Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GCxI0kg50SP5l56XkJ1BMn9OVj8.cer
File: GCxI0kg50SP5l56XkJ1BMn9OVj8.cer (raw, json)
Hash identifier: QspL6Qm4HwsYl1O6ZSDFZvJTaeMPauFFPhCr2K6fqZE=
Subject key identifier: 18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E367
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:14:30 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 45075
AS: 55468
IP: 43.248.112.0/22
IP: 101.129.0.0/16
IP: 103.39.204.0/22
IP: 122.10.132.0/23
IP: 122.10.136.0/23
IP: 2400:d100::/32
IP: 2402:bac0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 18:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58215 (0xe367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:14:30 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=182C48D24839D123F9979E97909D41327F4E563F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:93:c7:fb:2c:b5:be:33:2d:45:1c:c3:a5:
ce:8d:4a:03:f8:39:28:ea:17:94:6d:f4:7c:4e:43:
e3:4c:84:f5:7d:7c:38:e5:8e:f0:25:2c:c7:5e:16:
a1:ee:35:94:9b:e7:f4:2f:67:65:41:d1:11:b1:07:
a5:17:47:dd:31:f5:4c:0e:70:b7:94:d5:bd:46:ec:
2f:3a:bc:b8:a6:0e:cd:55:1d:07:25:a1:f6:1d:89:
68:8e:61:b6:48:f1:b8:af:33:16:92:97:ae:06:ab:
d7:90:8d:26:e0:63:4f:2c:4a:2a:b7:d4:2e:63:38:
ca:91:5b:f9:62:ca:fd:eb:4e:e1:04:f2:f9:ad:f4:
78:68:e7:77:9f:4a:5f:ca:73:cb:a7:4d:36:f0:43:
a1:f0:af:ce:18:78:e5:cc:51:9e:33:8a:58:db:84:
5f:9f:78:8d:d5:e9:c2:16:1e:9b:ce:5d:54:28:f9:
7a:fd:90:72:6a:6c:60:a4:b5:86:c0:4c:7e:91:3d:
6b:45:c6:7b:93:94:a1:28:ec:3c:fb:b9:aa:e5:2a:
80:26:ad:de:df:2b:b3:b9:76:24:cd:a8:3f:0e:4f:
40:fb:25:8c:c9:a9:f2:06:91:9e:48:ec:2b:29:42:
09:49:a7:f6:f9:e7:85:25:d0:c8:6e:97:1b:d5:99:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45075
55468
sbgp-ipAddrBlock: critical
IPv4:
43.248.112.0/22
101.129.0.0/16
103.39.204.0/22
122.10.132.0/23
122.10.136.0/23
IPv6:
2400:d100::/32
2402:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
32:ef:9a:dc:a3:ee:e0:d8:f9:c7:91:2a:27:01:b1:58:4a:97:
a3:91:43:f1:00:ab:1f:dd:4a:35:88:ec:7e:ce:40:48:81:51:
c7:c9:a0:ba:b7:13:44:65:a3:a8:58:29:92:36:66:7b:5a:0d:
bb:1d:8c:cb:67:2e:c5:a2:45:37:72:96:b8:6f:b5:a1:91:b9:
06:a5:a0:9a:c7:47:51:b8:11:4f:aa:c6:47:f0:c1:89:33:4a:
f0:78:3a:8a:07:9e:75:e5:7f:83:fd:73:da:aa:e6:e5:1a:d0:
f1:9d:39:01:4c:63:30:60:f7:4d:40:99:52:70:63:07:1b:1f:
9a:e9:66:46:8b:ed:2b:91:c3:e4:20:92:8f:5a:21:0b:8c:5b:
dd:10:a9:5c:c5:d7:b8:9f:cf:e5:0b:e0:9b:6d:a4:96:30:6b:
c9:49:67:90:13:f6:0c:4c:d8:35:8c:19:6e:e9:38:2e:77:ce:
65:4c:6d:12:b4:05:ab:d3:f2:22:61:0d:54:80:5a:8e:47:22:
11:89:25:23:db:e3:f7:d8:f0:ab:d6:c9:da:2a:cf:ed:8c:8c:
07:78:29:fc:fb:43:bb:ba:9b:e5:98:85:02:4a:6f:5a:81:da:
4d:ea:c0:fe:7a:31:ff:1b:43:8e:ec:5c:e5:98:d4:cb:af:eb:
7d:08:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:38:07 2025 by rpki-client