Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
File: tRlLGMyNlt0mESh8YqnqgiDbOm4.cer (raw, json)
Hash identifier: H49N5sAZD7YZLyii93eYX86sSpH6tC9aZvwgoXlEhHc=
Subject key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D9EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:17:45 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 59002
IP: 103.229.20.0/22
IP: 121.100.128.0/18
IP: 2400:d780::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55786 (0xd9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:17:45 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:09:bf:a3:d7:1e:61:de:58:da:50:87:9b:
f1:67:07:01:94:bc:e4:f8:a3:b8:12:2c:80:c7:89:
ce:9e:3a:e6:97:33:3e:2d:e6:bf:d6:40:b6:6a:98:
15:5b:55:52:33:cf:59:51:21:10:72:34:6f:70:86:
1e:de:2a:a7:8b:a1:50:47:e8:95:ac:9b:13:e5:fa:
d9:c1:1b:13:21:29:0e:21:c3:31:14:e1:74:c2:6b:
b1:f3:2e:8d:14:86:20:a2:0c:90:4e:24:cc:16:10:
f7:c2:51:0c:23:eb:96:b2:67:a9:0d:92:25:ed:52:
a3:dc:14:ce:b1:2a:7d:ca:8f:dd:5c:4e:be:ff:2f:
a8:03:4a:b1:e5:5f:78:aa:bc:3a:80:78:5a:ca:aa:
91:4e:db:7a:01:ce:97:d7:6e:cf:bd:88:c3:20:6b:
1e:09:6e:c0:38:98:0f:19:d8:a6:f2:34:8c:83:85:
53:d6:5d:f1:91:16:4b:c9:d6:fa:e7:a2:74:d0:10:
47:bf:fd:d3:76:b9:98:a5:1a:5d:16:99:e9:f9:4e:
38:dc:0c:59:9f:c4:46:ed:61:9b:87:50:c9:52:51:
95:47:0b:49:d2:8d:8c:19:12:51:56:36:9b:31:b3:
5c:26:d8:1d:77:b2:86:c6:8c:79:2a:95:7e:80:3a:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59002
sbgp-ipAddrBlock: critical
IPv4:
103.229.20.0/22
121.100.128.0/18
IPv6:
2400:d780::/32
Signature Algorithm: sha256WithRSAEncryption
88:08:5e:99:57:bf:60:9f:6c:96:b8:f2:24:01:ba:c6:01:41:
3e:13:0f:d4:85:19:70:16:f8:92:1d:cc:fe:62:09:a8:39:59:
3c:e5:ac:ca:55:4f:43:cf:1f:43:cf:c5:c1:e9:00:01:1b:1e:
3c:2c:20:2b:0f:c7:d7:e7:c7:53:e7:d6:a0:68:8d:9d:57:b5:
0f:4c:d9:42:aa:66:ca:7e:18:26:83:40:47:4f:8e:46:81:82:
c5:2e:aa:83:ae:6b:f3:c7:8d:e3:2a:2a:83:ea:d6:38:d4:0d:
75:c5:44:07:d9:d3:46:b5:f3:e3:cd:cd:a0:f1:91:1b:55:d7:
21:53:e2:c3:d2:42:70:f1:ab:28:16:20:44:12:79:6f:e0:59:
9e:8f:23:9e:fc:c3:9d:38:81:65:40:65:2b:15:0e:1b:37:11:
54:90:69:39:63:1f:fb:91:24:e7:db:d5:18:e4:e8:18:b6:75:
92:61:0e:90:9c:8b:71:97:e6:8b:58:66:09:9b:9d:70:26:2a:
4c:29:67:21:f2:39:24:60:9b:c3:87:6f:2c:28:77:3f:fb:55:
7b:02:d9:fe:62:87:6b:29:6b:c7:2f:90:c2:2c:45:d2:56:6d:
17:30:c4:6f:12:eb:bb:7e:33:21:1f:ee:6f:61:2a:e3:c5:11:
b0:cf:8d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:12 2025 by rpki-client