$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xKJlJG95tZr2DvesKLzmRstE5wM.cer File: xKJlJG95tZr2DvesKLzmRstE5wM.cer (raw, json) Hash identifier: FdwnLHrosXIui9E4vmPPjRWR9XmvnlqZx1ihi384nUc= Subject key identifier: C4:A2:65:24:6F:79:B5:9A:F6:0E:F7:AC:28:BC:E6:46:CB:44:E7:03 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BCB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/xKJlJG95tZr2DvesKLzmRstE5wM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:57:16 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 131532 IP: 103.98.228.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48307 (0xbcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:57:16 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C4A265246F79B59AF60EF7AC28BCE646CB44E703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:58:03:f2:93:17:c2:ab:67:36:71:ba:ce: 8d:fd:f9:82:0c:15:d9:95:62:8d:46:80:71:62:b2: bb:3d:19:b2:b3:6c:67:b7:3b:dc:fc:d7:79:8e:b7: ab:97:d9:56:06:c1:b6:6d:21:a3:6d:b5:2f:bd:a5: 78:cc:bc:63:95:82:1d:2c:f7:72:70:7c:b1:ca:08: 31:df:a4:ba:68:76:39:e1:50:cc:59:2b:b1:d5:09: 24:a4:69:98:88:b5:d3:4c:ce:46:11:b3:48:50:4e: 80:61:63:e8:1f:c9:70:fb:4a:fe:80:0f:7f:c0:cd: 0c:25:01:da:e1:ea:05:ca:98:1e:54:33:31:29:ba: 2b:b4:51:27:09:d3:08:ff:58:66:45:64:36:39:ca: 73:f1:75:d5:2c:a8:92:64:1b:ca:37:9a:de:59:29: 29:cc:af:70:b5:d2:2a:2b:bd:fb:3f:f8:81:e3:3c: 95:28:07:ed:95:34:13:f8:37:4b:22:bd:d8:fc:c7: a0:0d:f1:08:9c:d3:42:57:28:98:34:e7:7b:5e:bb: 9a:e9:5c:9f:bb:75:1f:bd:9f:cc:9c:8c:5c:dc:61: 93:b8:e4:b2:67:36:cc:ae:53:6c:67:35:1b:f7:24: 80:ec:d1:c4:bd:fa:27:a9:7d:e4:26:74:5e:34:6a: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:65:24:6F:79:B5:9A:F6:0E:F7:AC:28:BC:E6:46:CB:44:E7:03 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/xKJlJG95tZr2DvesKLzmRstE5wM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131532 sbgp-ipAddrBlock: critical IPv4: 103.98.228.0/22 Signature Algorithm: sha256WithRSAEncryption a7:1d:73:3a:2b:90:10:54:33:65:1f:ca:aa:0f:50:3a:40:39: 6a:da:d0:45:64:fe:ee:dc:0b:f6:eb:04:eb:81:e1:6a:37:0f: 06:f6:18:28:e3:e7:b3:2c:b8:62:b7:c3:a1:af:17:b6:cc:0c: 05:bc:88:9a:be:dc:4d:5d:4f:78:a5:e2:de:74:f8:0a:bf:86: da:45:93:11:46:88:8a:c3:e7:ce:69:21:98:b0:6e:3a:68:18: 13:c1:b6:e6:cb:de:b1:06:6f:1b:e0:65:e0:84:10:6f:52:da: 23:80:84:4f:d9:86:e0:40:17:49:29:66:09:23:16:d1:86:ba: e4:b4:ed:fe:c6:98:34:66:ed:47:59:21:94:53:bb:f8:11:ba: 7c:c8:b2:93:21:d1:c8:58:11:bd:ae:42:8e:e6:50:25:3c:df: 83:4c:9c:7c:89:f6:40:95:cd:d8:37:2f:ff:86:93:73:42:af: 9e:6e:5c:e8:da:cb:77:43:46:e6:55:84:1e:60:77:a2:e3:9a: 69:52:c5:fe:bd:42:ff:e5:ec:66:74:cb:68:c0:9c:5b:67:1a: 03:42:da:d3:4b:b9:74:c4:b7:1d:80:f9:31:e5:08:b6:12:6b: 65:47:2f:05:b3:a8:19:df:73:a3:0b:12:43:ad:75:82:e8:3c: 34:b3:60:29 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDALyzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU3MTZaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKEM0QTI2NTI0NkY3OUI1OUFGNjBFRjdBQzI4QkNFNjQ2Q0I0NEU3 MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeFgD8pMXwqtnNnG6 zo39+YIMFdmVYo1GgHFisrs9GbKzbGe3O9z813mOt6uX2VYGwbZtIaNttS+9pXjM vGOVgh0s93JwfLHKCDHfpLpodjnhUMxZK7HVCSSkaZiItdNMzkYRs0hQToBhY+gf yXD7Sv6AD3/AzQwlAdrh6gXKmB5UMzEpuiu0UScJ0wj/WGZFZDY5ynPxddUsqJJk G8o3mt5ZKSnMr3C10iorvfs/+IHjPJUoB+2VNBP4N0sivdj8x6AN8Qic00JXKJg0 53teu5rpXJ+7dR+9n8ycjFzcYZO45LJnNsyuU2xnNRv3JIDs0cS9+iepfeQmdF40 apmNAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUxKJlJG95tZr2DvesKLzmRstE5wMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1 NzMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjU3My94S0psSkc5NXRacjJEdmVzS0x6bVJzdEU1d00ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIBzDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdi5DANBgkqhkiG9w0BAQsFAAOCAQEApx1zOiuQEFQzZR/Kqg9Q OkA5atrQRWT+7twL9usE64HhajcPBvYYKOPnsyy4YrfDoa8XtswMBbyImr7cTV1P eKXi3nT4Cr+G2kWTEUaIisPnzmkhmLBuOmgYE8G25svesQZvG+Bl4IQQb1LaI4CE T9mG4EAXSSlmCSMW0Ya65LTt/saYNGbtR1khlFO7+BG6fMiykyHRyFgRva5CjuZQ JTzfg0ycfIn2QJXN2Dcv/4aTc0Kvnm5c6NrLd0NG5lWEHmB3ouOaaVLF/r1C/+Xs ZnTLaMCcW2caA0La00u5dMS3HYD5MeUIthJrZUcvBbOoGd9zowsSQ611gug8NLNg KQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:29 2024 by rpki-client on console-ams.rpki-client.org