Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
File: ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer (raw, json)
Hash identifier: 87fnkUIR7zcAOMJV20Gu/4eHuFPSHh2/chGS5NUjGHg=
Subject key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CDC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:10:49 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 58835
IP: 1.12.0.0/14
IP: 1.116.0.0/15
IP: 14.196.0.0 -- 14.197.127.255
IP: 42.187.128.0/17
IP: 42.192.0.0/15
IP: 42.194.128.0/17
IP: 43.242.252.0/22
IP: 49.51.0.0/16
IP: 49.223.0.0/16
IP: 49.232.0.0/14
IP: 58.87.64.0/18
IP: 101.130.0.0/15
IP: 101.244.0.0/16
IP: 101.246.0.0/17
IP: 103.38.116.0/22
IP: 103.234.0.0/22
IP: 106.50.0.0/16
IP: 106.52.0.0/14
IP: 110.40.128.0/17
IP: 110.42.128.0/17
IP: 111.229.0.0 -- 111.231.255.255
IP: 114.117.0.0/17
IP: 114.132.0.0/16
IP: 115.159.0.0/16
IP: 117.75.0.0/16
IP: 118.89.0.0/16
IP: 118.126.64.0/18
IP: 118.205.0.0 -- 118.206.255.255
IP: 119.27.160.0/19
IP: 119.28.0.0/15
IP: 119.45.0.0/16
IP: 119.91.0.0/16
IP: 120.53.0.0/16
IP: 121.4.0.0/15
IP: 121.68.0.0/16
IP: 122.51.0.0/16
IP: 122.152.192.0/18
IP: 123.197.128.0/17
IP: 123.206.0.0/15
IP: 124.220.0.0/14
IP: 175.24.0.0/16
IP: 175.27.0.0/16
IP: 175.178.0.0/16
IP: 175.188.0.0/17
IP: 180.91.0.0/17
IP: 182.254.128.0/17
IP: 203.195.128.0/17
IP: 210.73.160.0/19
IP: 210.74.48.0/20
IP: 211.159.128.0/17
IP: 223.210.128.0 -- 223.211.255.255
IP: 2402:4e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52681 (0xcdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:10:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:f1:ef:39:67:b3:c4:c6:a8:3a:4b:e9:8a:
38:97:24:eb:65:22:06:3c:f8:2f:dd:85:8e:80:4a:
ad:35:e9:71:37:df:96:17:e7:e1:a5:48:51:f4:b5:
f9:56:e2:8e:c4:bf:86:92:6e:1f:c7:46:c4:ed:f8:
e5:8b:89:d0:31:11:18:3a:29:03:fa:01:18:6e:26:
68:72:5f:a1:68:fa:8f:c8:e3:20:08:49:f7:55:76:
76:0a:3e:7e:e8:fa:56:ef:ba:d8:c6:2b:cd:84:73:
6d:84:77:44:34:b7:29:a7:0d:4d:f3:2c:53:05:a8:
86:c6:75:91:25:5b:a7:de:91:6a:e4:7b:e3:9e:e0:
4a:29:b0:89:ac:55:63:97:3b:07:a3:c1:12:f5:46:
31:28:13:a8:f7:b0:dc:10:f6:1a:af:58:ad:ee:b8:
5a:81:d9:29:10:33:0d:b4:5a:73:e6:22:ba:bd:66:
b1:9e:a7:93:99:52:6e:8b:37:b7:20:69:3c:27:15:
53:02:53:d6:27:41:de:98:db:12:da:a0:7a:49:ff:
f7:10:b5:f0:56:d4:39:fe:bf:df:cd:ec:4b:a9:16:
d6:63:e9:c9:d1:6f:40:ce:65:eb:1b:ff:a6:df:70:
f1:fb:03:9b:01:da:ab:be:60:02:fd:9f:af:40:37:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58835
sbgp-ipAddrBlock: critical
IPv4:
1.12.0.0/14
1.116.0.0/15
14.196.0.0-14.197.127.255
42.187.128.0/17
42.192.0.0/15
42.194.128.0/17
43.242.252.0/22
49.51.0.0/16
49.223.0.0/16
49.232.0.0/14
58.87.64.0/18
101.130.0.0/15
101.244.0.0/16
101.246.0.0/17
103.38.116.0/22
103.234.0.0/22
106.50.0.0/16
106.52.0.0/14
110.40.128.0/17
110.42.128.0/17
111.229.0.0-111.231.255.255
114.117.0.0/17
114.132.0.0/16
115.159.0.0/16
117.75.0.0/16
118.89.0.0/16
118.126.64.0/18
118.205.0.0-118.206.255.255
119.27.160.0/19
119.28.0.0/15
119.45.0.0/16
119.91.0.0/16
120.53.0.0/16
121.4.0.0/15
121.68.0.0/16
122.51.0.0/16
122.152.192.0/18
123.197.128.0/17
123.206.0.0/15
124.220.0.0/14
175.24.0.0/16
175.27.0.0/16
175.178.0.0/16
175.188.0.0/17
180.91.0.0/17
182.254.128.0/17
203.195.128.0/17
210.73.160.0/19
210.74.48.0/20
211.159.128.0/17
223.210.128.0-223.211.255.255
IPv6:
2402:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
04:2a:60:c1:97:76:5e:af:75:79:99:8c:0b:8f:40:9f:2e:9a:
25:f0:6c:5f:55:92:e9:83:41:6a:d1:7f:41:da:52:bd:1e:e7:
7d:b1:58:b1:12:39:0e:10:e0:14:a1:49:02:a8:86:6c:bc:e3:
5b:f5:3d:30:c8:cf:9f:fa:3f:53:b1:53:14:ba:72:08:7d:46:
11:fb:35:d0:44:e0:b6:be:06:f0:e5:19:22:a8:05:da:59:2a:
be:eb:4b:df:d0:d7:ae:e3:ac:db:0f:f9:12:68:80:2f:e7:f9:
c4:3b:c4:29:52:88:ef:c4:3c:57:97:4e:f0:bc:47:8f:eb:87:
bc:31:c4:5b:41:8e:b6:ea:f8:2b:3c:16:54:f0:f0:48:6e:27:
0b:90:b3:06:17:3e:0c:97:fd:ad:51:48:31:08:7f:95:6b:7d:
e5:14:89:0c:ea:c2:d0:13:08:1a:93:0e:33:40:a5:10:60:6a:
d0:fd:35:c5:94:d1:0e:21:4a:84:67:1a:51:d5:71:b9:c2:78:
0c:7c:64:4a:f3:39:35:71:c9:8c:be:6b:20:2d:6c:f2:02:c3:
a6:1a:0f:7c:12:55:5a:69:de:e8:fa:82:65:d6:41:12:9a:5c:
fd:1f:10:bf:ab:97:d4:35:85:32:c3:70:9a:78:e2:7d:94:f7:
7f:d7:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:53 2025 by rpki-client