Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer
File: TS1a-PNilt7eZELYEcBKdAhswCk.cer (raw, json)
Hash identifier: FSSmye9NCpAz9zvs1WgQQbulkHhmLjSNOSQRg/FfkIQ=
Subject key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D9DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:17:35 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 139134
IP: 103.120.72.0/22
IP: 116.70.64.0/18
IP: 123.99.192.0/18
IP: 124.248.64.0/18
IP: 203.135.96.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55772 (0xd9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:17:35 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:28:87:a4:2e:ec:67:71:a5:10:2d:f4:06:
8a:f9:a0:e6:c9:ed:87:01:7d:08:28:61:08:8f:27:
41:55:ec:98:21:2b:a7:ee:f0:e0:e0:27:08:09:5c:
31:23:d2:14:bf:b7:a5:c7:2a:f7:24:4e:30:d9:3d:
a2:b7:68:8b:6e:af:20:e7:c2:14:a0:fc:10:b1:69:
8b:b0:58:d1:26:5e:35:04:8e:cf:e1:da:98:9d:db:
bc:c3:43:46:50:58:24:ae:7f:85:ce:44:c8:af:b8:
1f:fe:58:dc:53:e2:ff:64:d4:67:03:e5:56:30:e3:
d7:af:c9:d9:99:61:be:f5:1c:c8:f4:b0:8c:da:00:
dd:c6:53:f2:ba:3d:be:91:cd:9c:3a:5f:62:d3:e6:
fa:e2:57:b2:8b:0f:ca:5d:e3:0c:24:4b:c7:c5:30:
b4:b5:77:17:4e:ea:46:72:ff:f7:09:fb:f7:2c:d7:
d8:fb:2a:4b:aa:43:b9:0c:ac:a2:ed:b9:49:c1:94:
6b:bf:1a:70:81:55:ff:a1:4d:c0:11:a7:da:f1:ff:
82:eb:81:fa:c0:2f:2d:00:da:e2:0f:16:8b:83:13:
94:7c:8e:c8:d6:7d:57:b8:36:01:fc:17:db:56:9b:
88:19:32:5c:20:44:c7:ad:2c:f2:00:1f:9d:2b:92:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139134
sbgp-ipAddrBlock: critical
IPv4:
103.120.72.0/22
116.70.64.0/18
123.99.192.0/18
124.248.64.0/18
203.135.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:e5:e1:46:6e:aa:55:9b:fc:25:f3:f1:0a:cf:a3:2a:e1:b7:
ce:49:63:47:b3:7e:47:33:33:f9:54:20:80:63:e5:c3:6c:ee:
fb:c2:09:32:2f:6c:70:b7:af:39:be:eb:21:e4:ee:bc:bb:16:
66:4c:3b:94:cf:f0:6c:39:c5:0a:90:a7:1a:35:82:a1:5c:9d:
9b:dc:7c:88:15:29:17:e4:77:52:e4:be:c7:97:2a:2d:25:a3:
73:15:ee:1d:ce:4d:71:4e:b8:0e:56:c8:33:cc:4d:90:a8:8a:
d2:3e:c4:b2:63:b5:d1:5d:53:18:a9:05:a5:4a:5a:32:77:27:
52:c8:52:f0:7f:d3:0f:d7:be:63:2d:c3:9d:f9:4e:70:16:20:
93:89:cc:a7:e9:35:70:3e:5d:a7:b2:42:6c:20:cb:d2:3b:57:
d5:f9:9e:03:55:5a:40:91:30:ea:6f:4d:d2:da:d9:9f:0b:ff:
b1:ef:e0:72:a9:95:39:3b:54:57:53:91:04:2f:08:92:c6:e5:
bd:08:f0:44:1d:83:82:de:41:68:3f:01:71:3a:1f:e8:ae:e2:
90:21:3b:c2:24:ca:87:f7:39:3a:f6:51:23:f1:9e:3b:1c:e2:
2a:9c:98:fe:f5:ab:a0:91:8a:72:93:74:53:a0:8a:06:91:87:
05:0d:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:58:15 2025 by rpki-client