Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/h5M3g18FYrKaaQsbUBKsbiS66D8.cer
File: h5M3g18FYrKaaQsbUBKsbiS66D8.cer (raw, json)
Hash identifier: QLKul1BVygT77Zfr3OR3VG2pzhBdI3m2v5RINP+OvR0=
Subject key identifier: 87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D48E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 13 Jun 2025 03:32:58 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 9806
AS: 17780
IP: 58.117.0.0 -- 58.119.255.255
IP: 58.128.0.0/14
IP: 58.132.128.0 -- 58.135.255.255
IP: 117.106.0.0 -- 117.107.127.255
IP: 117.112.0.0/16
IP: 117.113.128.0 -- 117.116.255.255
IP: 117.118.0.0/17
IP: 117.119.0.0/16
IP: 211.153.0.0/16
IP: 222.249.0.0/16
IP: 2401:e020::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Jun 2025 23:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54414 (0xd48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 13 03:32:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=879337835F0562B29A690B1B5012AC6E24BAE83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:a0:98:1a:93:d4:51:7a:a9:fd:56:93:e7:
d1:6f:4d:de:6f:82:23:02:b6:45:b6:e9:60:db:94:
26:b1:b0:55:90:69:d2:ec:f7:e2:14:50:3e:1f:78:
0e:82:5d:ba:be:e6:35:b1:5a:22:ca:2a:41:e4:8d:
30:d2:82:68:48:bb:0f:d9:04:76:ab:1e:7f:f7:57:
a8:c2:a8:57:46:ee:a5:e9:3c:1d:f5:3a:2a:f2:8e:
74:9b:97:bb:77:91:71:db:ae:37:e2:fb:6e:34:7c:
59:b4:8d:97:58:82:66:db:35:b8:32:81:c1:77:83:
c0:50:20:9a:48:bb:87:6a:8a:27:62:e5:30:67:bf:
f3:57:74:4e:f2:fc:38:8a:72:db:11:7d:6b:ad:4a:
0d:c1:d9:8b:e6:24:43:42:a1:10:1b:9c:47:24:2a:
bf:72:01:70:86:9e:af:15:1d:18:ad:33:1a:53:e9:
46:c5:64:08:18:86:32:19:19:4a:2b:27:66:34:f4:
a4:bd:78:6e:ad:a8:74:09:93:20:a0:2e:f0:f8:50:
a3:b1:8f:40:ac:f9:65:06:e0:7e:42:e3:9a:0c:d9:
cf:58:7b:d4:da:75:ff:5d:0a:ad:99:89:c6:f9:28:
d6:0a:50:89:53:48:fd:d3:1d:3f:f3:c7:9a:76:12:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:37:83:5F:05:62:B2:9A:69:0B:1B:50:12:AC:6E:24:BA:E8:3F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/h5M3g18FYrKaaQsbUBKsbiS66D8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9806
17780
sbgp-ipAddrBlock: critical
IPv4:
58.117.0.0-58.119.255.255
58.128.0.0/14
58.132.128.0-58.135.255.255
117.106.0.0-117.107.127.255
117.112.0.0/16
117.113.128.0-117.116.255.255
117.118.0.0/17
117.119.0.0/16
211.153.0.0/16
222.249.0.0/16
IPv6:
2401:e020::/32
Signature Algorithm: sha256WithRSAEncryption
37:6e:a2:b9:56:a9:8e:b5:d2:50:64:f2:38:a1:2a:0c:6a:73:
5a:52:36:5c:a8:14:ef:98:d3:fa:d2:7a:83:6b:7e:b3:6f:c6:
30:58:af:98:3d:f5:be:fa:1e:a4:a8:bc:74:d0:5a:69:df:d8:
7a:f9:e5:2b:65:6c:79:58:cb:57:96:9c:5e:34:e3:6a:b3:2f:
40:d6:6e:09:89:2e:d6:ac:c1:25:3a:80:c3:52:90:86:3b:b8:
ae:4f:27:39:df:cb:70:31:7f:e1:38:ac:f9:ee:2d:19:f3:a6:
e3:a7:0f:ae:d3:cc:51:27:6e:3a:11:db:46:c4:21:66:bb:57:
49:99:b3:ce:de:e0:69:c9:b8:61:c9:d5:bf:3e:56:90:05:c2:
69:06:84:71:d0:cf:f7:7d:d7:9c:9e:5c:11:a8:a1:ed:10:50:
10:91:96:8a:35:e0:9e:14:9c:37:a4:78:3c:91:f6:b3:1d:71:
48:f0:9b:c3:16:3c:2d:3f:a6:93:be:35:37:57:d0:5e:40:a5:
d4:8c:35:03:d8:f0:c6:cc:28:24:f5:17:4e:68:18:47:f4:37:
aa:d2:b4:06:3c:0d:24:05:c5:7f:5a:16:83:07:1d:27:7f:46:
d8:63:d1:2b:1e:67:15:0c:b8:3e:c9:1a:26:20:e7:cd:2c:57:
fc:90:fd:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:35:46 2025 by rpki-client