Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2SYi6AR8q-hBFc2mnzsReAbUXOw.cer
File: 2SYi6AR8q-hBFc2mnzsReAbUXOw.cer (raw, json)
Hash identifier: U9Y6CmUg80vFlMqpC7OhhIFT7eAV0hrXx1VIpPjugK8=
Subject key identifier: D9:26:22:E8:04:7C:AB:E8:41:15:CD:A6:9F:3B:11:78:06:D4:5C:EC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CECF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/2SYi6AR8q-hBFc2mnzsReAbUXOw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:16:23 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 24430
IP: 120.72.128.0/17
IP: 211.156.192.0/19
IP: 2402:c5c0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52943 (0xcecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:16:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D92622E8047CABE84115CDA69F3B117806D45CEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:26:a7:60:6a:1e:9e:22:21:f8:60:15:b6:
2d:dd:ed:f0:75:28:0e:83:8f:50:40:e9:52:76:70:
1d:52:7b:32:d5:8d:51:90:ac:15:42:69:fc:41:8b:
e1:20:1d:c4:4e:38:c2:76:ee:ea:83:3c:eb:7a:35:
aa:6b:bf:34:2d:0e:f4:fd:b0:c3:a6:2c:09:a7:04:
4e:b0:fc:25:ef:3c:5e:be:ec:40:f2:7e:a6:36:d0:
1a:50:20:06:02:65:84:74:69:6c:eb:b1:4e:ff:72:
c1:80:a9:a2:f6:bc:20:6e:59:93:76:37:54:3e:69:
41:47:aa:57:70:50:f8:35:bd:0a:34:01:6b:f4:2a:
4e:1f:dd:c6:62:3b:56:3f:96:29:3b:38:0e:93:87:
61:2c:55:ac:bc:5a:67:39:aa:dc:14:da:ee:c4:a0:
21:a7:1c:8e:83:e2:d7:79:63:89:f6:8d:c2:5f:e0:
ac:10:28:c4:56:e2:18:46:bd:11:a8:ce:df:67:17:
ba:ae:c6:6f:8f:8b:bf:6e:6c:fb:e3:38:88:29:be:
9a:ce:8f:f1:ea:58:a8:cc:dc:35:97:7f:3b:ec:5f:
54:99:96:cf:5c:e2:c5:dd:a3:ee:04:a2:fa:78:ac:
13:f9:d9:de:55:17:d3:27:30:dd:b9:c4:c8:98:30:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:22:E8:04:7C:AB:E8:41:15:CD:A6:9F:3B:11:78:06:D4:5C:EC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/2SYi6AR8q-hBFc2mnzsReAbUXOw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24430
sbgp-ipAddrBlock: critical
IPv4:
120.72.128.0/17
211.156.192.0/19
IPv6:
2402:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
17:70:06:7e:79:86:47:ee:8c:cb:fe:57:ee:27:d7:1c:cb:5d:
8e:f2:23:8e:8b:e0:5b:54:89:81:27:43:48:bf:a2:53:6c:c5:
6e:12:1b:d2:0f:f5:c8:0d:ac:35:25:af:ee:6a:e6:81:44:dc:
5f:d1:1f:e4:cc:14:e4:ba:b3:15:8d:2e:3a:7d:2a:60:d1:e1:
ad:3e:58:95:64:77:e9:4e:cf:8d:18:e8:9d:73:b8:7d:19:5e:
f7:fe:cf:31:d2:34:a2:18:da:04:b7:bb:3c:94:81:4e:ca:ed:
75:57:cc:9f:42:9e:69:56:71:8d:c3:1e:3e:e2:f6:72:00:e9:
9b:e7:54:0b:54:d1:80:be:ac:9a:89:30:3e:6a:c4:4e:5e:b5:
b8:8f:e2:3d:4b:e9:1b:b4:e8:cc:b3:b4:78:1e:c3:97:2b:ef:
7c:aa:2a:c6:c2:b6:c4:ea:d1:1b:c8:1d:e2:13:4f:8b:67:e0:
ca:b8:0c:d3:41:b2:c9:22:34:35:88:98:fb:a3:b8:52:2c:00:
b4:60:c6:8a:f1:74:4e:e9:d4:b1:3c:3e:42:94:9c:a5:06:5f:
90:ee:70:6a:da:48:4e:1e:3f:e1:58:3e:74:ec:f3:fe:af:68:
49:2d:04:a5:bb:4d:2d:ae:32:c2:9c:98:3f:63:6f:d2:65:ad:
ee:7e:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:40:37 2025 by rpki-client