Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer (raw, json)
Hash identifier: /ItkyletYb6huQT/6FrDmU8NE86x9me/8DA0jd3Zvl0=
Subject key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D966
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:15:43 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: IP: 103.50.44.0 -- 103.50.75.255
IP: 103.50.108.0 -- 103.50.127.255
IP: 103.50.132.0 -- 103.50.143.255
IP: 103.50.172.0 -- 103.50.203.255
IP: 103.50.220.0 -- 103.50.251.255
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55654 (0xd966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:15:43 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:c9:5c:5c:b8:1f:1e:fd:08:25:00:8f:4a:
1a:bc:21:ab:4d:a8:11:f7:6f:e8:fc:21:b0:6f:8b:
70:08:2b:7a:07:45:69:1b:9e:78:bf:9c:8d:e1:3a:
d7:42:a6:02:45:34:bd:c6:2c:68:ee:b9:f5:65:a6:
37:22:e6:c6:49:78:0f:2f:10:7b:6f:9d:68:ea:17:
77:31:1a:be:1b:a6:d3:32:6f:4d:b4:91:de:02:8a:
9e:d5:48:a9:03:07:05:a4:9f:96:4f:1c:74:a4:f0:
74:85:cc:3b:77:6b:59:70:38:54:8f:6f:f7:1d:98:
d4:f7:c1:c8:f0:aa:a0:19:5b:67:82:8b:01:f8:5e:
98:93:8a:7d:f1:e2:6e:7b:f2:27:bf:77:45:bd:a6:
6d:11:f5:a0:ec:dd:70:b9:b8:0c:43:5b:87:b1:36:
52:00:52:6a:81:67:e0:57:37:bf:b8:77:24:3f:bd:
84:f1:03:55:7c:d9:1d:45:c6:d0:30:34:d5:13:4c:
f6:eb:0b:17:ac:b1:b6:63:84:53:c0:d0:4e:85:cc:
f2:2e:8d:ce:93:e8:31:49:19:b9:aa:da:66:a6:c8:
bc:c2:df:56:c7:e6:b0:79:b0:fc:60:ad:51:be:0b:
a8:01:d6:cc:f7:97:00:ef:c9:50:5f:b7:65:01:1a:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.44.0-103.50.75.255
103.50.108.0-103.50.127.255
103.50.132.0-103.50.143.255
103.50.172.0-103.50.203.255
103.50.220.0-103.50.251.255
Signature Algorithm: sha256WithRSAEncryption
79:67:1b:3f:0c:9b:01:81:cb:09:df:a0:e1:76:b4:f7:1e:44:
12:a4:32:12:73:a5:8f:98:d8:4a:ce:f3:5c:b1:01:80:34:c8:
7a:47:84:bc:62:32:91:e8:c7:4e:25:6e:ec:d6:ec:6f:a2:a0:
89:a9:9a:b1:42:74:60:5f:aa:aa:9a:82:28:2f:fa:0e:47:28:
c3:86:4e:d4:41:d3:67:1e:cc:8f:1a:5b:1f:8a:2a:ac:53:99:
7c:80:b9:86:8a:36:a5:50:c3:25:8e:86:e7:60:25:f2:35:2b:
19:d9:91:f5:a0:f3:58:54:a7:a4:5d:59:9d:cd:0a:b7:f6:66:
bc:75:e8:d1:ba:be:01:9a:9f:22:05:89:2a:cc:6a:9b:e4:34:
e5:51:36:f4:fc:b2:c6:c8:23:7a:dd:72:a4:58:5f:be:2e:f0:
91:c3:78:c6:37:0a:27:9c:49:a3:1b:13:66:c3:2f:0e:31:d5:
55:fc:4c:22:38:c9:72:d3:3b:f1:d5:04:5d:a3:fe:a4:d6:2a:
fb:14:01:d9:69:be:c4:85:97:cd:ff:cd:30:37:46:5e:d4:51:
92:43:54:70:47:c9:98:54:ea:60:39:24:cf:c6:69:9a:f8:a6:
d8:24:c8:99:95:89:36:bb:03:11:7b:cd:26:b9:23:a6:2f:72:
5c:30:34:b2
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIDANlmMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE1NDNaFw0yNjA4MDMwODQ0NDBaMDMx
MTAvBgNVBAMTKEJDQjZEM0M0OTZGNTAxMkM1OEQxQjQ4RTgzNUMwMTM2RTY0MEFC
QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrslcXLgfHv0IJQCP
Shq8IatNqBH3b+j8IbBvi3AIK3oHRWkbnni/nI3hOtdCpgJFNL3GLGjuufVlpjci
5sZJeA8vEHtvnWjqF3cxGr4bptMyb020kd4Cip7VSKkDBwWkn5ZPHHSk8HSFzDt3
a1lwOFSPb/cdmNT3wcjwqqAZW2eCiwH4XpiTin3x4m578ie/d0W9pm0R9aDs3XC5
uAxDW4exNlIAUmqBZ+BXN7+4dyQ/vYTxA1V82R1FxtAwNNUTTPbrCxessbZjhFPA
0E6FzPIujc6T6DFJGbmq2mamyLzC31bH5rB5sPxgrVG+C6gB1sz3lwDvyVBft2UB
GurxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvLbTxJb1ASxY0bSOg1wBNuZAq7gw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEw
NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMTA0OS92TGJUeEpiMUFTeFkwYlNPZzF3Qk51WkFxN2cubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGMAwDBAJnMiwDBAJnMkgwDAMEAmcy
bAMEB2cyADAMAwQCZzKEAwQEZzKAMAwDBAJnMqwDBAJnMsgwDAMEAmcy3AMEAmcy
+DANBgkqhkiG9w0BAQsFAAOCAQEAeWcbPwybAYHLCd+g4Xa09x5EEqQyEnOlj5jY
Ss7zXLEBgDTIekeEvGIykejHTiVu7Nbsb6KgiamasUJ0YF+qqpqCKC/6Dkcow4ZO
1EHTZx7MjxpbH4oqrFOZfIC5hoo2pVDDJY6G52Al8jUrGdmR9aDzWFSnpF1Znc0K
t/ZmvHXo0bq+AZqfIgWJKsxqm+Q05VE29Pyyxsgjet1ypFhfvi7wkcN4xjcKJ5xJ
oxsTZsMvDjHVVfxMIjjJctM78dUEXaP+pNYq+xQB2Wm+xIWXzf/NMDdGXtRRkkNU
cEfJmFTqYDkkz8Zpmvim2CTImZWJNrsDEXvNJrkjpi9yXDA0sg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 06:01:05 2025 by rpki-client