<div dir="ltr"><div><br></div>Not sure what is wrong here, Can you let me know if I am missing something here.<div><br></div><div><br><div><br></div><div><p class="MsoNormal">16[KNL] creating acquire job for policy
fc00:cada:c406:607::1001/128[tcp/43005] === fc00:cada:c406::200/128[tcp/8190]
with reqid {2}<span></span></p>
<p class="MsoNormal">2017-11-13 15:58:56,001-HalTransport.py-94-INFO-Start a
agent transport interface, path = [/tmp/Hal/agent/client/1/push]<span></span></p>
<p class="MsoNormal">15[IKE] initiating IKE_SA rpdfc00:cada:c406::200[1] to
fc00:cada:c406::200<span></span></p>
<p class="MsoNormal">15[ENC] generating IKE_SA_INIT request 0 [ SA KE No
N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) N(REDIR_SUP) ]<span></span></p>
<p class="MsoNormal">15[NET] sending packet: from fc00:cada:c406:607::1001[500]
to fc00:cada:c406::200[500] (456 bytes)<span></span></p>
<p class="MsoNormal">10[NET] received packet: from fc00:cada:c406::200[500] to
fc00:cada:c406:607::1001[500] (453 bytes)<span></span></p>
<p class="MsoNormal">10[ENC] parsed IKE_SA_INIT response 0 [ SA KE No CERTREQ ]<span></span></p>
<p class="MsoNormal">10[IKE] received cert request for "C=US, O=CableLabs,
OU=TEST Root CA01, CN=TEST CableLabs Root Certification Authority"<span></span></p>
<p class="MsoNormal">10[IKE] received 1 cert requests for an unknown ca<span></span></p>
<p class="MsoNormal">10[IKE] sending cert request for "C=US, O=CableLabs,
OU=TEST Device CA01, CN=TEST CableLabs Device Certification Authority"<span></span></p>
<p class="MsoNormal">10[IKE] sending cert request for "C=US, O=CableLabs,
OU=TEST Root CA01, CN=TEST CableLabs Root Certification Authority"<span></span></p>
<p class="MsoNormal">10[IKE] no private key found for 'C=US, O=ARRIS Group, Inc.,
OU=DCA Remote Device Certificate, CN=FF:FF:05:E6:E6:20'<span></span></p>
<p class="MsoNormal">13[KNL] creating delete job for CHILD_SA
ESP/0x00000000/fc00:cada:c406::200<span></span></p>
<p class="MsoNormal">08[JOB] CHILD_SA ESP/0x00000000/fc00:cada:c406::200 not
found for delete<span></span></p>
<p class="MsoNormal">06[KNL] creating acquire job for policy
fc00:cada:c406:607::1001/128[tcp/39047] === fc00:cada:c406::200/128[tcp/8190]
with reqid {2}<span></span></p>
<p class="MsoNormal">16[IKE] initiating IKE_SA rpdfc00:cada:c406::200[2] to
fc00:cada:c406::200<span></span></p>
<p class="MsoNormal">16[ENC] generating IKE_SA_INIT request 0 [ SA KE No
N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) N(REDIR_SUP) ]<span></span></p>
<p class="MsoNormal">16[NET] sending packet: from fc00:cada:c406:607::1001[500]
to fc00:cada:c406::200[500] (456 bytes)<span></span></p>
<p class="MsoNormal">11[NET] received packet: from fc00:cada:c406::200[500] to
fc00:cada:c406:607::1001[500] (453 bytes)<span></span></p>
<p class="MsoNormal">11[ENC] parsed IKE_SA_INIT response 0 [ SA KE No CERTREQ ]<span></span></p>
<p class="MsoNormal">11[IKE] received cert request for "C=US, O=CableLabs,
OU=TEST Root CA01, CN=TEST CableLabs Root Certification Authority"<span></span></p>
<p class="MsoNormal">11[IKE] received 1 cert requests for an unknown ca<span></span></p>
<p class="MsoNormal">11[IKE] sending cert request for "C=US, O=CableLabs,
OU=TEST Device CA01, CN=TEST CableLabs Device Certification Authority"<span></span></p>
<p class="MsoNormal">11[IKE] sending cert request for "C=US, O=CableLabs,
OU=TEST Root CA01, CN=TEST CableLabs Root Certification Authority"<span></span></p>
<p class="MsoNormal"><span style="background:yellow">11[IKE]
no private key found for 'C=US, O=ARRIS Group, Inc., OU=DCA Remote Device
Certificate, CN=FF:FF:05:E6:E6:20</span><span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">root@plnx_aarch64:~# <span style="background:yellow">ip -s xfrm state</span> <span></span></p>
<p class="MsoNormal">src fc00:cada:c406:607::1001 dst fc00:cada:c406::200<span></span></p>
