Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer
File: _uDIJ84pYgIAbrTtK2WV3ODpfHs.cer (raw, json)
Hash identifier: 7Ye/RPFxqkDAMi2Nz8YqttyIhAcGvkPU7QS1pwLZJGk=
Subject key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D7F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:11:39 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 59015
IP: 43.224.240.0/22
IP: 43.247.100.0/22
IP: 103.43.240.0/22
IP: 103.234.128.0/22
IP: 119.38.224.0/19
IP: 2403:3d80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 15:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55284 (0xd7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:11:39 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:9b:44:4f:c4:aa:09:e8:c6:2c:b9:7c:39:
52:15:4a:86:2b:11:a5:f6:10:00:ff:16:ae:be:11:
8c:59:8e:d1:99:e6:c6:9c:27:9b:c0:23:51:d7:e4:
c5:d8:db:ac:21:93:4a:c7:df:d2:91:cc:4d:2b:48:
f9:6c:89:db:bc:39:5f:5e:42:69:60:0b:79:1d:a3:
27:22:ad:b3:67:e7:1c:bf:33:5b:38:5a:e3:64:6a:
f2:fa:ce:c0:d7:04:74:f6:8a:56:5b:a4:4d:99:84:
4c:6a:e6:e1:42:42:e4:23:8c:21:5d:66:63:35:4f:
d3:1e:a8:b5:b8:e4:15:50:5c:c3:fb:af:d2:f6:3d:
e4:88:6f:f9:cd:5e:d4:9e:5a:2c:4e:ad:f9:c9:13:
96:4f:78:3e:58:fb:8c:e8:11:7d:20:17:b9:0c:71:
6e:70:85:dd:5e:3c:bc:4f:9f:a7:c1:a0:f0:fc:a7:
17:a8:3d:9a:f2:f9:14:47:4e:7f:b6:88:61:cd:d0:
ff:e3:ec:1c:6d:2d:ae:b1:a2:ca:63:0c:88:06:60:
c0:2a:eb:94:36:05:f2:4d:14:b9:59:40:45:e4:4c:
13:3a:f5:c5:29:1a:8e:3e:81:ba:36:3c:74:59:3f:
d5:3a:0e:12:87:9e:0c:47:a3:a5:60:10:82:cc:5c:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59015
sbgp-ipAddrBlock: critical
IPv4:
43.224.240.0/22
43.247.100.0/22
103.43.240.0/22
103.234.128.0/22
119.38.224.0/19
IPv6:
2403:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
08:7e:f0:74:af:47:c1:af:36:c1:7c:d3:e1:d9:22:a8:74:f3:
5e:96:e0:cd:99:20:9c:d8:80:9a:f7:4e:dc:0d:b5:e9:4d:a8:
b5:89:84:d9:60:5e:a6:6d:4b:90:71:9a:6c:6b:ca:d0:53:1c:
1f:cf:db:cd:27:dd:ec:3e:50:cb:f7:d9:8a:71:19:fd:9b:9d:
24:03:88:a1:aa:fe:24:6f:bc:3b:44:43:1b:1f:ee:5f:ea:07:
08:db:6c:9f:e0:3f:37:a8:01:c4:11:8a:ef:72:0d:97:98:53:
7a:cc:b6:f0:8b:56:0f:5f:cb:5b:27:9c:32:ba:df:bf:a7:6d:
89:f3:80:0e:d2:e4:86:65:9d:ec:fb:2f:29:5a:e7:a6:bb:56:
6b:41:8c:f5:5c:2d:6a:51:98:3a:18:67:1e:3a:1c:54:22:eb:
27:4a:b4:f9:1e:d3:d2:2d:d0:3c:b0:6e:0c:c4:95:e0:f8:b3:
c0:96:8f:ca:a5:78:ea:eb:7e:ed:55:09:e4:31:bf:56:5a:e4:
70:c1:b7:cb:c0:e0:55:2d:c9:45:81:45:ff:6b:60:b7:c8:13:
57:fb:63:25:cf:ed:a4:27:88:87:b2:e0:4b:6b:14:34:d7:e5:
b4:eb:dc:c7:6a:c0:6b:ea:2c:06:26:97:f3:5b:c0:04:24:67:
60:61:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:03 2025 by rpki-client