Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer
File: zWXd_8pJD2leEvOlPuuv8O2ncFA.cer (raw, json)
Hash identifier: j8JfCojXQ0LoJkJ8JY9ea2zETWpdabY3ztpUlhSrnqw=
Subject key identifier: CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E1A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:08:09 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 59078
IP: 43.242.52.0/22
IP: 101.48.0.0/16
IP: 103.235.84.0/22
IP: 2402:e7c0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57763 (0xe1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:08:09 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:26:1c:65:93:6d:dc:e5:9f:fc:8f:14:6b:
49:02:36:9e:78:ce:ca:61:3e:05:66:b2:c1:c2:45:
6b:37:b1:de:ea:69:1e:ff:11:8e:5c:34:dc:72:70:
cf:bd:67:7d:f6:8a:14:51:b8:a2:4e:39:7f:24:49:
b3:a9:b9:f4:11:e4:ed:e1:66:05:39:0a:93:bf:8c:
b6:5b:6d:26:cc:28:02:54:03:8a:3a:9a:c2:57:c5:
56:1d:c2:14:e1:a0:66:13:7b:2e:ab:0a:9e:7b:21:
78:e7:0b:4f:b0:d6:e1:97:8b:e3:78:3b:9e:08:2d:
9c:c4:8a:c9:1c:40:49:d3:f7:3d:2c:25:19:56:a0:
2e:ea:c5:fb:94:bd:1d:18:a4:72:fc:2e:fe:76:e6:
1d:e8:65:f5:eb:5c:e1:ac:0b:0a:d1:86:5b:c8:3d:
c5:41:5a:73:56:37:74:11:db:e4:c9:98:2c:00:40:
98:14:11:5d:56:9c:f5:44:32:03:ab:22:84:f2:59:
42:0a:9f:46:2c:4d:80:38:15:0b:f9:e1:62:ee:88:
66:2b:3f:02:87:66:7c:c1:70:cc:56:5b:c6:49:ab:
c7:82:ab:75:f6:89:13:2d:99:13:b9:5d:10:c6:a3:
b1:5e:da:bd:9a:dc:ea:2b:e5:99:dd:77:c1:e4:b8:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59078
sbgp-ipAddrBlock: critical
IPv4:
43.242.52.0/22
101.48.0.0/16
103.235.84.0/22
IPv6:
2402:e7c0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:07:73:3f:f6:34:56:c6:8d:75:9e:05:9b:a7:c3:cc:fa:c9:
0e:c7:79:5e:29:1f:9f:85:6c:d6:be:40:be:d2:fa:59:0e:15:
28:58:d4:08:c7:cd:10:b6:7a:f6:d6:7a:ae:b8:18:1d:c7:64:
e1:a3:2b:77:c4:62:8c:36:91:5e:ff:00:a6:35:26:58:c4:d4:
00:2a:33:a7:b6:f1:59:f3:04:a5:97:8f:2e:9e:c7:45:46:b7:
59:2d:d6:13:0b:5b:36:7c:6b:7c:03:5d:aa:d0:93:d3:39:3a:
88:08:c9:95:a2:10:d2:c2:a7:20:58:6e:ff:b9:2c:91:91:47:
d1:d9:3a:33:10:7d:75:ed:01:1d:aa:27:9c:fa:ce:df:6e:86:
91:9b:f0:82:f9:a4:30:56:04:56:46:3f:0f:70:ef:5e:e6:38:
87:de:2a:7b:21:e7:20:bb:55:da:f7:41:df:f6:7b:9a:e7:a1:
1a:54:0f:be:f2:af:b3:09:f8:d6:61:c5:cb:b0:56:43:9a:9e:
ed:4a:cb:93:84:f9:13:92:eb:99:f4:39:af:b8:ff:74:2a:86:
bf:d2:02:34:9d:9a:e0:84:ad:5a:38:16:14:2e:25:b5:12:25:
9e:3a:b1:f1:1e:69:18:dd:23:71:29:9b:6e:77:85:f7:0c:56:
07:65:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:12 2025 by rpki-client