<p class="MsoNormal"> proto esp spi
0x00000000(0) reqid 2(0x00000002) mode transport<span></span></p>
<p class="MsoNormal"> replay-window 0
seq 0x00000002 flag (0x00000000)<span></span></p>
<p class="MsoNormal"> anti-replay
context: seq 0x0, oseq 0x0, bitmap 0x00000000<span></span></p>
<p class="MsoNormal"> sel src
fc00:cada:c406:607::1001/128 dst fc00:cada:c406::200/128 proto tcp sport 39047
dport 8190 uid 0<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(bytes), hard (INF)(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(packets), hard (INF)(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 165(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 16:01:42 use -<span></span></p>
<p class="MsoNormal"> stats:<span></span></p>
<p class="MsoNormal">
replay-wind<span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">root@plnx_aarch64:~# <span style="background:yellow">ip -s xfrm policy</span><span></span></p>
<p class="MsoNormal">src fc00:cada:c406::200/128 dst fc00:cada:c406:607::1001/128
<span style="background:yellow">proto tcp</span> uid 0<span></span></p>
<p class="MsoNormal"> dir in action
allow index 88 priority 234336 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(bytes), hard (INF)(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(packets), hard (INF)(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 15:58:55 use -<span></span></p>
<p class="MsoNormal"> tmpl src :: dst
::<span></span></p>
<p class="MsoNormal">
proto esp spi 0x00000000(0) reqid 2(0x00000002) mode transport<span></span></p>
<p class="MsoNormal">
level required share any <span></span></p>
<p class="MsoNormal"> enc-mask
ffffffff auth-mask ffffffff comp-mask ffffffff<span></span></p>
<p class="MsoNormal">src fc00:cada:c406:607::1001/128 dst fc00:cada:c406::200/128
<span style="background:yellow">proto tcp</span> uid 0<span></span></p>
<p class="MsoNormal"> dir out action
allow index 81 priority 234336 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(bytes), hard (INF)(bytes)<span></span></p>
<p class="MsoNormal"> limit:
soft (INF)(packets), hard (INF)(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 15:58:55 use -<span></span></p>
<p class="MsoNormal"> tmpl src :: dst
::<span></span></p>
<p class="MsoNormal">
proto esp spi 0x00000000(0) reqid 2(0x00000002) mode transport<span></span></p>
<p class="MsoNormal">
level required
share any <span></span></p>
<p class="MsoNormal"> enc-mask
ffffffff auth-mask ffffffff comp-mask ffffffff<span></span></p>
<p class="MsoNormal">src fc00:cada:c406::200/128 dst fc00:cada:c406:607::1001/<span style="background:yellow">128 proto l2tp</span> uid 0<span></span></p>
<p class="MsoNormal"> dir in action
allow index 72 priority 234336 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(bytes), hard (INF)(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(packets), hard (INF)(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 15:58:55 use -<span></span></p>
<p class="MsoNormal"> tmpl src :: dst ::<span></span></p>
<p class="MsoNormal">
proto esp spi 0x00000000(0) reqid 1(0x00000001) mode transport<span></span></p>
<p class="MsoNormal">
level required share any <span></span></p>
<p class="MsoNormal"> enc-mask
ffffffff auth-mask ffffffff comp-mask ffffffff<span></span></p>
<p class="MsoNormal">src fc00:cada:c406:607::1001/128 dst fc00:cada:c406::200/128
<span style="background:yellow">proto l2tp</span> uid 0<span></span></p>
<p class="MsoNormal"> dir out action
allow index 65 priority 234336 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(bytes), hard (INF)(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft (INF)(packets), hard (INF)(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 15:58:55 use -<span></span></p>
<p class="MsoNormal"> tmpl src :: dst
::<span></span></p>
<p class="MsoNormal">
proto esp spi 0x00000000(0) reqid 1(0x00000001) mode transport<span></span></p>
