$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer File: hkbqdDVucErt0WPsqU5aRCMI33g.cer (raw, json) Hash identifier: wMgAWtG1pHHs+eOCsTeBEuSgc0Ome6ww7Qni+zPYyyg= Subject key identifier: 86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BCAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/hkbqdDVucErt0WPsqU5aRCMI33g.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:57:07 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 24424 IP: 203.208.32.0/19 IP: 2401:3800::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48303 (0xbcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:57:07 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8646EA74356E704AEDD163ECA94E5A442308DF78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d5:6f:1a:52:bd:8e:4a:3d:73:29:da:a9:76: 63:68:6f:f2:f6:c4:51:cb:c1:60:ee:eb:56:06:10: 7f:fa:ce:04:c5:85:4d:6d:03:66:b1:2a:d2:30:ce: 5c:91:cc:66:18:e0:d8:f7:44:a2:79:3d:f5:0b:99: 1f:4a:97:4a:16:03:04:ed:a2:61:38:2f:30:0d:a6: 19:28:02:86:73:f7:b0:54:f5:ee:23:e4:4f:b8:6c: 82:8c:c3:50:93:98:06:7e:95:07:9b:d8:d5:18:ae: 05:fe:ce:42:42:7a:36:82:31:8a:f2:2d:27:af:27: 3f:51:a5:1e:82:28:72:08:ee:84:87:cd:fe:56:8b: 0d:4e:38:8a:19:3c:36:23:5f:6e:12:83:1c:f5:73: 3a:5e:9c:ec:6e:9b:63:f2:89:ce:fb:8e:98:dc:17: b3:23:77:9c:ec:0d:62:1d:6c:c0:a6:e4:91:6c:e9: ef:6b:22:74:c6:a5:78:3c:ea:0b:ad:c5:11:29:56: e5:91:49:1a:ab:8d:d1:fe:20:6d:5b:cd:9e:23:d2: 3f:fb:59:10:fb:ca:21:df:f0:53:39:50:d8:1c:07: cc:ac:20:ff:8a:14:d5:03:2f:47:58:6b:f9:36:a6: 7c:40:37:21:56:14:04:8d:3f:49:32:4d:30:f3:3c: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/hkbqdDVucErt0WPsqU5aRCMI33g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24424 sbgp-ipAddrBlock: critical IPv4: 203.208.32.0/19 IPv6: 2401:3800::/32 Signature Algorithm: sha256WithRSAEncryption 6a:67:09:38:77:34:f6:a3:84:a5:42:dc:50:82:37:78:05:98: 40:02:e8:53:a0:2b:b6:d4:62:ad:2a:8a:0b:f7:a7:da:11:a3: 98:4c:3c:85:3b:b2:15:39:dc:ef:cf:62:11:c0:31:68:da:72: 0c:65:5c:57:0b:05:96:5b:c7:ec:b8:99:44:df:01:01:a1:2d: 67:0a:8a:c8:a7:70:d2:b8:ef:76:45:5b:af:76:92:bb:f1:aa: b7:fb:71:4d:a1:bf:67:9c:7d:be:00:5a:02:ae:7d:29:b6:c9: d5:f0:ce:df:4e:4f:8c:9e:c1:4c:71:3c:13:15:24:4f:52:53: 22:64:ee:cf:35:6f:60:b6:2d:34:79:5e:a4:e0:04:1b:5e:a7: 64:bc:e5:1d:7b:cd:3e:38:d9:12:9b:bb:be:be:d9:8a:7b:74: ae:06:d4:43:30:d9:62:5b:bc:f6:bf:e9:c9:79:a7:4c:78:82: 5e:51:6b:e0:4f:2a:0f:14:ad:64:2f:1d:ab:bd:f0:eb:3d:7f: 59:58:f1:04:da:6f:88:17:fa:3d:f1:71:34:b5:35:3e:19:61: 89:0d:93:69:14:a8:19:56:29:36:b5:05:45:d7:ac:9b:e0:41: d4:23:8a:f7:4d:01:91:de:77:b8:21:50:de:7f:71:a0:83:b5: 50:84:7e:e8 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIDALyvMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU3MDdaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDg2NDZFQTc0MzU2RTcwNEFFREQxNjNFQ0E5NEU1QTQ0MjMwOERG NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp1W8aUr2OSj1zKdqp dmNob/L2xFHLwWDu61YGEH/6zgTFhU1tA2axKtIwzlyRzGYY4Nj3RKJ5PfULmR9K l0oWAwTtomE4LzANphkoAoZz97BU9e4j5E+4bIKMw1CTmAZ+lQeb2NUYrgX+zkJC ejaCMYryLSevJz9RpR6CKHII7oSHzf5Wiw1OOIoZPDYjX24Sgxz1czpenOxum2Py ic77jpjcF7Mjd5zsDWIdbMCm5JFs6e9rInTGpXg86gutxREpVuWRSRqrjdH+IG1b zZ4j0j/7WRD7yiHf8FM5UNgcB8ysIP+KFNUDL0dYa/k2pnxANyFWFASNP0kyTTDz PGIDAgMBAAGjggJ9MIICeTAdBgNVHQ4EFgQUhkbqdDVucErt0WPsqU5aRCMI33gw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz Mi8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzIvaGticWREVnVjRXJ0MFdQc3FVNWFSQ01JMzNnLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJfaDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEBcvQIDANBAIAAjAHAwUAJAE4ADANBgkqhkiG9w0BAQsFAAOCAQEAamcJ OHc09qOEpULcUII3eAWYQALoU6ArttRirSqKC/en2hGjmEw8hTuyFTnc789iEcAx aNpyDGVcVwsFllvH7LiZRN8BAaEtZwqKyKdw0rjvdkVbr3aSu/Gqt/txTaG/Z5x9 vgBaAq59KbbJ1fDO305PjJ7BTHE8ExUkT1JTImTuzzVvYLYtNHlepOAEG16nZLzl HXvNPjjZEpu7vr7Zint0rgbUQzDZYlu89r/pyXmnTHiCXlFr4E8qDxStZC8dq73w 6z1/WVjxBNpviBf6PfFxNLU1PhlhiQ2TaRSoGVYpNrUFRdesm+BB1COK900Bkd53 uCFQ3n9xoIO1UIR+6A== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:27 2024 by rpki-client on console-fra.rpki-client.org