Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
File: rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer (raw, json)
Hash identifier: CzrnKOvePY/V3yiXKCcyaz8X6k9xt87rzCyzBaZqeLo=
Subject key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E09B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:05:02 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 63658
IP: 43.242.196.0/22
IP: 43.254.192.0/22
IP: 45.113.200.0/22
IP: 45.117.8.0/22
IP: 45.120.100.0/22
IP: 45.248.8.0/22
IP: 103.8.220.0/22
IP: 103.19.232.0/22
IP: 103.53.124.0/22
IP: 103.60.164.0/22
IP: 103.216.152.0/22
IP: 2402:bf80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 09:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57499 (0xe09b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:05:02 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:31:aa:1e:f0:8a:da:7c:86:04:d2:cb:84:
9b:39:b2:25:58:fb:57:f2:45:f0:25:a4:2f:b4:72:
80:1c:86:9c:60:cc:7c:e1:ef:8b:5e:a8:af:27:07:
e2:51:46:b6:2b:1e:39:91:8e:46:7a:0e:23:70:56:
54:70:cb:bd:08:b1:57:57:57:36:cb:cc:90:a8:d1:
b9:b7:dd:8d:f8:fd:63:fa:a6:6f:b8:e1:48:d5:60:
e6:2d:d5:10:eb:fb:c1:a9:49:28:73:2a:ee:9d:b4:
96:89:ff:7c:3b:f4:87:2f:33:7f:71:17:ed:e3:ee:
47:cc:58:81:1a:05:f0:af:fd:ed:b3:4c:07:52:bf:
de:f1:a7:8c:51:54:0c:2a:cb:b9:8c:59:3b:9e:ab:
74:1a:4c:68:dd:bd:c1:38:17:18:13:18:3e:93:18:
be:4d:7f:ac:ff:ef:3d:dd:e6:68:73:61:b1:be:1e:
b6:ea:ae:37:88:ae:d7:84:e1:78:1a:a6:21:0b:ff:
7a:e1:0e:c6:0f:26:d2:e7:a9:f6:0d:c8:78:c8:84:
c2:dc:48:a6:fe:b3:4f:bd:61:d0:39:c2:8d:f4:70:
30:44:43:17:cf:e8:d7:0c:cc:58:34:55:1b:ef:03:
db:e9:68:8f:d0:f0:e1:67:49:40:45:1c:c4:e1:65:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63658
sbgp-ipAddrBlock: critical
IPv4:
43.242.196.0/22
43.254.192.0/22
45.113.200.0/22
45.117.8.0/22
45.120.100.0/22
45.248.8.0/22
103.8.220.0/22
103.19.232.0/22
103.53.124.0/22
103.60.164.0/22
103.216.152.0/22
IPv6:
2402:bf80::/32
Signature Algorithm: sha256WithRSAEncryption
32:43:0f:c3:85:f1:f6:86:ca:29:4d:1c:15:42:9e:57:26:39:
c9:81:5f:a0:0a:84:87:e5:4d:b8:f2:b9:ac:82:0d:66:1b:00:
eb:fb:e3:f1:09:39:8d:e1:d4:54:8c:01:5b:ca:c2:38:cc:6a:
94:d0:ab:d2:ca:c3:55:c4:6f:35:d7:ec:2f:6f:69:aa:91:9c:
74:47:4d:96:4b:e8:68:24:1b:76:cd:58:b9:78:4f:24:5a:b6:
63:22:50:2b:4a:48:42:1c:02:bb:5f:4f:91:6a:98:a5:66:d1:
94:2b:39:97:5f:c3:27:dc:f2:70:0b:fd:38:66:0e:45:3e:b4:
da:28:a4:5d:3f:37:4d:13:98:14:10:e6:bf:ae:63:7e:ea:99:
4c:55:98:ab:b1:2a:89:cc:6d:78:cc:15:11:82:a2:9c:82:0e:
4a:a0:6f:52:5d:79:b9:7e:fb:2d:3f:af:90:a3:7b:0e:6c:72:
dd:84:3e:b9:9e:2d:26:a1:d4:cb:8d:c2:52:c0:cb:e8:c2:33:
ca:cd:ec:49:0a:6f:42:a5:ac:38:9f:d4:23:79:21:44:a8:12:
1f:60:13:65:ba:d2:7a:5e:40:ae:3a:7c:6b:6c:9b:1a:94:e0:
83:cd:b5:cc:62:e4:3c:af:77:8b:ff:96:10:a0:88:20:e1:22:
11:1f:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:12 2025 by rpki-client