$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer File: hkJ-VFo-gGs0Xw0gwOOeIcToUBw.cer (raw, json) Hash identifier: vSGKS1yYFnPZC86vSm7r4esXjvHyeE0MMF9fDgzkkZY= Subject key identifier: 86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AE39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:19:50 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: IP: 202.38.176.0/23 IP: 202.127.192.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 19:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44601 (0xae39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:19:50 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=86427E545A3E806B345F0D20C0E39E21C4E8501C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:d7:6b:ec:d9:a8:26:da:24:a8:d1:83:0c: ce:89:99:2d:38:ca:30:aa:da:59:c5:db:01:99:bd: 86:7c:7c:1b:b1:26:df:f2:57:f1:cb:f3:18:37:6a: 98:6a:6d:cd:d1:1a:6e:b2:f8:19:c0:e7:ef:5e:a2: 30:8d:4a:36:cc:82:41:ae:8c:25:7c:93:8c:e4:b4: 68:12:65:fc:1e:47:36:a9:fa:20:04:39:79:74:0b: 90:8b:22:e1:9e:64:e0:70:86:b9:99:73:62:d6:97: d5:66:0b:92:7f:8d:b5:16:1d:78:b3:f3:38:7d:df: 54:30:4e:26:b7:6e:45:0b:4f:ac:7f:92:b0:9e:17: c8:fb:64:ce:db:53:f6:a9:1d:31:e5:b3:64:57:31: 17:48:92:3e:ac:fa:06:d6:7d:94:28:f2:12:78:7a: d4:8c:79:61:b0:df:5b:eb:7c:51:8f:a3:d4:28:46: dd:2f:c9:5c:24:04:57:71:92:32:89:82:ae:29:db: 3f:ca:0d:83:ca:8b:f5:4d:50:2a:69:62:b5:2e:02: 2f:37:c8:dd:03:47:b3:fe:a9:e4:49:e4:db:d5:85: 50:88:93:8d:0d:73:76:4e:f7:89:81:e0:64:fd:e6: a9:e5:79:42:c9:84:95:90:4d:fe:2f:c8:a5:a5:1e: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:42:7E:54:5A:3E:80:6B:34:5F:0D:20:C0:E3:9E:21:C4:E8:50:1C X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/hkJ-VFo-gGs0Xw0gwOOeIcToUBw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.38.176.0/23 202.127.192.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:a3:ae:86:5c:8d:d5:b3:8d:89:84:5b:d2:9c:0a:f0:25:19: 48:bd:2c:87:23:5c:1d:fd:29:2e:36:2a:67:12:b9:ea:f0:1d: 3c:54:1e:65:8d:79:50:a4:af:48:db:5e:e4:01:5f:2d:0e:57: 66:b1:52:cc:17:77:04:da:c0:42:6a:13:c0:e2:c1:55:19:e3: 80:30:37:28:c7:30:5a:61:ae:08:dd:2d:7e:11:4f:ed:16:f4: da:2a:c9:d3:39:ed:e1:9e:19:89:e3:58:b4:7c:da:58:fb:36: 40:5b:cb:f4:91:b8:db:13:d1:6a:bd:e1:d8:23:51:3b:84:5b: 6a:e9:6b:91:79:d3:74:64:55:28:e9:d1:8c:dc:00:9c:bc:28: 4e:d5:26:9d:c0:2b:40:31:28:f9:a9:08:89:79:a4:d6:1a:89: 41:92:f6:e5:78:d4:09:ab:39:6c:41:77:4d:79:5d:02:ff:dc: 17:8c:e3:b4:28:d5:b7:fd:ff:72:b8:20:27:69:9a:8c:28:27: 2f:cd:03:2b:2c:6c:01:ea:49:b0:1c:2e:50:55:1f:09:be:51: 0a:13:cb:f6:f8:ad:e1:c9:b1:4a:fd:e1:75:8a:78:c2:ac:62: c5:b3:da:35:0d:2d:0a:95:44:ce:b7:41:98:dc:0b:84:00:7e: 75:2f:15:71 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAK45MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTE5NTBaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKDg2NDI3RTU0NUEzRTgwNkIzNDVGMEQyMEMwRTM5RTIxQzRFODUw MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgddr7NmoJtokqNGD DM6JmS04yjCq2lnF2wGZvYZ8fBuxJt/yV/HL8xg3aphqbc3RGm6y+BnA5+9eojCN SjbMgkGujCV8k4zktGgSZfweRzap+iAEOXl0C5CLIuGeZOBwhrmZc2LWl9VmC5J/ jbUWHXiz8zh931QwTia3bkULT6x/krCeF8j7ZM7bU/apHTHls2RXMRdIkj6s+gbW fZQo8hJ4etSMeWGw31vrfFGPo9QoRt0vyVwkBFdxkjKJgq4p2z/KDYPKi/VNUCpp YrUuAi83yN0DR7P+qeRJ5NvVhVCIk40Nc3ZO94mB4GT95qnleULJhJWQTf4vyKWl HlCrAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUhkJ+VFo+gGs0Xw0gwOOeIcToUBww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIyOS9oa0otVkZvLWdHczBYdzBnd09PZUljVG9VQncubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQByiawAwQByn/AMA0GCSqGSIb3 DQEBCwUAA4IBAQBdo66GXI3Vs42JhFvSnArwJRlIvSyHI1wd/SkuNipnErnq8B08 VB5ljXlQpK9I217kAV8tDldmsVLMF3cE2sBCahPA4sFVGeOAMDcoxzBaYa4I3S1+ EU/tFvTaKsnTOe3hnhmJ41i0fNpY+zZAW8v0kbjbE9FqveHYI1E7hFtq6WuRedN0 ZFUo6dGM3ACcvChO1SadwCtAMSj5qQiJeaTWGolBkvbleNQJqzlsQXdNeV0C/9wX jOO0KNW3/f9yuCAnaZqMKCcvzQMrLGwB6kmwHC5QVR8JvlEKE8v2+K3hybFK/eF1 injCrGLFs9o1DS0KlUTOt0GY3AuEAH51LxVx -----END CERTIFICATE-----Generated at Sun May 19 14:41:54 2024 by rpki-client on console-ams.rpki-client.org