Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
File: ze9xEd6YvXVtkrNNOU2i057_m44.cer (raw, json)
Hash identifier: GbHCmjWoGSIlDwPT5b+1YUwjFVZiCXYysOopzPtNfL8=
Subject key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D88C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:13:13 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 58593
IP: 42.159.0.0/16
IP: 103.9.8.0/22
IP: 163.228.0.0/16
IP: 2404:7940::/32
IP: 2406:e500::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55436 (0xd88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:13:13 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:2d:87:41:8f:b7:96:8d:b1:e7:38:4c:8b:
1b:d7:13:01:85:92:1c:d0:f8:03:c2:b8:2b:3e:15:
c3:99:f0:37:b6:3f:f7:de:af:ad:f4:f6:79:a4:e0:
ca:5e:a2:70:55:58:b0:b9:a0:a4:42:0a:5a:48:fa:
fa:81:90:6e:65:18:77:47:e6:e6:61:b4:a6:68:a5:
5d:48:cb:70:fb:12:68:12:12:00:e4:d9:fd:ef:23:
dc:a3:ad:f0:e5:27:43:fc:fd:56:c5:af:36:b6:18:
73:82:7f:c1:1f:ea:ac:a0:1b:31:dc:3c:30:8d:3a:
1f:86:e3:bd:24:e6:04:e0:ae:ff:a6:5d:ab:99:50:
0b:58:b7:8a:59:77:54:d7:ab:8a:b8:54:b6:b7:65:
6a:56:dd:ab:41:12:28:3a:d3:38:f0:68:1d:41:00:
13:1b:d7:38:90:9c:85:ed:70:c1:be:1c:61:10:08:
b8:3f:45:53:1b:8c:b4:ee:c2:6a:e1:f9:23:3e:85:
ee:c4:cd:e1:3a:82:90:e0:2b:b5:02:64:3f:04:ab:
18:86:c9:0f:07:65:83:31:ce:c6:1b:14:72:22:34:
77:18:4d:df:09:71:83:89:02:b3:b6:6c:39:bf:a0:
85:57:3c:3c:25:75:03:da:02:4a:de:f4:15:01:f4:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58593
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
163.228.0.0/16
IPv6:
2404:7940::/32
2406:e500::/32
Signature Algorithm: sha256WithRSAEncryption
02:f3:3d:12:20:1a:bc:5a:3c:1d:09:86:cb:27:02:be:61:1e:
c7:56:e8:a5:89:22:d5:a0:34:5c:cf:b1:89:a1:63:ba:db:d7:
be:43:3e:f4:be:80:63:1b:ff:7f:47:97:57:b3:62:dc:4a:44:
92:24:28:7e:77:fc:99:32:ea:14:93:61:59:0a:19:dc:25:73:
ac:34:89:e8:04:66:a9:42:08:cf:81:35:93:db:3a:5b:cb:7e:
d6:a0:37:cd:ef:49:fa:8b:c6:9a:54:78:62:cd:de:4b:a9:2c:
20:b3:e4:e4:d5:be:30:5a:c6:30:a9:cd:81:c3:e9:09:da:83:
28:57:a0:26:c4:92:3a:2c:7b:07:38:c7:44:56:02:86:2f:0c:
05:f7:cf:8b:b5:3e:d6:12:fb:84:47:71:7b:b9:23:a1:a6:70:
49:cd:db:9d:01:24:83:1f:da:1e:16:f5:69:ab:e5:98:7d:2c:
24:5b:85:d7:b7:12:ff:53:d7:41:2b:71:8b:54:4a:26:3b:be:
ca:af:aa:6c:f8:db:ce:af:f0:84:bf:48:28:cc:ec:f9:3d:0d:
78:3d:10:0e:6d:cc:5c:36:ce:d6:0f:44:d4:22:96:81:e2:b1:
36:93:4c:c3:f1:33:13:77:f4:08:be:72:1a:0f:74:d2:92:67:
9a:ed:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:31:12 2025 by rpki-client