Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
File: 8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer (raw, json)
Hash identifier: +2xxpkbPfPEwe8R7gkXdscnZMja7BneAhk74Ww97Gi8=
Subject key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DB8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 20 Aug 2025 07:51:34 +0000
Certificate not after: Thu 20 Aug 2026 07:49:18 +0000
Subordinate resources: AS: 63582 -- 63583
AS: 139137
AS: 139140
IP: 45.120.240.0/22
IP: 103.61.60.0/22
IP: 2402:7d80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56204 (0xdb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 20 07:51:34 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:04:d3:e5:92:0c:22:16:ea:50:e0:30:67:
37:2e:3b:0f:b8:00:59:74:a5:be:58:12:06:81:2e:
70:bd:2a:6a:2e:74:75:26:ba:f1:d0:83:81:e8:7a:
ae:6b:b7:4d:0f:2d:78:b7:54:05:72:44:67:f6:1c:
cf:6e:28:bc:6f:48:2f:4b:ea:05:ed:e7:4c:da:5a:
c7:c4:dc:03:68:b3:ee:4b:95:0c:32:90:d7:9c:e7:
7f:a4:e7:43:e9:d7:d2:ee:c7:4b:67:65:cf:ac:c8:
19:89:46:81:37:52:24:93:c7:fb:57:83:76:ee:d8:
10:29:fd:93:f7:81:5c:81:ec:0d:0f:b9:27:d6:d0:
fb:0f:44:95:60:26:cf:38:05:c7:37:0e:ab:72:51:
17:a5:87:6b:b9:bb:22:25:ec:b0:7d:18:a9:35:90:
80:84:05:a5:18:2b:a2:ce:73:f8:d4:38:b5:c6:56:
a6:d4:7c:2f:52:4a:78:4a:38:e7:ec:ae:d5:77:3f:
b7:1a:e6:2f:df:09:f7:9a:6a:70:4e:b5:e5:c1:28:
67:af:6e:db:e4:ca:03:60:5d:86:99:77:10:48:ee:
77:04:bf:36:75:e8:40:5d:53:b8:99:f0:66:c2:65:
65:7e:5a:5a:b1:37:75:be:ff:3b:df:db:dc:bf:ea:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63582-63583
139137
139140
sbgp-ipAddrBlock: critical
IPv4:
45.120.240.0/22
103.61.60.0/22
IPv6:
2402:7d80::/32
Signature Algorithm: sha256WithRSAEncryption
81:30:5c:ff:c3:88:0c:aa:97:29:d2:f1:95:a3:6a:86:08:c1:
9a:90:96:d7:17:81:7c:17:4e:ce:31:4a:a3:3b:7d:3f:61:94:
d9:69:63:36:a3:f9:37:e4:80:76:ef:de:d2:af:1b:61:3f:c5:
d6:c0:0f:cb:df:06:ba:f1:2c:2b:1c:bc:be:bd:d5:5c:ba:7f:
59:d6:4d:e7:91:49:8e:d3:31:02:1e:82:04:1d:f3:6b:89:24:
a2:73:7f:e1:25:2b:09:f8:c8:46:8f:7f:33:13:a8:6e:b0:08:
b8:79:d6:4b:45:0f:41:c6:b5:4b:15:ca:73:a7:9d:26:69:cf:
17:bd:b1:38:4d:7d:46:50:fb:51:48:7a:a9:81:76:8f:ab:69:
0a:4c:b2:6f:d5:bb:3c:72:dd:11:fc:7d:6d:a3:d5:67:15:c2:
32:f8:d0:5b:5c:7b:50:e2:64:6e:02:16:db:65:59:d3:ee:5b:
9b:2d:bf:00:77:10:af:5c:b4:4f:d4:43:02:91:1d:71:6a:1e:
15:ee:1b:9e:2d:48:f0:f0:ba:ed:ca:47:40:b6:10:8f:77:f9:
6a:60:d9:5e:b3:50:cb:8b:98:ab:62:6b:7e:72:4b:2a:ca:05:
b4:3c:41:b4:42:eb:17:7b:2e:bc:55:37:24:38:9a:32:1c:c9:
fb:55:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:06:11 2025 by rpki-client