Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
File: rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer (raw, json)
Hash identifier: dFH9QyHNH213Wg2O40raESZ0mnlg5icPYP+Jkvs8SnY=
Subject key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D822
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:12:07 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 63658
IP: 43.242.196.0/22
IP: 43.254.192.0/22
IP: 45.113.200.0/22
IP: 45.117.8.0/22
IP: 45.120.100.0/22
IP: 45.248.8.0/22
IP: 103.8.220.0/22
IP: 103.19.232.0/22
IP: 103.53.124.0/22
IP: 103.60.164.0/22
IP: 103.216.152.0/22
IP: 2402:bf80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 15:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55330 (0xd822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:12:07 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:31:aa:1e:f0:8a:da:7c:86:04:d2:cb:84:
9b:39:b2:25:58:fb:57:f2:45:f0:25:a4:2f:b4:72:
80:1c:86:9c:60:cc:7c:e1:ef:8b:5e:a8:af:27:07:
e2:51:46:b6:2b:1e:39:91:8e:46:7a:0e:23:70:56:
54:70:cb:bd:08:b1:57:57:57:36:cb:cc:90:a8:d1:
b9:b7:dd:8d:f8:fd:63:fa:a6:6f:b8:e1:48:d5:60:
e6:2d:d5:10:eb:fb:c1:a9:49:28:73:2a:ee:9d:b4:
96:89:ff:7c:3b:f4:87:2f:33:7f:71:17:ed:e3:ee:
47:cc:58:81:1a:05:f0:af:fd:ed:b3:4c:07:52:bf:
de:f1:a7:8c:51:54:0c:2a:cb:b9:8c:59:3b:9e:ab:
74:1a:4c:68:dd:bd:c1:38:17:18:13:18:3e:93:18:
be:4d:7f:ac:ff:ef:3d:dd:e6:68:73:61:b1:be:1e:
b6:ea:ae:37:88:ae:d7:84:e1:78:1a:a6:21:0b:ff:
7a:e1:0e:c6:0f:26:d2:e7:a9:f6:0d:c8:78:c8:84:
c2:dc:48:a6:fe:b3:4f:bd:61:d0:39:c2:8d:f4:70:
30:44:43:17:cf:e8:d7:0c:cc:58:34:55:1b:ef:03:
db:e9:68:8f:d0:f0:e1:67:49:40:45:1c:c4:e1:65:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63658
sbgp-ipAddrBlock: critical
IPv4:
43.242.196.0/22
43.254.192.0/22
45.113.200.0/22
45.117.8.0/22
45.120.100.0/22
45.248.8.0/22
103.8.220.0/22
103.19.232.0/22
103.53.124.0/22
103.60.164.0/22
103.216.152.0/22
IPv6:
2402:bf80::/32
Signature Algorithm: sha256WithRSAEncryption
9b:9d:30:31:a4:80:68:1d:bb:04:fd:94:40:0d:62:d0:b6:93:
14:04:fa:0a:ac:36:3a:c6:77:99:50:15:8b:61:0f:64:e5:43:
f0:69:bf:a8:f9:1a:0d:2b:58:2a:87:0f:02:e3:8f:64:ae:4e:
a5:47:b9:15:b7:51:50:a0:c2:16:8b:06:4b:35:11:81:65:14:
58:bc:cd:38:3a:c9:a5:9c:1f:20:92:b8:7c:0b:47:90:0f:89:
3a:c7:83:b1:9f:27:73:23:5f:e2:0b:51:f0:06:63:0e:c9:a9:
d3:e2:eb:6c:78:a4:f2:1f:6d:6d:b2:e8:98:e6:91:fd:32:4b:
ab:2f:69:ff:92:ce:78:04:c5:43:d0:02:c1:ed:ae:94:7f:7b:
f4:21:a7:46:f9:a6:09:59:f2:0e:db:60:36:ec:e3:bf:10:d8:
77:58:25:3f:da:a0:4e:a9:3b:0b:24:d5:a9:27:d2:fb:2c:cc:
ad:ae:42:3c:30:bd:a5:d7:ad:b7:91:86:9a:ef:c5:f2:ef:74:
c8:9d:ae:72:3e:97:85:fa:59:fa:b6:43:92:88:0d:f1:4d:84:
1c:b0:cb:83:3c:3c:d3:60:e9:b5:fa:5e:32:b4:87:80:ff:7d:
8e:f5:86:10:e7:b0:04:21:c9:39:96:af:95:2d:86:c3:97:43:
df:d6:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:45 2025 by rpki-client