Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
File: MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer (raw, json)
Hash identifier: /lTxUFGxLQ+OQoq+5iVM8hSbUaR8MLNgt3eZdOcu/dA=
Subject key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E21B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:09:43 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 9813
AS: 24413
AS: 38340
AS: 45059
IP: 103.26.228.0/22
IP: 114.28.0.0 -- 114.28.67.255
IP: 114.28.80.0 -- 114.28.127.255
IP: 114.28.192.0/18
IP: 202.46.32.0/19
IP: 2400:3e00::/32
IP: 2402:33c0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 09:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57883 (0xe21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:09:43 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:ea:2c:81:3c:c0:88:eb:d8:bc:96:49:9a:
74:15:24:c9:67:82:a0:1d:0b:d2:79:16:8f:93:1e:
e5:7b:09:41:c0:5e:e9:44:ed:f8:b3:53:83:25:df:
4f:ff:89:13:f1:b3:19:0b:85:b1:0e:a1:26:87:3b:
39:ae:90:ba:82:f4:81:78:00:65:cc:5d:2c:44:e8:
c4:6f:cf:61:15:63:03:2a:a9:74:fa:94:e4:37:50:
bb:bf:26:71:01:64:a8:87:17:c0:4a:d8:0f:09:46:
ee:dc:3a:4b:38:57:e4:01:17:9e:66:fa:1f:22:f3:
df:20:3e:a4:0d:20:b4:ea:bb:65:2b:97:dc:df:57:
d5:9c:b5:36:d6:e8:f7:ce:dd:a8:17:90:6a:91:2d:
7a:56:74:d9:59:01:76:2d:71:af:b7:71:3a:ec:51:
8b:d1:d5:8e:6e:0f:02:a4:8d:b8:01:35:e1:e9:48:
e3:f0:b8:d0:04:35:31:38:29:17:c0:39:3a:ca:8b:
33:35:f1:bd:86:08:0d:22:af:0f:5a:60:c9:9b:1e:
fe:d9:c2:95:6e:79:ec:30:12:59:df:4f:5e:fd:23:
3e:7d:5b:8a:87:9a:ca:5f:f9:49:07:a3:67:05:a0:
65:16:c0:29:3c:50:54:ea:06:e9:66:a1:1e:1b:ff:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9813
24413
38340
45059
sbgp-ipAddrBlock: critical
IPv4:
103.26.228.0/22
114.28.0.0-114.28.67.255
114.28.80.0-114.28.127.255
114.28.192.0/18
202.46.32.0/19
IPv6:
2400:3e00::/32
2402:33c0::/32
Signature Algorithm: sha256WithRSAEncryption
69:4a:8f:e0:0a:69:48:e3:5c:d5:71:26:56:71:8d:aa:d7:8e:
4e:35:b2:b0:3d:6f:87:3f:7c:f6:d5:49:35:1b:d9:2d:8f:e0:
30:3a:a6:ad:68:c3:b9:a5:5c:4b:f8:48:f2:7d:56:95:e0:ab:
f6:17:eb:22:dd:90:26:6c:da:60:d0:1d:8e:72:97:e6:69:7d:
be:bf:c5:32:a9:c2:d8:2f:cb:fd:05:bc:3f:e6:fd:bc:aa:53:
c6:fa:78:51:88:ef:8a:b8:86:dc:1d:12:0f:9b:5a:89:28:a3:
ce:23:b3:d2:f5:39:2b:6d:6d:20:91:4f:51:00:8d:6c:2c:d5:
e2:c6:70:43:bf:be:4c:89:57:04:a0:09:f0:22:35:09:2b:11:
83:68:ac:d0:98:c9:c1:d4:67:c2:57:9c:04:23:8e:30:cd:3e:
a8:c2:db:ca:26:8f:0c:00:77:d5:44:93:cc:e7:9b:11:12:8e:
7c:61:52:a7:ff:a3:de:df:40:e8:b3:f6:2b:7b:ea:af:be:7c:
3a:1c:e5:17:0a:33:6e:cd:ed:ce:32:c1:a3:c9:08:32:20:55:
6b:d9:d8:e1:d5:5e:77:01:59:4e:2e:55:9e:8c:9f:ef:28:6c:
96:a8:cb:25:b7:a9:a9:2f:ce:38:35:10:ef:9b:12:70:d3:3c:
92:aa:05:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:32:13 2025 by rpki-client