Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.cer
File: OdKJwhDg7Qi9MAYOyP3ObWjuaZU.cer (raw, json)
Hash identifier: dRX/mHOuIoAaCf4nEQ0+aOTqfEEepvHuk9lXmJfeh6g=
Subject key identifier: 39:D2:89:C2:10:E0:ED:08:BD:30:06:0E:C8:FD:CE:6D:68:EE:69:95
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E1F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:09:15 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 9809
AS: 63600 -- 63601
IP: 116.214.32.0/19
IP: 116.214.128.0/17
IP: 202.170.128.0/19
IP: 210.75.0.0/19
IP: 219.235.224.0/19
IP: 2401:9600::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57849 (0xe1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:09:15 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=39D289C210E0ED08BD30060EC8FDCE6D68EE6995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:1f:f0:b5:c2:53:ea:8a:f6:0b:ba:21:2c:
6e:57:f9:4b:03:ab:38:80:48:c1:cf:59:4c:24:92:
66:03:ca:38:6d:71:c4:a6:95:bc:32:8b:f9:a4:ad:
5c:e0:57:e2:99:83:04:45:d8:35:b4:8a:30:25:80:
d2:31:ba:1b:02:4f:47:ce:59:27:50:98:98:5e:4e:
49:a7:84:fd:4a:f6:1c:10:31:91:af:fc:c0:cf:70:
bf:c8:e4:38:47:7c:89:2a:9c:73:e7:f9:ed:fe:9a:
50:86:81:5f:34:5c:0a:40:c5:71:41:f6:ce:4e:52:
85:fd:96:7e:12:93:ff:a8:d5:4c:96:28:c7:e0:af:
5f:c8:00:0e:97:81:a1:d9:18:28:20:ab:16:24:a2:
fb:ab:21:c6:cf:69:f9:2f:84:5c:2b:77:7f:7f:e2:
38:4e:49:ae:35:01:0d:c3:ec:d6:bd:67:cf:32:cc:
75:69:ef:31:10:85:e0:a2:08:7c:62:07:c8:69:c5:
ec:6f:c7:35:dd:4b:ad:be:fc:9d:e4:14:3b:ad:94:
aa:b4:8c:7a:3c:d0:e7:cc:32:e9:8a:74:53:f4:06:
ee:f2:af:2c:e3:fc:db:58:fe:81:17:c7:f5:17:7f:
84:a5:06:33:61:7a:24:f9:65:de:e9:19:13:79:62:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:89:C2:10:E0:ED:08:BD:30:06:0E:C8:FD:CE:6D:68:EE:69:95
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/OdKJwhDg7Qi9MAYOyP3ObWjuaZU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9809
63600-63601
sbgp-ipAddrBlock: critical
IPv4:
116.214.32.0/19
116.214.128.0/17
202.170.128.0/19
210.75.0.0/19
219.235.224.0/19
IPv6:
2401:9600::/32
Signature Algorithm: sha256WithRSAEncryption
41:0e:66:6c:df:03:69:6a:04:23:55:95:3c:5e:fc:53:2a:81:
e6:b0:3c:68:02:0d:06:1a:71:c0:b6:c1:f7:b3:c7:24:b1:ee:
38:14:94:9d:11:c4:27:2e:fe:5e:8a:cc:ee:75:c4:75:d0:a2:
65:03:7f:79:1b:ec:3d:a7:8f:4d:45:e6:2a:17:ce:e1:82:6e:
d6:13:e6:e8:49:b8:8e:6b:3a:38:c0:4c:46:71:5f:19:eb:0a:
9a:05:36:e4:a8:fb:61:0e:aa:8f:e0:67:61:01:cb:6b:3c:0c:
4d:c2:4c:fe:a7:72:b9:9f:4c:74:c4:bc:4c:79:9d:87:32:6f:
c3:d4:bd:6c:93:c2:59:d2:72:02:b3:d7:de:c7:2d:5d:1c:7e:
22:fc:a2:3e:8b:cd:c3:92:c3:9c:d0:f7:2a:3d:53:34:9a:89:
ce:16:5c:73:83:67:c5:b1:c7:cc:a6:63:9a:6f:72:c7:23:58:
1b:ea:7f:74:8f:56:cd:99:09:a2:9e:86:f3:93:3c:dc:d0:ff:
ba:a8:fa:e9:c2:01:6b:e8:52:36:d6:17:8c:61:ea:ff:02:d9:
35:3e:07:a4:8e:37:b5:ba:e2:d9:d8:04:da:ff:83:5b:f4:f4:
fa:63:b9:7d:03:f7:3a:3b:c6:1d:1b:0b:1e:68:51:2a:49:18:
1d:7d:be:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:43:50 2025 by rpki-client