$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xKJlJG95tZr2DvesKLzmRstE5wM.cer File: xKJlJG95tZr2DvesKLzmRstE5wM.cer (raw, json) Hash identifier: TzY9e2kLKhHQ6jqCen3bTGQEHjbgEdvmAx0HYbskEHI= Subject key identifier: C4:A2:65:24:6F:79:B5:9A:F6:0E:F7:AC:28:BC:E6:46:CB:44:E7:03 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AF83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/xKJlJG95tZr2DvesKLzmRstE5wM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:24:23 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 131532 IP: 103.98.228.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 15:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44931 (0xaf83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:24:23 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C4A265246F79B59AF60EF7AC28BCE646CB44E703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:58:03:f2:93:17:c2:ab:67:36:71:ba:ce: 8d:fd:f9:82:0c:15:d9:95:62:8d:46:80:71:62:b2: bb:3d:19:b2:b3:6c:67:b7:3b:dc:fc:d7:79:8e:b7: ab:97:d9:56:06:c1:b6:6d:21:a3:6d:b5:2f:bd:a5: 78:cc:bc:63:95:82:1d:2c:f7:72:70:7c:b1:ca:08: 31:df:a4:ba:68:76:39:e1:50:cc:59:2b:b1:d5:09: 24:a4:69:98:88:b5:d3:4c:ce:46:11:b3:48:50:4e: 80:61:63:e8:1f:c9:70:fb:4a:fe:80:0f:7f:c0:cd: 0c:25:01:da:e1:ea:05:ca:98:1e:54:33:31:29:ba: 2b:b4:51:27:09:d3:08:ff:58:66:45:64:36:39:ca: 73:f1:75:d5:2c:a8:92:64:1b:ca:37:9a:de:59:29: 29:cc:af:70:b5:d2:2a:2b:bd:fb:3f:f8:81:e3:3c: 95:28:07:ed:95:34:13:f8:37:4b:22:bd:d8:fc:c7: a0:0d:f1:08:9c:d3:42:57:28:98:34:e7:7b:5e:bb: 9a:e9:5c:9f:bb:75:1f:bd:9f:cc:9c:8c:5c:dc:61: 93:b8:e4:b2:67:36:cc:ae:53:6c:67:35:1b:f7:24: 80:ec:d1:c4:bd:fa:27:a9:7d:e4:26:74:5e:34:6a: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:65:24:6F:79:B5:9A:F6:0E:F7:AC:28:BC:E6:46:CB:44:E7:03 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/xKJlJG95tZr2DvesKLzmRstE5wM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131532 sbgp-ipAddrBlock: critical IPv4: 103.98.228.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:8d:f8:3f:b9:56:b8:cb:2a:9b:bb:4f:ba:0b:eb:3c:dc:6c: 73:e2:1b:08:db:75:01:a7:8e:9c:7b:db:21:7a:34:64:59:75: 38:73:30:51:0d:07:97:b4:b8:83:24:44:90:75:1e:c9:39:25: 1b:72:79:d3:70:38:70:e2:8a:0b:e2:7b:ec:71:18:95:81:ed: f2:91:12:2f:2e:32:77:e9:a8:f3:db:aa:ed:6d:31:c7:fb:8b: cc:4e:23:72:b5:6d:7b:42:6d:40:67:75:38:a8:6d:18:1b:d7: d3:e6:1c:5e:ad:a3:56:a9:3c:53:82:af:c8:dc:54:5a:89:9b: 83:49:af:a6:3a:ec:7f:6e:74:d7:50:d4:50:e5:53:fd:ac:d6: 5a:31:3b:88:d0:64:57:cb:d0:e2:e8:4a:a0:64:62:12:b6:d2: 06:c5:51:2a:87:d3:e8:1d:a8:fb:6e:42:40:4c:de:24:10:3a: 2e:a8:26:33:38:76:9c:af:80:71:7e:f8:ed:66:3a:44:1e:a1: 4a:b4:0e:fd:2e:0b:9c:70:00:6b:7d:d7:31:35:f7:9a:8a:b8: b7:9d:cb:d1:0e:5c:50:7e:39:e5:d8:57:f2:45:46:46:53:05: ad:25:bd:e1:30:cb:57:ce:a4:53:8b:10:61:d5:cc:b6:dc:2f: 6c:7f:f0:43 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAK+DMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTI0MjNaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKEM0QTI2NTI0NkY3OUI1OUFGNjBFRjdBQzI4QkNFNjQ2Q0I0NEU3 MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeFgD8pMXwqtnNnG6 zo39+YIMFdmVYo1GgHFisrs9GbKzbGe3O9z813mOt6uX2VYGwbZtIaNttS+9pXjM vGOVgh0s93JwfLHKCDHfpLpodjnhUMxZK7HVCSSkaZiItdNMzkYRs0hQToBhY+gf yXD7Sv6AD3/AzQwlAdrh6gXKmB5UMzEpuiu0UScJ0wj/WGZFZDY5ynPxddUsqJJk G8o3mt5ZKSnMr3C10iorvfs/+IHjPJUoB+2VNBP4N0sivdj8x6AN8Qic00JXKJg0 53teu5rpXJ+7dR+9n8ycjFzcYZO45LJnNsyuU2xnNRv3JIDs0cS9+iepfeQmdF40 apmNAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUxKJlJG95tZr2DvesKLzmRstE5wMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1 NzMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjU3My94S0psSkc5NXRacjJEdmVzS0x6bVJzdEU1d00ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIBzDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdi5DANBgkqhkiG9w0BAQsFAAOCAQEAjI34P7lWuMsqm7tPugvr PNxsc+IbCNt1AaeOnHvbIXo0ZFl1OHMwUQ0Hl7S4gyREkHUeyTklG3J503A4cOKK C+J77HEYlYHt8pESLy4yd+mo89uq7W0xx/uLzE4jcrVte0JtQGd1OKhtGBvX0+Yc Xq2jVqk8U4KvyNxUWombg0mvpjrsf25011DUUOVT/azWWjE7iNBkV8vQ4uhKoGRi ErbSBsVRKofT6B2o+25CQEzeJBA6LqgmMzh2nK+AcX747WY6RB6hSrQO/S4LnHAA a33XMTX3moq4t53L0Q5cUH455dhX8kVGRlMFrSW94TDLV86kU4sQYdXMttwvbH/w Qw== -----END CERTIFICATE-----Generated at Sun May 19 10:28:34 2024 by rpki-client on console-ams.rpki-client.org