Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
File: duBG4-yhC5KEmfIqXnZcBBamCk8.cer (raw, json)
Hash identifier: PycN8hwBclOM5a7ubjlEY+P/O+EQsA7gcyqWMm/QMb8=
Subject key identifier: 76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E2F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:13:06 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 23771
AS: 45078
IP: 59.153.4.0/22
IP: 103.197.228.0/22
IP: 124.22.0.0/15
IP: 124.47.0.0/18
IP: 182.80.0.0/14
IP: 202.150.16.0/20
IP: 203.152.64.0/19
IP: 210.87.128.0/18
IP: 2405:e600::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58103 (0xe2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:13:06 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:64:31:d3:99:09:25:0a:06:44:5c:ec:e0:
d5:fa:07:c4:da:b6:0d:da:cf:05:6d:04:35:22:a4:
a1:31:0f:13:25:06:27:45:93:31:52:96:65:61:78:
b3:63:ea:e0:a5:15:b6:fb:64:c9:4f:0e:82:f2:8b:
7e:46:b5:4f:f5:40:2f:24:4e:fc:42:aa:51:4e:f0:
43:42:51:1d:3a:5b:8f:c8:7a:23:a6:71:a0:5a:ab:
68:c0:6c:43:31:76:f7:33:a5:18:f3:e8:5d:a3:46:
05:4b:f9:01:ee:91:b4:2b:cd:a8:26:37:b0:de:79:
11:8c:24:e3:da:2d:fa:40:5c:2d:c6:b1:f1:cd:1e:
d0:ea:c8:43:82:66:d2:5b:40:b0:07:f4:e3:ff:17:
57:70:09:fe:e8:1c:72:d2:55:e0:0e:dd:eb:e5:3f:
17:c1:49:d6:b7:ff:b9:cd:5a:93:00:bb:bf:e5:c7:
36:fd:c0:6f:05:a0:e7:f3:89:b2:fd:c8:23:3b:8c:
85:10:a2:b8:97:4c:69:b9:92:37:4b:83:49:93:5f:
76:3e:fd:44:33:a8:0e:dc:14:21:f4:d3:cf:bd:59:
d5:75:49:8b:d7:9b:81:aa:fd:6b:4d:5b:1b:fe:79:
a2:dc:39:83:52:4f:6b:66:ee:11:98:b3:22:0d:d7:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23771
45078
sbgp-ipAddrBlock: critical
IPv4:
59.153.4.0/22
103.197.228.0/22
124.22.0.0/15
124.47.0.0/18
182.80.0.0/14
202.150.16.0/20
203.152.64.0/19
210.87.128.0/18
IPv6:
2405:e600::/32
Signature Algorithm: sha256WithRSAEncryption
08:f5:40:92:86:6e:2d:2e:fd:fa:2e:97:29:fb:f2:38:24:3e:
32:40:15:af:ee:da:69:08:d8:2c:7b:3b:7b:4d:14:a6:6e:0e:
be:86:5c:dc:26:9e:e1:ed:95:4d:f1:7c:77:ac:42:49:1a:12:
69:e1:d5:40:74:7c:10:7d:4e:46:a1:19:c9:82:11:a5:7f:47:
45:90:dd:87:8f:66:4b:0e:64:3c:77:69:b5:40:78:84:a4:b0:
dc:bd:d1:a0:68:69:de:30:66:91:b7:cf:76:78:f6:79:cd:ad:
af:8b:29:47:0e:d9:8e:d5:97:12:10:a6:ba:45:be:e1:2b:e6:
a8:0a:b2:90:7d:3e:ee:43:65:d3:ee:a7:7c:ee:70:4a:60:ed:
70:a6:da:c6:74:71:e5:c2:0b:34:05:ef:00:e3:31:19:35:5b:
bd:b3:3d:f7:2a:9e:f8:a0:b0:21:71:81:ff:8c:e4:3a:be:92:
36:a0:cc:cd:d1:84:af:9a:38:e9:f5:a2:b2:12:b9:6a:99:c5:
7b:50:5a:6b:55:4a:2f:a0:8a:fa:8b:59:12:ae:64:fd:1e:68:
26:e0:cf:43:f9:16:34:ec:6b:63:b2:55:fe:19:8b:92:c6:aa:
bf:a3:cf:54:36:e7:a9:20:1d:85:dc:75:4c:57:7e:8d:1d:cc:
fc:ba:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:17:24 2025 by rpki-client