Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
File: 8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer (raw, json)
Hash identifier: mM6lDyPB0YzBy18V+m/x5ur1QOOaSYr4WKJfiqHrpsc=
Subject key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:09:52 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 63582 -- 63583
AS: 139137
AS: 139140
IP: 45.120.240.0/22
IP: 103.61.60.0/22
IP: 2402:7d80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 09:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57895 (0xe227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:09:52 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:04:d3:e5:92:0c:22:16:ea:50:e0:30:67:
37:2e:3b:0f:b8:00:59:74:a5:be:58:12:06:81:2e:
70:bd:2a:6a:2e:74:75:26:ba:f1:d0:83:81:e8:7a:
ae:6b:b7:4d:0f:2d:78:b7:54:05:72:44:67:f6:1c:
cf:6e:28:bc:6f:48:2f:4b:ea:05:ed:e7:4c:da:5a:
c7:c4:dc:03:68:b3:ee:4b:95:0c:32:90:d7:9c:e7:
7f:a4:e7:43:e9:d7:d2:ee:c7:4b:67:65:cf:ac:c8:
19:89:46:81:37:52:24:93:c7:fb:57:83:76:ee:d8:
10:29:fd:93:f7:81:5c:81:ec:0d:0f:b9:27:d6:d0:
fb:0f:44:95:60:26:cf:38:05:c7:37:0e:ab:72:51:
17:a5:87:6b:b9:bb:22:25:ec:b0:7d:18:a9:35:90:
80:84:05:a5:18:2b:a2:ce:73:f8:d4:38:b5:c6:56:
a6:d4:7c:2f:52:4a:78:4a:38:e7:ec:ae:d5:77:3f:
b7:1a:e6:2f:df:09:f7:9a:6a:70:4e:b5:e5:c1:28:
67:af:6e:db:e4:ca:03:60:5d:86:99:77:10:48:ee:
77:04:bf:36:75:e8:40:5d:53:b8:99:f0:66:c2:65:
65:7e:5a:5a:b1:37:75:be:ff:3b:df:db:dc:bf:ea:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63582-63583
139137
139140
sbgp-ipAddrBlock: critical
IPv4:
45.120.240.0/22
103.61.60.0/22
IPv6:
2402:7d80::/32
Signature Algorithm: sha256WithRSAEncryption
67:b8:c3:3f:77:c8:95:42:6f:cf:f5:6e:27:c8:93:3c:79:82:
34:3b:9d:e3:d8:a0:7b:e5:65:58:ea:09:f9:8a:8d:fb:d9:49:
3b:0f:40:aa:0d:35:fd:c7:1b:f5:d1:b5:8b:67:0d:53:bb:17:
a3:01:24:50:c6:e9:db:2e:cb:49:47:00:17:8e:d7:2f:3b:54:
9d:84:8f:da:cd:da:2a:a0:a8:8a:2d:c1:fb:ff:1d:e4:68:57:
e1:17:c7:5d:94:9f:cd:bf:b6:6f:59:9c:7d:62:40:56:74:e1:
51:9c:62:a8:ba:6a:2b:3a:84:b3:f4:b1:49:26:c4:20:b3:e3:
89:b3:18:68:fd:6a:d4:74:8a:7d:aa:23:d9:0a:c2:38:37:2a:
0e:b1:ad:29:d4:45:78:2d:48:f9:c0:ab:86:17:cc:79:bd:e2:
cb:de:52:41:34:03:a4:ff:b2:10:9f:2c:7a:01:20:23:c5:57:
a3:2b:5d:84:7d:e3:f8:5f:4c:83:98:da:16:65:ed:fe:8b:42:
e1:b8:a8:a1:50:77:f3:ec:b4:fb:d3:d5:a9:bf:f3:32:0f:6e:
07:f7:d4:99:5d:7a:d8:c6:0f:97:b0:c8:f3:12:ed:01:5b:8e:
27:4e:14:79:67:27:57:b3:76:8a:a5:c4:fb:7e:b7:f9:8a:00:
dd:a4:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:25:37 2025 by rpki-client