$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer File: hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer (raw, json) Hash identifier: nCP9cGNELIKpFVlrVrxvH4ag1GYXDnZ9fAFOvIoTCnc= Subject key identifier: 86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BACF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:49:09 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: IP: 202.38.176.0/23 IP: 202.127.192.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47823 (0xbacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:49:09 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=86427E545A3E806B345F0D20C0E39E21C4E8501C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:d7:6b:ec:d9:a8:26:da:24:a8:d1:83:0c: ce:89:99:2d:38:ca:30:aa:da:59:c5:db:01:99:bd: 86:7c:7c:1b:b1:26:df:f2:57:f1:cb:f3:18:37:6a: 98:6a:6d:cd:d1:1a:6e:b2:f8:19:c0:e7:ef:5e:a2: 30:8d:4a:36:cc:82:41:ae:8c:25:7c:93:8c:e4:b4: 68:12:65:fc:1e:47:36:a9:fa:20:04:39:79:74:0b: 90:8b:22:e1:9e:64:e0:70:86:b9:99:73:62:d6:97: d5:66:0b:92:7f:8d:b5:16:1d:78:b3:f3:38:7d:df: 54:30:4e:26:b7:6e:45:0b:4f:ac:7f:92:b0:9e:17: c8:fb:64:ce:db:53:f6:a9:1d:31:e5:b3:64:57:31: 17:48:92:3e:ac:fa:06:d6:7d:94:28:f2:12:78:7a: d4:8c:79:61:b0:df:5b:eb:7c:51:8f:a3:d4:28:46: dd:2f:c9:5c:24:04:57:71:92:32:89:82:ae:29:db: 3f:ca:0d:83:ca:8b:f5:4d:50:2a:69:62:b5:2e:02: 2f:37:c8:dd:03:47:b3:fe:a9:e4:49:e4:db:d5:85: 50:88:93:8d:0d:73:76:4e:f7:89:81:e0:64:fd:e6: a9:e5:79:42:c9:84:95:90:4d:fe:2f:c8:a5:a5:1e: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.38.176.0/23 202.127.192.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:80:b6:06:73:75:6d:0d:d6:39:77:2f:22:16:81:4d:17:38: d3:e0:e7:5c:52:19:7a:82:dd:64:59:b8:30:dc:b6:92:ea:54: 86:94:e0:0b:fb:85:00:69:36:43:48:de:19:cd:c5:e9:b3:58: a8:4c:f2:0b:c9:ea:a3:f1:14:4f:72:32:4c:ed:58:73:ba:e7: 2d:94:8e:02:20:04:7d:d4:fe:ea:c5:25:4e:c7:fe:83:0b:1a: e0:c3:d8:0d:ea:94:17:c0:95:c8:7a:37:a2:9b:fe:08:45:9c: f5:e4:51:1e:5d:99:20:bc:b5:1f:1f:4c:49:60:06:21:45:6a: e1:06:64:af:71:61:2e:f8:6f:b4:0b:b5:ed:29:4b:df:92:76: 99:7b:1b:e3:a2:db:11:bc:b5:d2:4c:18:74:ba:5c:80:4e:e2: b7:e0:1d:50:51:cc:a6:11:c3:20:1d:24:5f:47:be:1f:35:07: a1:c7:85:47:7e:c2:15:73:f4:8e:22:fd:8f:7a:63:7b:ad:29: 2c:44:1c:93:29:6e:f2:af:bf:d7:85:da:68:c7:ff:50:39:32: 43:b1:8d:56:52:6a:f2:e0:e7:18:bd:3c:d8:44:de:4c:c7:db: 1b:30:93:a1:c3:19:6b:6b:4e:57:04:ab:fa:f2:b3:8d:19:17: dd:0b:cf:81 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDALrPMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ5MDlaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDg2NDI3RTU0NUEzRTgwNkIzNDVGMEQyMEMwRTM5RTIxQzRFODUw MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgddr7NmoJtokqNGD DM6JmS04yjCq2lnF2wGZvYZ8fBuxJt/yV/HL8xg3aphqbc3RGm6y+BnA5+9eojCN SjbMgkGujCV8k4zktGgSZfweRzap+iAEOXl0C5CLIuGeZOBwhrmZc2LWl9VmC5J/ jbUWHXiz8zh931QwTia3bkULT6x/krCeF8j7ZM7bU/apHTHls2RXMRdIkj6s+gbW fZQo8hJ4etSMeWGw31vrfFGPo9QoRt0vyVwkBFdxkjKJgq4p2z/KDYPKi/VNUCpp YrUuAi83yN0DR7P+qeRJ5NvVhVCIk40Nc3ZO94mB4GT95qnleULJhJWQTf4vyKWl HlCrAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUhkJ+VFo+gGs0Xw0gwOOeIcToUBww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIyOS9oa0otVkZvLWdHczBYdzBnd09PZUljVG9VQncubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQByiawAwQByn/AMA0GCSqGSIb3 DQEBCwUAA4IBAQBbgLYGc3VtDdY5dy8iFoFNFzjT4OdcUhl6gt1kWbgw3LaS6lSG lOAL+4UAaTZDSN4ZzcXps1ioTPILyeqj8RRPcjJM7VhzuuctlI4CIAR91P7qxSVO x/6DCxrgw9gN6pQXwJXIejeim/4IRZz15FEeXZkgvLUfH0xJYAYhRWrhBmSvcWEu +G+0C7XtKUvfknaZexvjotsRvLXSTBh0ulyATuK34B1QUcymEcMgHSRfR74fNQeh x4VHfsIVc/SOIv2PemN7rSksRByTKW7yr7/Xhdpox/9QOTJDsY1WUmry4OcYvTzY RN5Mx9sbMJOhwxlra05XBKv68rONGRfdC8+B -----END CERTIFICATE-----Generated at Fri Nov 22 12:14:40 2024 by rpki-client on console-ams.rpki-client.org