Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GCxI0kg50SP5l56XkJ1BMn9OVj8.cer
File: GCxI0kg50SP5l56XkJ1BMn9OVj8.cer (raw, json)
Hash identifier: yi6KKMDuSIT61g7Wsqoqzji2/+CAsW07RWdGMEfuWec=
Subject key identifier: 18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CEC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:16:10 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 45075
AS: 55468
IP: 43.248.112.0/22
IP: 101.129.0.0/16
IP: 103.39.204.0/22
IP: 122.10.132.0/23
IP: 122.10.136.0/23
IP: 2400:d100::/32
IP: 2402:bac0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52929 (0xcec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:16:10 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=182C48D24839D123F9979E97909D41327F4E563F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:93:c7:fb:2c:b5:be:33:2d:45:1c:c3:a5:
ce:8d:4a:03:f8:39:28:ea:17:94:6d:f4:7c:4e:43:
e3:4c:84:f5:7d:7c:38:e5:8e:f0:25:2c:c7:5e:16:
a1:ee:35:94:9b:e7:f4:2f:67:65:41:d1:11:b1:07:
a5:17:47:dd:31:f5:4c:0e:70:b7:94:d5:bd:46:ec:
2f:3a:bc:b8:a6:0e:cd:55:1d:07:25:a1:f6:1d:89:
68:8e:61:b6:48:f1:b8:af:33:16:92:97:ae:06:ab:
d7:90:8d:26:e0:63:4f:2c:4a:2a:b7:d4:2e:63:38:
ca:91:5b:f9:62:ca:fd:eb:4e:e1:04:f2:f9:ad:f4:
78:68:e7:77:9f:4a:5f:ca:73:cb:a7:4d:36:f0:43:
a1:f0:af:ce:18:78:e5:cc:51:9e:33:8a:58:db:84:
5f:9f:78:8d:d5:e9:c2:16:1e:9b:ce:5d:54:28:f9:
7a:fd:90:72:6a:6c:60:a4:b5:86:c0:4c:7e:91:3d:
6b:45:c6:7b:93:94:a1:28:ec:3c:fb:b9:aa:e5:2a:
80:26:ad:de:df:2b:b3:b9:76:24:cd:a8:3f:0e:4f:
40:fb:25:8c:c9:a9:f2:06:91:9e:48:ec:2b:29:42:
09:49:a7:f6:f9:e7:85:25:d0:c8:6e:97:1b:d5:99:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45075
55468
sbgp-ipAddrBlock: critical
IPv4:
43.248.112.0/22
101.129.0.0/16
103.39.204.0/22
122.10.132.0/23
122.10.136.0/23
IPv6:
2400:d100::/32
2402:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
08:77:1a:9c:a1:75:74:46:f1:f5:26:95:9a:f0:8d:8b:04:76:
86:bc:54:b1:b6:5a:b5:1a:07:9e:d5:a2:f8:9a:62:87:cf:06:
91:2c:84:f6:b4:b2:6f:08:6a:a8:c1:42:e3:36:03:e8:b9:8b:
32:46:40:84:86:b5:cf:bb:ff:9f:be:16:7f:60:1c:f2:72:05:
dc:9b:e2:41:29:7e:88:a3:cf:e8:be:b5:7f:59:f4:1e:48:91:
04:0c:d7:75:46:3d:33:34:1a:03:dc:8f:93:c1:3a:36:13:c5:
b0:e5:3a:07:b3:2c:ed:11:33:2e:f8:c2:02:51:85:cc:f8:99:
6b:d5:ac:62:ed:e2:3e:30:a8:04:3a:a4:ee:98:3a:31:ba:fd:
d3:bb:50:06:40:9c:b3:ab:a4:10:1e:fc:80:d4:4b:75:96:20:
c6:c4:81:53:89:24:71:3f:9e:2d:ca:00:87:01:46:1e:20:87:
0d:03:b3:00:af:46:d5:2a:9f:33:ff:2e:0d:64:ec:13:8b:e7:
45:ca:51:24:bb:9d:84:97:91:6d:f6:be:08:3e:c8:c7:31:0f:
4b:b1:1e:91:15:59:c8:7d:63:f8:e1:92:27:18:7b:8b:81:6e:
66:d1:22:e1:43:20:6c:c0:9c:5e:ce:4a:d7:d9:91:f1:56:dc:
23:c0:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:23:51 2025 by rpki-client