Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GCxI0kg50SP5l56XkJ1BMn9OVj8.cer
File: GCxI0kg50SP5l56XkJ1BMn9OVj8.cer (raw, json)
Hash identifier: cjqvbEvnx3uHOGio+s7OhYi9UWsrCB9t5EXJh1RL8OQ=
Subject key identifier: 18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DA64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:19:09 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 45075
AS: 55468
IP: 43.248.112.0/22
IP: 101.129.0.0/16
IP: 103.39.204.0/22
IP: 122.10.132.0/23
IP: 122.10.136.0/23
IP: 2400:d100::/32
IP: 2402:bac0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55908 (0xda64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:19:09 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=182C48D24839D123F9979E97909D41327F4E563F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:93:c7:fb:2c:b5:be:33:2d:45:1c:c3:a5:
ce:8d:4a:03:f8:39:28:ea:17:94:6d:f4:7c:4e:43:
e3:4c:84:f5:7d:7c:38:e5:8e:f0:25:2c:c7:5e:16:
a1:ee:35:94:9b:e7:f4:2f:67:65:41:d1:11:b1:07:
a5:17:47:dd:31:f5:4c:0e:70:b7:94:d5:bd:46:ec:
2f:3a:bc:b8:a6:0e:cd:55:1d:07:25:a1:f6:1d:89:
68:8e:61:b6:48:f1:b8:af:33:16:92:97:ae:06:ab:
d7:90:8d:26:e0:63:4f:2c:4a:2a:b7:d4:2e:63:38:
ca:91:5b:f9:62:ca:fd:eb:4e:e1:04:f2:f9:ad:f4:
78:68:e7:77:9f:4a:5f:ca:73:cb:a7:4d:36:f0:43:
a1:f0:af:ce:18:78:e5:cc:51:9e:33:8a:58:db:84:
5f:9f:78:8d:d5:e9:c2:16:1e:9b:ce:5d:54:28:f9:
7a:fd:90:72:6a:6c:60:a4:b5:86:c0:4c:7e:91:3d:
6b:45:c6:7b:93:94:a1:28:ec:3c:fb:b9:aa:e5:2a:
80:26:ad:de:df:2b:b3:b9:76:24:cd:a8:3f:0e:4f:
40:fb:25:8c:c9:a9:f2:06:91:9e:48:ec:2b:29:42:
09:49:a7:f6:f9:e7:85:25:d0:c8:6e:97:1b:d5:99:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45075
55468
sbgp-ipAddrBlock: critical
IPv4:
43.248.112.0/22
101.129.0.0/16
103.39.204.0/22
122.10.132.0/23
122.10.136.0/23
IPv6:
2400:d100::/32
2402:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
75:d9:13:c0:da:4e:a2:7f:78:6b:e6:5f:a1:32:96:bd:00:d2:
c7:fb:1d:a0:eb:d9:af:db:69:e6:77:bb:68:95:5a:df:7a:1c:
df:c4:95:6d:71:de:28:e3:5d:3d:1f:31:c1:c5:28:0a:f7:26:
df:01:26:5a:90:37:b0:df:c5:9a:b6:fc:7e:f4:60:7b:17:25:
5f:7c:48:2b:3b:dc:52:3f:ce:d3:de:f9:3d:1c:4d:a2:00:e2:
46:fd:e5:67:0f:9a:4a:07:d4:f0:9d:3c:6e:03:7b:08:17:4b:
a3:d0:ff:7e:f3:41:a8:20:f7:0f:8a:f8:b5:8b:48:e0:d0:e8:
47:32:90:67:89:27:96:78:fe:71:ea:90:ed:fb:bc:8d:d3:f8:
94:fd:35:e9:06:d0:88:c3:43:c0:74:8b:b3:b7:be:66:78:58:
20:65:0f:ba:56:5b:cd:cb:59:90:52:ef:5d:6a:ee:5b:ee:b7:
da:a4:64:d1:bb:5f:ff:d0:7a:f7:1b:01:ab:ea:1f:4f:47:4c:
8a:5a:ce:d3:d0:ed:60:80:9f:84:84:a3:bf:ec:f8:14:51:c0:
a7:80:4c:22:e3:a3:12:86:53:40:b4:c3:18:1f:26:74:7d:4c:
e4:23:69:dc:0e:43:0c:dc:5d:de:01:71:21:4b:3a:74:fb:45:
cd:4f:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:32:23 2025 by rpki-client