<p class="MsoNormal">
level required share any <span></span></p>
<p class="MsoNormal"> enc-mask
ffffffff auth-mask ffffffff comp-mask ffffffff<span></span></p>
<p class="MsoNormal">src <a href="http://0.0.0.0/0">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0">0.0.0.0/0</a> uid 0<span></span></p>
<p class="MsoNormal"> socket in action
allow index 59 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use -<span></span></p>
<p class="MsoNormal">src <a href="http://0.0.0.0/0">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0">0.0.0.0/0</a> uid 0<span></span></p>
<p class="MsoNormal"> socket out action
allow index 52 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use -<span></span></p>
<p class="MsoNormal">src <a href="http://0.0.0.0/0">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0">0.0.0.0/0</a> uid 0<span></span></p>
<p class="MsoNormal"> socket in action
allow index 43 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use -<span></span></p>
<p class="MsoNormal">src <a href="http://0.0.0.0/0">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0">0.0.0.0/0</a> uid 0<span></span></p>
<p class="MsoNormal"> socket out action
allow index 36 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use -<span></span></p>
<p class="MsoNormal">src ::/0 dst ::/0 uid 0<span></span></p>
<p class="MsoNormal"> socket in action
allow index 27 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use -<span></span></p>
<p class="MsoNormal">src ::/0 dst ::/0 uid 0<span></span></p>
<p class="MsoNormal"> socket out action
allow index 20 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use -<span></span></p>
<p class="MsoNormal">src ::/0 dst ::/0 uid 0<span></span></p>
<p class="MsoNormal"> socket in action
allow index 11 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal"> limit:
soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use 2017-11-13 16:04:42<span></span></p>
<p class="MsoNormal">src ::/0 dst ::/0 uid 0<span></span></p>
<p class="MsoNormal"> socket out action
allow index 4 priority 0 share any flag (0x00000000)<span></span></p>
<p class="MsoNormal"> lifetime config:<span></span></p>
<p class="MsoNormal">
limit: soft 0(bytes), hard 0(bytes)<span></span></p>
<p class="MsoNormal">
limit: soft 0(packets), hard 0(packets)<span></span></p>
<p class="MsoNormal">
expire add: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal">
expire use: soft 0(sec), hard 0(sec)<span></span></p>
<p class="MsoNormal"> lifetime current:<span></span></p>
<p class="MsoNormal">
0(bytes), 0(packets)<span></span></p>
<p class="MsoNormal"> add
2017-11-13 18:46:13 use 2017-11-13 16:04:30<span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">################# Certificates ######################<span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">v --in <b>privKey.pem</b><span></span></p>
<p class="MsoNormal"> privkey: RSA 2048 bits<span></span></p>
<p class="MsoNormal"> keyid:
85:d3:eb:51:9a:a8:1e:f6:ff:14:ee:cc:64:f6:2f:e0:32:99:1b:ce<span></span></p>
<p class="MsoNormal"> subjkey:
71:83:c0:b4:3e:40:06:f1:e5:30:d2:14:2c:82:e7:76:13:37:f4:6f<span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# pki --print --type x509 --in <b>Dcert.pem</b><span></span></p>
<p class="MsoNormal"> opening 'Dcert.pem' failed: No such file or directory<span></span></p>
<p class="MsoNormal">building CRED_CERTIFICATE - X509 failed, tried 4 builders<span></span></p>
<p class="MsoNormal">parsing input failed<span></span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# pki --print --type x509 --in
DCert.pem <span></span></p>
<p class="MsoNormal"> subject: "C=US, O=ARRIS Group, Inc.,
OU=DCA Remote Device Certificate, CN=FF:FF:05:E6:E6:20"<span></span></p>
<p class="MsoNormal"> issuer: "C=US, O=CableLabs, OU=TEST
Device CA01, CN=TEST CableLabs Device Certification Authority"<span></span></p>
