Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
File:                     92yeQzYd6kRgd61wKQVzgK__MmY.cer (raw, json)
Hash identifier:          3TE4H+5uYi53n+C3J53Ypb5HaBKANzyRpaDgSDP5kgE=
Subject key identifier:   F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       EB07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 07 Feb 2026 19:58:34 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 103.203.212.0/22
                          IP: 2404:280::/32
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 05:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60167 (0xeb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb  7 19:58:34 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=F76C9E43361DEA446077AD7029057380AFFF3266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:44:d0:1c:af:35:44:8d:e3:97:a7:23:06:
                    a6:c3:38:2b:e0:17:56:d7:25:79:5f:75:31:34:cd:
                    aa:34:bc:5f:10:bb:e6:ae:c1:90:86:0c:be:32:12:
                    23:7c:6b:f9:b2:c1:23:19:2a:4e:ab:58:c1:4b:36:
                    b2:b9:7b:21:0a:12:3f:ad:09:bd:45:1f:b0:ad:bd:
                    39:df:64:92:88:ae:26:35:5d:02:f3:27:0f:f0:87:
                    49:b5:de:34:02:b3:67:d3:e4:92:e5:32:f9:d5:42:
                    be:b8:30:21:82:df:b9:de:3b:fe:dd:4a:4c:22:7e:
                    88:18:28:5e:aa:9d:37:45:a3:68:8a:5f:46:ab:51:
                    22:c3:4b:82:36:5e:42:c1:ad:60:09:5a:ff:1f:c7:
                    ec:00:d1:af:65:fd:8d:e7:ab:48:18:43:f6:a3:af:
                    c3:b3:1d:81:5f:0d:cd:86:7c:11:15:71:fc:5f:ed:
                    a3:64:43:89:fc:68:2f:f8:e6:e6:17:41:e7:bb:80:
                    34:01:4f:97:cb:ec:9d:ee:81:43:9b:a5:39:52:8d:
                    09:6f:03:31:5f:a8:fa:4e:bd:ce:1c:b6:17:70:26:
                    85:81:ba:55:17:22:20:99:50:85:8b:52:e2:0b:43:
                    58:43:62:bd:3c:af:95:a3:b4:f4:b2:27:03:6c:6e:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.212.0/22
                IPv6:
                  2404:280::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:17:05:ef:e8:6f:4a:5d:9e:26:74:63:4d:eb:0f:1c:a5:83:
         25:cd:f8:63:08:5f:f8:d8:44:c1:a5:d2:64:00:8a:e0:e6:b4:
         75:af:94:b4:44:36:46:a6:41:0d:b0:b3:7c:d7:4d:0e:56:d9:
         0e:1d:19:dd:9e:e9:32:94:85:d5:9a:eb:ab:a3:c5:e7:8f:52:
         6e:27:6c:04:61:76:cd:86:cb:65:36:b9:12:85:7c:0b:f0:cb:
         6b:e7:c1:ee:c3:9b:97:00:3e:f1:d6:33:1c:ba:92:a3:f7:38:
         6a:ef:bc:80:ac:8f:22:00:d6:a7:db:05:e5:ac:5f:7f:2e:c9:
         47:fe:e4:4a:ce:cf:a4:fe:7d:fa:d9:fc:10:13:f6:07:fd:dd:
         c3:37:a0:75:75:4e:6b:0d:a0:e2:9d:e0:86:d8:d2:73:37:a6:
         a4:86:52:bd:c2:c2:b7:a5:0a:3d:e2:48:ae:00:25:89:33:53:
         f3:6d:5c:84:0e:cf:86:3e:b1:f7:6b:73:3e:eb:9d:11:2b:ce:
         3e:94:eb:5c:5a:f8:3d:24:cf:5c:89:64:0d:08:da:56:70:7d:
         c9:36:ae:33:c8:cc:1f:8a:88:69:1a:71:99:da:64:ee:5c:8e:
         57:a1:9a:15:fb:fe:d4:14:21:0b:00:8c:8c:92:4d:36:09:48:
         5c:ce:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:02 2026 by rpki-client