Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GT6TtdHdBGkn5kmj_CMo4RnECGM.cer
File: GT6TtdHdBGkn5kmj_CMo4RnECGM.cer (raw, json)
Hash identifier: 7gm1hxkC+8ZkEnxB3bfTKVUYwELJRY2auTLrNo6laMk=
Subject key identifier: 19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DD6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 15 Sep 2025 19:33:58 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 45081
IP: 121.255.0.0/16
IP: 202.141.160.0/19
IP: 2400:b600::/32
IP: 2401:1e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Oct 2025 23:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56682 (0xdd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 15 19:33:58 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=193E93B5D1DD046927E649A3FC2328E119C40863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:e9:6e:15:00:e9:49:2a:79:45:4d:3b:3c:
be:8a:bb:2c:46:68:0c:e9:cc:18:2f:8d:0a:47:41:
a2:27:a7:48:a3:88:49:49:38:3c:26:a5:5c:4c:af:
21:3f:cd:29:d6:7d:68:e4:ee:d0:f1:ea:0a:43:45:
57:fd:83:f7:8e:40:23:0d:15:60:23:a0:79:84:cd:
32:02:d3:83:29:e8:f0:28:06:6e:39:97:a9:8f:37:
e9:68:66:8d:40:a8:8e:19:20:e5:0a:46:86:4f:74:
b2:77:c3:bb:7c:9a:86:b4:17:05:7d:29:a9:b4:49:
d9:73:92:c4:6a:25:6c:c3:0c:2e:90:fd:e1:63:a4:
c9:ca:f4:b1:09:63:03:fd:fb:01:10:74:0b:24:6e:
66:70:b1:6f:25:2f:4f:a6:64:a4:a8:ce:e4:10:9b:
18:64:ca:ca:6b:9a:b5:c1:ae:0b:b9:e1:03:25:ec:
01:e1:22:46:1a:f9:a4:1f:74:de:55:49:f2:f8:e2:
10:f4:ba:f0:e9:4c:a0:97:16:4f:a6:da:4e:b9:3c:
7e:ce:11:b1:83:9e:15:30:35:8e:19:9b:32:88:c1:
e1:fb:d3:47:7c:4a:58:af:67:57:94:5a:56:db:b7:
aa:7f:e1:77:7e:38:28:71:9d:1e:90:51:16:3b:83:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45081
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
202.141.160.0/19
IPv6:
2400:b600::/32
2401:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
31:d3:1b:92:b6:8b:f4:be:1f:53:94:8c:c1:af:79:cc:ee:38:
82:cc:fb:1d:ec:9b:8a:7a:59:b1:e2:4a:56:68:94:81:3b:50:
fd:e8:cf:6a:13:ef:95:98:dc:cd:89:de:4c:a5:3d:a0:52:2d:
65:fa:67:23:12:dd:5e:4c:f2:b6:ad:e3:1b:a7:80:8c:c0:9b:
9f:f9:b5:0b:a2:7b:19:d9:99:f8:dd:d4:10:20:8a:9a:07:ae:
69:1e:cd:ed:dd:32:a6:21:aa:89:cc:c4:0d:17:06:a9:44:97:
c7:5a:b3:52:8e:6b:7e:36:80:c3:8a:52:1e:24:6d:1f:29:16:
cf:37:85:be:82:5d:94:68:a9:d8:15:6c:b3:8b:74:fd:a3:5b:
c7:37:0c:37:a3:37:e3:1c:da:27:9c:49:9c:55:a6:73:87:d6:
b7:56:7c:41:33:4d:8c:7c:ed:d4:9c:50:08:e2:67:1c:3f:29:
04:29:a5:3c:cb:97:88:83:12:5a:36:b3:2e:18:34:5c:e0:46:
2e:5a:6c:81:6b:cb:ed:30:93:2e:d8:63:b6:c7:89:7a:c4:2e:
6c:20:e0:af:ef:86:d6:27:b3:3c:3d:8d:68:5c:26:da:ef:d0:
cf:00:bd:48:74:04:8d:6b:e7:3c:84:9b:a4:e3:ab:9a:8c:4f:
a3:67:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:03:15 2025 by rpki-client