NvBJhJMNz -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:41 2024 by rpki-client on console-ams.rpki-client.org