Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
File: tRlLGMyNlt0mESh8YqnqgiDbOm4.cer (raw, json)
Hash identifier: T9CxcTmcvcAWT5nY9XH2PiHeK1wsM78Lid1mdy3I3VY=
Subject key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E2DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:12:44 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 59002
IP: 103.229.20.0/22
IP: 121.100.128.0/18
IP: 2400:d780::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58077 (0xe2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:12:44 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:09:bf:a3:d7:1e:61:de:58:da:50:87:9b:
f1:67:07:01:94:bc:e4:f8:a3:b8:12:2c:80:c7:89:
ce:9e:3a:e6:97:33:3e:2d:e6:bf:d6:40:b6:6a:98:
15:5b:55:52:33:cf:59:51:21:10:72:34:6f:70:86:
1e:de:2a:a7:8b:a1:50:47:e8:95:ac:9b:13:e5:fa:
d9:c1:1b:13:21:29:0e:21:c3:31:14:e1:74:c2:6b:
b1:f3:2e:8d:14:86:20:a2:0c:90:4e:24:cc:16:10:
f7:c2:51:0c:23:eb:96:b2:67:a9:0d:92:25:ed:52:
a3:dc:14:ce:b1:2a:7d:ca:8f:dd:5c:4e:be:ff:2f:
a8:03:4a:b1:e5:5f:78:aa:bc:3a:80:78:5a:ca:aa:
91:4e:db:7a:01:ce:97:d7:6e:cf:bd:88:c3:20:6b:
1e:09:6e:c0:38:98:0f:19:d8:a6:f2:34:8c:83:85:
53:d6:5d:f1:91:16:4b:c9:d6:fa:e7:a2:74:d0:10:
47:bf:fd:d3:76:b9:98:a5:1a:5d:16:99:e9:f9:4e:
38:dc:0c:59:9f:c4:46:ed:61:9b:87:50:c9:52:51:
95:47:0b:49:d2:8d:8c:19:12:51:56:36:9b:31:b3:
5c:26:d8:1d:77:b2:86:c6:8c:79:2a:95:7e:80:3a:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59002
sbgp-ipAddrBlock: critical
IPv4:
103.229.20.0/22
121.100.128.0/18
IPv6:
2400:d780::/32
Signature Algorithm: sha256WithRSAEncryption
a3:07:55:b9:f3:4c:a3:83:db:1c:e4:30:70:23:05:21:76:d7:
46:58:4f:78:a5:2c:5f:03:2f:f6:f2:4e:91:99:b7:3f:9f:d0:
73:2b:db:d1:38:67:d1:59:b0:71:22:df:ec:5d:6b:23:12:9c:
30:69:aa:ef:bf:7d:27:bb:ac:82:ef:ae:59:d3:e8:55:4e:95:
fa:81:9a:10:d2:ea:d1:53:53:0d:50:b0:61:08:b2:e6:eb:58:
3b:a0:56:50:c5:a0:c8:12:a2:13:13:6b:3b:04:93:f6:88:1e:
16:aa:11:26:43:c0:a1:af:c1:f2:ff:a0:00:b6:4e:6d:31:3e:
dc:10:95:b3:94:19:d4:78:43:94:66:c0:cf:9d:22:e1:eb:b1:
46:b6:13:45:45:7c:77:a2:9d:b3:43:d7:7e:6e:1f:db:7d:d4:
bd:ea:27:35:08:c6:cd:83:9a:3c:00:2b:d8:9c:f2:5f:10:50:
4b:ca:9d:f7:66:c2:4f:2c:ed:93:b2:38:9f:80:da:7f:08:e8:
00:e8:af:10:ef:e1:ca:1b:f1:41:4a:e0:ea:fc:48:9f:ce:98:
ac:4f:a6:61:9e:7a:ae:a9:b6:c4:eb:04:75:ec:86:eb:5e:64:
5c:ae:4b:49:f1:97:f0:80:c2:71:e6:ef:83:32:7a:f0:a8:fd:
0c:e3:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:49 2025 by rpki-client