Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
File: O3WyLEecFpumBZHB3tRCDFNoHbo.cer (raw, json)
Hash identifier: LEttEyrrcgdhSxUg5yRjS7py/a97uEst8/WZnUhLquM=
Subject key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E10D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:06:23 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 58993
IP: 27.0.160.0/22
IP: 43.228.116.0/22
IP: 43.243.12.0/22
IP: 43.254.88.0/22
IP: 103.82.224.0/22
IP: 103.208.12.0/22
IP: 103.233.52.0/22
IP: 103.238.132.0/22
IP: 182.50.112.0/20
IP: 223.223.192.0/20
IP: 2404:1c80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57613 (0xe10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:06:23 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:10:28:dd:a3:cf:eb:82:0e:9b:67:b4:13:
b8:c0:28:36:7f:44:ad:a3:24:3f:ca:76:0a:83:e2:
2a:3d:c2:2e:5b:cc:d6:88:7b:19:15:2e:d8:7b:b5:
de:6b:a0:d4:42:95:b2:76:8c:6c:c7:ac:6f:7c:d8:
e6:9a:fc:a2:0c:46:75:88:33:8a:dd:52:e6:9b:bc:
65:42:92:78:df:e3:38:aa:89:c5:da:27:2f:20:fb:
9d:33:10:bb:27:bc:4e:bb:62:fb:e5:7c:d0:f2:b6:
80:e1:9b:56:ec:32:7a:99:7e:91:e2:3d:29:69:40:
28:df:8a:e8:8c:e9:17:64:07:7a:8f:f6:39:8b:a8:
d4:92:9f:31:a6:bd:c3:a9:b0:ac:63:5a:e7:56:8e:
15:75:9b:eb:af:f8:de:01:0f:45:56:c5:b2:e6:5d:
cb:73:80:a0:c4:75:fa:05:15:49:dd:be:13:67:9e:
5f:ef:07:47:b7:d9:e4:a0:e4:27:b3:c6:34:e2:58:
55:60:57:dd:29:a5:68:a7:5c:ee:99:cc:77:0a:92:
91:65:d0:41:a9:22:8d:64:a7:b3:51:1a:1d:8b:46:
a8:f2:a0:9a:f4:05:a7:d2:a4:50:e6:c8:a3:c5:50:
15:2c:3a:8d:25:50:9d:b3:c8:5b:0b:2e:67:2c:43:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58993
sbgp-ipAddrBlock: critical
IPv4:
27.0.160.0/22
43.228.116.0/22
43.243.12.0/22
43.254.88.0/22
103.82.224.0/22
103.208.12.0/22
103.233.52.0/22
103.238.132.0/22
182.50.112.0/20
223.223.192.0/20
IPv6:
2404:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
9d:5e:3f:e8:f0:fb:29:f3:57:35:b0:e2:bc:20:32:51:97:20:
29:74:87:46:47:99:c2:e2:e0:da:dc:36:84:8f:be:1c:da:0f:
32:42:bb:e2:06:73:4f:1a:36:c2:1a:08:b7:ea:7e:4e:63:de:
10:05:76:1a:15:9e:fc:46:41:21:3b:c2:3d:a4:00:5d:c0:30:
f0:27:31:c5:5e:fc:40:84:39:00:54:13:63:45:64:30:3e:46:
eb:4b:fe:a9:3e:86:33:d6:74:07:95:73:42:69:c7:68:0f:4e:
05:38:69:b6:9b:37:45:58:c1:60:f4:15:70:9e:a4:77:c9:32:
75:c5:71:68:91:bd:33:ca:83:6f:ed:79:d8:22:b0:42:cf:8b:
23:57:5c:e1:f3:e7:22:05:db:ea:89:62:e3:9f:c8:9d:e4:30:
70:79:4b:10:3f:24:7b:41:9f:35:8b:fa:3a:20:ea:54:3e:96:
8e:3c:bd:ca:a3:ff:ee:0f:4b:6a:a2:97:c2:85:c9:08:17:87:
b0:7f:58:4c:06:92:7e:f8:f3:b8:cb:2f:57:b0:a7:b6:59:0e:
7c:3f:69:44:47:d1:18:4b:66:c7:4a:26:eb:c2:17:72:59:bb:
df:8f:f9:a1:df:83:1e:44:d9:66:37:9e:42:08:dd:e9:fb:41:
8a:a0:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:29 2025 by rpki-client