<p class="MsoNormal"> validity: not before Sep 14 16:13:24 2017, ok<span></span></p>
<p class="MsoNormal">
not after Sep 14 16:13:24 2018, ok (expires in 305 days)<span></span></p>
<p class="MsoNormal"> serial: 01:ff:ff:05:e6:e6:20<span></span></p>
<p class="MsoNormal"> authkeyId:
f6:dc:40:8a:89:b6:7b:7a:08:f6:78:b5:4a:28:7a:7f:57:9b:f9:9b<span></span></p>
<p class="MsoNormal"> subjkeyId:
71:83:c0:b4:3e:40:06:f1:e5:30:d2:14:2c:82:e7:76:13:37:f4:6f<span></span></p>
<p class="MsoNormal"> pubkey: RSA 2048 bits<span></span></p>
<p class="MsoNormal"> keyid:
85:d3:eb:51:9a:a8:1e:f6:ff:14:ee:cc:64:f6:2f:e0:32:99:1b:ce<span></span></p>
<p class="MsoNormal"> subjkey:
71:83:c0:b4:3e:40:06:f1:e5:30:d2:14:2c:82:e7:76:13:37:f4:6f<span></span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# <span></span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# <span></span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# <span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# pki --print --type x509 --in <b>DMCert.pem</b><span></span></p>
<p class="MsoNormal"> subject: "C=US, O=CableLabs, OU=TEST
Device CA01, CN=TEST CableLabs Device Certification Authority"<span></span></p>
<p class="MsoNormal"> issuer: "C=US, O=CableLabs, OU=TEST
Root CA01, CN=TEST CableLabs Root Certification Authority"<span></span></p>
<p class="MsoNormal"> validity: not before Dec 09 23:08:49 2014, ok<span></span></p>
<p class="MsoNormal">
not after Dec 09 23:08:49
2049, ok (expires in 11714 days)<span></span></p>
<p class="MsoNormal"> serial: a0:16:bc:73:85:0e:65:37<span></span></p>
<p class="MsoNormal"> altNames: CN=SYMC-3072-5<span></span></p>
<p class="MsoNormal"> flags: CA CRLSign <span></span></p>
<p class="MsoNormal"> pathlen: 0<span></span></p>
<p class="MsoNormal"> authkeyId:
89:62:79:3d:b4:07:c9:f3:c6:97:59:dd:b6:dc:65:0b:33:54:ff:fb<span></span></p>
<p class="MsoNormal"> subjkeyId:
f6:dc:40:8a:89:b6:7b:7a:08:f6:78:b5:4a:28:7a:7f:57:9b:f9:9b<span></span></p>
<p class="MsoNormal"> pubkey: RSA 3072 bits<span></span></p>
<p class="MsoNormal"> keyid:
b7:98:32:e4:ae:30:02:57:f7:ad:cb:2b:37:41:17:9c:1b:9d:79:28<span></span></p>
<p class="MsoNormal"> subjkey:
f6:dc:40:8a:89:b6:7b:7a:08:f6:78:b5:4a:28:7a:7f:57:9b:f9:9b<span></span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# ls<span></span></p>
<p class="MsoNormal">DCert.pem
DMCertTemp.der privKey.pem<span></span></p>
<p class="MsoNormal">DCertTemp.der
DRCert.pem privKeyTemp.der<span></span></p>
<p class="MsoNormal">DMCert.pem
DRCertTemp.der privKeyTemp1.der<span></span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal"><span> </span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# pki --print --type x509 --in <b>DRCert.pem</b>
<span></span></p>
<p class="MsoNormal"> subject: "C=US, O=CableLabs, OU=TEST
Root CA01, CN=TEST CableLabs Root Certification Authority"<span></span></p>
<p class="MsoNormal"> issuer: "C=US, O=CableLabs, OU=TEST
Root CA01, CN=TEST CableLabs Root Certification Authority"<span></span></p>
<p class="MsoNormal"> validity: not before Nov 11 17:19:44 2014, ok<span></span></p>
<p class="MsoNormal">
not after Nov 11 17:19:44 2064, ok (expires in 17165 days)<span></span></p>
<p class="MsoNormal"> serial: b1:b0:d3:be:83:ee:bf:e3<span></span></p>
<p class="MsoNormal"> altNames: CN=MPKI-4096-1-206<span></span></p>
<p class="MsoNormal"> flags: CA CRLSign self-signed
<span></span></p>
<p class="MsoNormal"> subjkeyId: 89:62:79:3d:b4:07:c9:f3:c6:97:59:dd:b6:dc:65:0b:33:54:ff:fb<span></span></p>
<p class="MsoNormal"> pubkey: RSA 4096 bits<span></span></p>
<p class="MsoNormal"> keyid:
bd:0e:4c:0f:21:cf:f0:49:af:19:34:3b:c2:64:c5:31:a1:2e:11:07<span></span></p>
<p class="MsoNormal"> subjkey:
89:62:79:3d:b4:07:c9:f3:c6:97:59:dd:b6:dc:65:0b:33:54:ff:fb<span></span></p>
<p class="MsoNormal">root@plnx_aarch64:/var/priv# <span></span></p>
<p class="MsoNormal"><span> </span></p></div></div></div>