Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GT6TtdHdBGkn5kmj_CMo4RnECGM.cer
File: GT6TtdHdBGkn5kmj_CMo4RnECGM.cer (raw, json)
Hash identifier: JkSzgedIdTsSQNNqDb++JWgRuvbE4GVYG4u/YTsBX/o=
Subject key identifier: 19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CF25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Apr 2025 06:47:41 +0000
Certificate not after: Thu 09 Apr 2026 06:39:56 +0000
Subordinate resources: AS: 45081
IP: 121.255.0.0/16
IP: 202.141.160.0/19
IP: 2400:b600::/32
IP: 2401:1e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53029 (0xcf25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 9 06:47:41 2025 GMT
Not After : Apr 9 06:39:56 2026 GMT
Subject: CN=193E93B5D1DD046927E649A3FC2328E119C40863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:e9:6e:15:00:e9:49:2a:79:45:4d:3b:3c:
be:8a:bb:2c:46:68:0c:e9:cc:18:2f:8d:0a:47:41:
a2:27:a7:48:a3:88:49:49:38:3c:26:a5:5c:4c:af:
21:3f:cd:29:d6:7d:68:e4:ee:d0:f1:ea:0a:43:45:
57:fd:83:f7:8e:40:23:0d:15:60:23:a0:79:84:cd:
32:02:d3:83:29:e8:f0:28:06:6e:39:97:a9:8f:37:
e9:68:66:8d:40:a8:8e:19:20:e5:0a:46:86:4f:74:
b2:77:c3:bb:7c:9a:86:b4:17:05:7d:29:a9:b4:49:
d9:73:92:c4:6a:25:6c:c3:0c:2e:90:fd:e1:63:a4:
c9:ca:f4:b1:09:63:03:fd:fb:01:10:74:0b:24:6e:
66:70:b1:6f:25:2f:4f:a6:64:a4:a8:ce:e4:10:9b:
18:64:ca:ca:6b:9a:b5:c1:ae:0b:b9:e1:03:25:ec:
01:e1:22:46:1a:f9:a4:1f:74:de:55:49:f2:f8:e2:
10:f4:ba:f0:e9:4c:a0:97:16:4f:a6:da:4e:b9:3c:
7e:ce:11:b1:83:9e:15:30:35:8e:19:9b:32:88:c1:
e1:fb:d3:47:7c:4a:58:af:67:57:94:5a:56:db:b7:
aa:7f:e1:77:7e:38:28:71:9d:1e:90:51:16:3b:83:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45081
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
202.141.160.0/19
IPv6:
2400:b600::/32
2401:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
7b:d5:46:fe:38:4f:29:cf:17:eb:70:c1:53:af:24:54:0b:f8:
ea:2e:9a:d6:53:25:e7:cb:a2:11:16:96:c5:26:38:f1:e0:3f:
1c:1f:50:c1:b9:66:72:e6:ed:d8:ce:61:44:d6:71:9d:c6:87:
8d:aa:32:e5:19:87:63:a8:e9:f6:72:6f:de:ea:4c:85:34:15:
6a:ac:9f:00:d6:f5:9c:e5:43:14:c5:fa:af:e7:fc:8d:43:bf:
78:4c:f8:0c:0c:d6:3a:32:96:76:33:27:f7:89:ec:9d:1b:1b:
61:06:a7:04:8f:bd:b2:4e:04:71:23:97:07:20:91:96:71:1a:
1d:8e:ad:0f:8d:72:c6:b7:13:56:c6:b7:89:1d:ef:b6:b2:d6:
34:21:7b:c0:83:cd:a6:ca:5c:2f:ef:9f:4a:b8:ac:2d:37:43:
1c:63:ac:b2:64:38:bc:d7:07:08:11:2d:47:ad:a2:2c:c2:e8:
51:5b:85:6b:9f:6c:c6:61:69:fe:ee:d5:b2:db:f1:ac:25:00:
8b:0c:56:d8:5b:e7:a0:ac:fa:37:10:33:e6:2d:45:f5:73:da:
f0:f0:91:f6:1b:52:49:64:df:fb:05:83:88:c6:ca:13:df:31:
4d:06:f5:02:d0:b3:c2:6a:2a:4a:cf:26:c7:57:0d:5b:16:30:
17:b5:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:19:36 2025 by rpki-client