Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer
File: TS1a-PNilt7eZELYEcBKdAhswCk.cer (raw, json)
Hash identifier: NCZ6sy8gmBHuBRmGMpcsH15Lm6VTKk/GGABE4oCKJ5I=
Subject key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E2C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:12:27 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 139134
IP: 103.120.72.0/22
IP: 116.70.64.0/18
IP: 123.99.192.0/18
IP: 124.248.64.0/18
IP: 203.135.96.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58055 (0xe2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:12:27 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:28:87:a4:2e:ec:67:71:a5:10:2d:f4:06:
8a:f9:a0:e6:c9:ed:87:01:7d:08:28:61:08:8f:27:
41:55:ec:98:21:2b:a7:ee:f0:e0:e0:27:08:09:5c:
31:23:d2:14:bf:b7:a5:c7:2a:f7:24:4e:30:d9:3d:
a2:b7:68:8b:6e:af:20:e7:c2:14:a0:fc:10:b1:69:
8b:b0:58:d1:26:5e:35:04:8e:cf:e1:da:98:9d:db:
bc:c3:43:46:50:58:24:ae:7f:85:ce:44:c8:af:b8:
1f:fe:58:dc:53:e2:ff:64:d4:67:03:e5:56:30:e3:
d7:af:c9:d9:99:61:be:f5:1c:c8:f4:b0:8c:da:00:
dd:c6:53:f2:ba:3d:be:91:cd:9c:3a:5f:62:d3:e6:
fa:e2:57:b2:8b:0f:ca:5d:e3:0c:24:4b:c7:c5:30:
b4:b5:77:17:4e:ea:46:72:ff:f7:09:fb:f7:2c:d7:
d8:fb:2a:4b:aa:43:b9:0c:ac:a2:ed:b9:49:c1:94:
6b:bf:1a:70:81:55:ff:a1:4d:c0:11:a7:da:f1:ff:
82:eb:81:fa:c0:2f:2d:00:da:e2:0f:16:8b:83:13:
94:7c:8e:c8:d6:7d:57:b8:36:01:fc:17:db:56:9b:
88:19:32:5c:20:44:c7:ad:2c:f2:00:1f:9d:2b:92:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139134
sbgp-ipAddrBlock: critical
IPv4:
103.120.72.0/22
116.70.64.0/18
123.99.192.0/18
124.248.64.0/18
203.135.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:90:6a:16:f7:0c:40:28:e0:66:1f:1a:79:bd:f2:fa:07:69:
ad:79:fb:18:41:ce:df:66:57:29:39:11:82:71:0a:d9:f0:bf:
1f:07:46:9f:4b:72:d8:47:b3:14:2a:9f:40:47:4a:6e:5d:b4:
57:0d:4d:2c:25:2c:25:aa:56:fa:5d:69:db:a7:bc:3b:2b:eb:
8f:38:70:b8:d9:98:c1:e2:e6:39:ca:4c:90:74:b5:ee:77:4b:
be:bb:bd:19:e5:27:1f:54:b0:f1:cf:36:59:b9:78:f4:24:c3:
91:f4:22:45:e7:41:21:91:d8:46:85:c2:b0:ee:ec:9d:0c:f4:
c1:73:24:f4:47:88:4d:22:23:fa:d6:50:fd:11:a6:3f:b5:9d:
89:64:28:6c:e0:e4:3a:75:6f:f7:fd:f2:20:8d:dc:01:9d:60:
b5:d0:0f:dc:61:f5:01:42:29:40:6b:f8:02:8d:a1:27:e4:50:
82:7c:1f:82:da:b7:73:5c:62:85:b4:86:8b:fc:c1:d1:ea:66:
42:f1:43:e0:e2:15:1e:f8:a3:71:f9:7e:db:2f:5c:ed:26:b8:
55:68:17:d7:5b:ca:93:9f:c1:0d:47:ab:2e:4f:cc:be:80:cd:
c1:04:69:cf:ad:30:bc:c4:72:10:9e:cc:ee:6b:43:62:5b:13:
ce:e6:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:07:19 2025 by rpki-client