Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
File: duBG4-yhC5KEmfIqXnZcBBamCk8.cer (raw, json)
Hash identifier: ycSSNRGpppRQIuKyK6ZRTqPMvMm8DHww9aPNt/Ck/aQ=
Subject key identifier: 76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DA00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:18:02 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 23771
AS: 45078
IP: 59.153.4.0/22
IP: 103.197.228.0/22
IP: 124.22.0.0/15
IP: 124.47.0.0/18
IP: 182.80.0.0/14
IP: 202.150.16.0/20
IP: 203.152.64.0/19
IP: 210.87.128.0/18
IP: 2405:e600::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 12:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55808 (0xda00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:18:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:64:31:d3:99:09:25:0a:06:44:5c:ec:e0:
d5:fa:07:c4:da:b6:0d:da:cf:05:6d:04:35:22:a4:
a1:31:0f:13:25:06:27:45:93:31:52:96:65:61:78:
b3:63:ea:e0:a5:15:b6:fb:64:c9:4f:0e:82:f2:8b:
7e:46:b5:4f:f5:40:2f:24:4e:fc:42:aa:51:4e:f0:
43:42:51:1d:3a:5b:8f:c8:7a:23:a6:71:a0:5a:ab:
68:c0:6c:43:31:76:f7:33:a5:18:f3:e8:5d:a3:46:
05:4b:f9:01:ee:91:b4:2b:cd:a8:26:37:b0:de:79:
11:8c:24:e3:da:2d:fa:40:5c:2d:c6:b1:f1:cd:1e:
d0:ea:c8:43:82:66:d2:5b:40:b0:07:f4:e3:ff:17:
57:70:09:fe:e8:1c:72:d2:55:e0:0e:dd:eb:e5:3f:
17:c1:49:d6:b7:ff:b9:cd:5a:93:00:bb:bf:e5:c7:
36:fd:c0:6f:05:a0:e7:f3:89:b2:fd:c8:23:3b:8c:
85:10:a2:b8:97:4c:69:b9:92:37:4b:83:49:93:5f:
76:3e:fd:44:33:a8:0e:dc:14:21:f4:d3:cf:bd:59:
d5:75:49:8b:d7:9b:81:aa:fd:6b:4d:5b:1b:fe:79:
a2:dc:39:83:52:4f:6b:66:ee:11:98:b3:22:0d:d7:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23771
45078
sbgp-ipAddrBlock: critical
IPv4:
59.153.4.0/22
103.197.228.0/22
124.22.0.0/15
124.47.0.0/18
182.80.0.0/14
202.150.16.0/20
203.152.64.0/19
210.87.128.0/18
IPv6:
2405:e600::/32
Signature Algorithm: sha256WithRSAEncryption
a0:a0:20:54:06:4f:63:d6:cb:7e:55:b8:7a:df:55:0e:c0:0f:
e3:20:71:95:66:5c:e1:4b:41:a4:b5:72:63:ca:b9:c7:fe:6f:
9c:78:f9:1e:b6:6d:b2:08:76:88:95:21:94:7d:47:41:fd:5f:
f3:fe:b3:2e:c4:7d:2f:98:f5:79:61:32:a9:97:67:37:6c:f9:
eb:c7:e6:1c:cd:8b:4f:c6:ee:68:78:c7:60:06:ca:6f:d8:96:
1e:a9:80:d0:0d:5f:af:c1:86:28:81:eb:68:dd:f3:d5:f2:31:
69:3d:e0:a7:32:4d:45:d8:54:97:81:b4:a7:d6:9a:92:35:47:
57:f0:cd:4b:70:2d:ab:0e:c4:0a:33:39:5b:a6:5a:22:cf:e2:
15:9d:bc:89:3c:f9:e9:1c:e2:fb:09:ec:e5:f6:c7:ad:eb:94:
67:26:ec:bb:18:87:d5:7e:98:5c:10:28:0e:a1:5d:c9:a0:c5:
35:3b:b0:56:3c:08:c6:f6:32:7b:da:60:ce:d8:8d:4c:64:43:
c7:ec:5f:af:4b:b4:d2:e9:4f:ab:89:13:99:e0:e2:93:14:0f:
0e:82:16:06:85:c8:40:5e:93:12:64:d9:ff:cc:e8:ca:3d:06:
47:9c:e8:2d:7a:c1:be:27:ad:46:6c:d2:69:36:cf:16:5b:8b:
49:cd:59:6e
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDANoAMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE4MDJaFw0yNjA4MDMwODQ0NDBaMDMx
MTAvBgNVBAMTKDc2RTA0NkUzRUNBMTBCOTI4NDk5RjIyQTVFNzY1QzA0MTZBNjBB
NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsWQx05kJJQoGRFzs
4NX6B8Tatg3azwVtBDUipKExDxMlBidFkzFSlmVheLNj6uClFbb7ZMlPDoLyi35G
tU/1QC8kTvxCqlFO8ENCUR06W4/IeiOmcaBaq2jAbEMxdvczpRjz6F2jRgVL+QHu
kbQrzagmN7DeeRGMJOPaLfpAXC3GsfHNHtDqyEOCZtJbQLAH9OP/F1dwCf7oHHLS
VeAO3evlPxfBSda3/7nNWpMAu7/lxzb9wG8FoOfzibL9yCM7jIUQoriXTGm5kjdL
g0mTX3Y+/UQzqA7cFCH008+9WdV1SYvXm4Gq/WtNWxv+eaLcOYNST2tm7hGYsyIN
14p9AgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUduBG4+yhC5KEmfIqXnZcBBamCk8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2
MS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yNjEvZHVCRzQteWhDNUtFbWZJcVhuWmNCQmFtQ2s4Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAe
BggrBgEFBQcBCAEB/wQPMA2gCzAJAgJc2wIDALAWMFYGCCsGAQUFBwEHAQH/BEcw
RTA0BAIAATAuAwQCO5kEAwQCZ8XkAwMBfBYDBAZ8LwADAwK2UAMEBMqWEAMEBcuY
QAMEBtJXgDANBAIAAjAHAwUAJAXmADANBgkqhkiG9w0BAQsFAAOCAQEAoKAgVAZP
Y9bLflW4et9VDsAP4yBxlWZc4UtBpLVyY8q5x/5vnHj5HrZtsgh2iJUhlH1HQf1f
8/6zLsR9L5j1eWEyqZdnN2z568fmHM2LT8buaHjHYAbKb9iWHqmA0A1fr8GGKIHr
aN3z1fIxaT3gpzJNRdhUl4G0p9aakjVHV/DNS3Atqw7ECjM5W6ZaIs/iFZ28iTz5
6Rzi+wns5fbHreuUZybsuxiH1X6YXBAoDqFdyaDFNTuwVjwIxvYye9pgztiNTGRD
x+xfr0u00ulPq4kTmeDikxQPDoIWBoXIQF6TEmTZ/8zoyj0GR5zoLXrBvietRmzS
aTbPFluLSc1Zbg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:05:31 2025 by rpki-client