Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
File: MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer (raw, json)
Hash identifier: 51XtomW1sByrb+tuS3nxfZe/YKNlyJY7fqHJw0kf/Ho=
Subject key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D8A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:13:26 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 9813
AS: 24413
AS: 38340
AS: 45059
IP: 103.26.228.0/22
IP: 114.28.0.0 -- 114.28.67.255
IP: 114.28.80.0 -- 114.28.127.255
IP: 114.28.192.0/18
IP: 202.46.32.0/19
IP: 2400:3e00::/32
IP: 2402:33c0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 10:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55456 (0xd8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:13:26 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:ea:2c:81:3c:c0:88:eb:d8:bc:96:49:9a:
74:15:24:c9:67:82:a0:1d:0b:d2:79:16:8f:93:1e:
e5:7b:09:41:c0:5e:e9:44:ed:f8:b3:53:83:25:df:
4f:ff:89:13:f1:b3:19:0b:85:b1:0e:a1:26:87:3b:
39:ae:90:ba:82:f4:81:78:00:65:cc:5d:2c:44:e8:
c4:6f:cf:61:15:63:03:2a:a9:74:fa:94:e4:37:50:
bb:bf:26:71:01:64:a8:87:17:c0:4a:d8:0f:09:46:
ee:dc:3a:4b:38:57:e4:01:17:9e:66:fa:1f:22:f3:
df:20:3e:a4:0d:20:b4:ea:bb:65:2b:97:dc:df:57:
d5:9c:b5:36:d6:e8:f7:ce:dd:a8:17:90:6a:91:2d:
7a:56:74:d9:59:01:76:2d:71:af:b7:71:3a:ec:51:
8b:d1:d5:8e:6e:0f:02:a4:8d:b8:01:35:e1:e9:48:
e3:f0:b8:d0:04:35:31:38:29:17:c0:39:3a:ca:8b:
33:35:f1:bd:86:08:0d:22:af:0f:5a:60:c9:9b:1e:
fe:d9:c2:95:6e:79:ec:30:12:59:df:4f:5e:fd:23:
3e:7d:5b:8a:87:9a:ca:5f:f9:49:07:a3:67:05:a0:
65:16:c0:29:3c:50:54:ea:06:e9:66:a1:1e:1b:ff:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9813
24413
38340
45059
sbgp-ipAddrBlock: critical
IPv4:
103.26.228.0/22
114.28.0.0-114.28.67.255
114.28.80.0-114.28.127.255
114.28.192.0/18
202.46.32.0/19
IPv6:
2400:3e00::/32
2402:33c0::/32
Signature Algorithm: sha256WithRSAEncryption
23:4d:df:57:9a:33:bc:7f:93:ca:8b:9f:6e:d5:bb:a8:79:89:
4b:c3:3b:40:67:bf:cc:f8:87:37:50:c6:12:47:60:d9:45:80:
11:2d:82:5c:84:64:18:48:9a:5a:3d:95:3f:ee:51:93:a5:bb:
48:1c:e4:19:ca:17:f3:99:d7:05:df:4e:87:41:e3:d6:3e:70:
52:e0:6a:5b:89:9a:93:18:5e:46:5f:90:a0:b8:41:85:92:8d:
54:f0:5d:26:2d:7e:a7:65:1b:83:d8:de:a5:11:d7:6a:61:99:
b1:19:77:65:47:e3:86:47:e7:6c:ad:53:fe:6a:de:79:3d:5a:
6f:94:28:f7:0b:9d:d8:12:8c:98:36:e9:77:b3:f4:e0:74:76:
01:2a:b0:b3:3c:e8:7c:39:67:79:cf:87:00:a5:06:9e:2f:fb:
24:4e:bf:f9:10:9f:0d:1a:23:34:89:8c:b2:a8:27:c4:f4:b5:
21:58:6f:b5:e7:d5:b9:ea:81:89:67:83:c3:0d:40:f1:57:b6:
b0:3a:5a:19:f3:d2:7b:12:ff:88:e1:cf:4e:87:48:fa:8b:54:
a8:fc:2a:e0:b9:e2:a9:5e:77:8e:40:d5:07:75:d2:fc:34:10:
87:d8:de:26:76:d1:3e:9a:d1:cf:3f:ed:b3:a4:e9:f1:69:5b:
7e:3d:3d:38
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIDANigMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzMjZaFw0yNjA4MDMwODQ0NDBaMDMx
MTAvBgNVBAMTKDMwOUMyQTk0M0IyOERDMDg1OEMzOUI5MjA4QTE2MDlDMDk3M0U0
OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYkOosgTzAiOvYvJZJ
mnQVJMlngqAdC9J5Fo+THuV7CUHAXulE7fizU4Ml30//iRPxsxkLhbEOoSaHOzmu
kLqC9IF4AGXMXSxE6MRvz2EVYwMqqXT6lOQ3ULu/JnEBZKiHF8BK2A8JRu7cOks4
V+QBF55m+h8i898gPqQNILTqu2Url9zfV9WctTbW6PfO3agXkGqRLXpWdNlZAXYt
ca+3cTrsUYvR1Y5uDwKkjbgBNeHpSOPwuNAENTE4KRfAOTrKizM18b2GCA0irw9a
YMmbHv7ZwpVueewwElnfT179Iz59W4qHmspf+UkHo2cFoGUWwCk8UFTqBulmoR4b
/4RvAgMBAAGjggK5MIICtTAdBgNVHQ4EFgQUMJwqlDso3AhYw5uSCKFgnAlz5Jow
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYy
MC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC82MjAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAn
BggrBgEFBQcBCAEB/wQYMBagFDASAgImVQICX10CAwCVxAIDALADMFwGCCsGAQUF
BwEHAQH/BE0wSzAzBAIAATAtAwQCZxrkMAsDAwJyHAMEAnIcQDAMAwQEchxQAwQH
chwAAwQGchzAAwQFyi4gMBQEAgACMA4DBQAkAD4AAwUAJAIzwDANBgkqhkiG9w0B
AQsFAAOCAQEAI03fV5ozvH+TyoufbtW7qHmJS8M7QGe/zPiHN1DGEkdg2UWAES2C
XIRkGEiaWj2VP+5Rk6W7SBzkGcoX85nXBd9Oh0Hj1j5wUuBqW4makxheRl+QoLhB
hZKNVPBdJi1+p2Ubg9jepRHXamGZsRl3ZUfjhkfnbK1T/mreeT1ab5Qo9wud2BKM
mDbpd7P04HR2ASqwszzofDlnec+HAKUGni/7JE6/+RCfDRojNImMsqgnxPS1IVhv
tefVueqBiWeDww1A8Ve2sDpaGfPSexL/iOHPTodI+otUqPwq4LniqV53jkDVB3XS
/DQQh9jeJnbRPprRzz/ts6Tp8Wlbfj09OA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:40:59 2025 by rpki-client