Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TdNpVbTnoAyh-m7c2oSqBzD9Jq4.cer
File: TdNpVbTnoAyh-m7c2oSqBzD9Jq4.cer (raw, json)
Hash identifier: 5cpc7vZR1XqIc1c8hzkqoesDKZ4NdxzAaAKXLogvvis=
Subject key identifier: 4D:D3:69:55:B4:E7:A0:0C:A1:FA:6E:DC:DA:84:AA:07:30:FD:26:AE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DCE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/TdNpVbTnoAyh-m7c2oSqBzD9Jq4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 07 Sep 2025 19:32:35 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 59039
IP: 61.8.160.0/20
IP: 103.13.196.0/22
IP: 124.108.8.0/21
IP: 2405:7d40::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Oct 2025 23:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56548 (0xdce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 7 19:32:35 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4DD36955B4E7A00CA1FA6EDCDA84AA0730FD26AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:ed:ac:d8:09:8a:57:eb:28:b8:87:12:20:
50:60:ac:1e:a6:8b:75:27:9f:be:88:18:90:22:38:
e1:0f:e6:8d:ff:81:d3:b2:da:87:85:45:52:73:7e:
ad:bc:6e:22:d0:eb:cb:04:60:38:df:24:38:d2:be:
40:34:6f:81:67:e1:34:a9:4a:5b:60:72:b6:d9:20:
12:f6:28:c6:6b:e2:3c:18:5e:c4:4c:ab:9b:af:5a:
a3:a6:3c:59:df:11:00:3f:84:f2:1a:8d:af:b8:39:
95:22:34:99:db:a3:82:00:21:63:4f:92:36:ae:35:
1c:1b:1b:09:55:40:80:a7:bc:c5:4e:a8:08:8a:44:
34:88:32:92:3c:26:a1:a7:d4:9f:75:81:e4:2a:96:
cc:0b:e7:90:d2:fb:d3:4e:50:82:55:6c:8d:6d:20:
41:41:a3:8d:87:b2:21:f7:1e:9d:be:63:01:83:f4:
77:7d:fc:ce:7a:db:b3:24:c2:ef:f3:01:e8:0b:ee:
69:ea:ba:3b:a8:e5:3e:e1:dc:f9:4e:92:e7:d7:57:
6a:89:1a:7c:fb:84:98:20:3f:3f:79:2c:80:4e:31:
02:8b:d1:43:34:d8:b5:fc:cc:c0:ac:ef:28:2a:fc:
e2:44:b0:0b:88:6e:3b:da:84:eb:9c:c7:0e:7b:c0:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:69:55:B4:E7:A0:0C:A1:FA:6E:DC:DA:84:AA:07:30:FD:26:AE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/TdNpVbTnoAyh-m7c2oSqBzD9Jq4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59039
sbgp-ipAddrBlock: critical
IPv4:
61.8.160.0/20
103.13.196.0/22
124.108.8.0/21
IPv6:
2405:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
a8:e4:5a:41:bc:51:7c:d2:3f:50:e0:9d:80:2e:2c:4f:e5:af:
c1:e6:8d:30:cd:78:32:7e:35:0d:c9:ed:26:b1:48:42:cb:e0:
ab:d4:33:e2:fe:3c:47:b4:a7:3a:2f:56:2c:75:98:7f:ad:05:
6a:1d:93:21:f1:4b:37:89:f8:ed:4c:58:d7:90:78:fe:37:25:
54:db:76:ff:c1:ba:3c:f1:b0:1b:ac:d7:8a:f9:9d:91:8d:61:
05:b7:a5:11:7e:f9:5b:c8:81:50:c7:2b:d6:50:69:4f:4b:52:
1d:82:cb:f6:f0:d9:20:32:38:22:71:77:35:6e:a5:65:fc:fa:
08:c3:47:eb:d8:17:97:73:92:63:93:70:90:96:78:af:2f:42:
28:7e:09:be:03:ee:ad:ab:63:78:ea:05:fa:97:3a:1b:8b:aa:
a0:9b:f0:30:41:a9:21:a6:f8:6c:3b:f7:89:c7:a2:a6:64:b1:
ef:1a:ea:ca:01:e2:74:4a:d2:b1:b7:59:e5:b5:25:ca:2f:10:
34:1e:80:6c:f3:c0:17:bc:70:02:4c:38:54:21:8a:00:29:b9:
af:db:a8:59:51:eb:1c:92:a3:2e:d8:22:f4:53:46:4a:a7:8a:
df:96:b4:0f:8c:f9:ce:9b:5b:30:11:1d:49:49:06:40:ae:2e:
17:18:80:ca
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIDANzkMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA5MDcxOTMyMzVaFw0yNjA4MDMwODQ0NDBaMDMx
MTAvBgNVBAMTKDRERDM2OTU1QjRFN0EwMENBMUZBNkVEQ0RBODRBQTA3MzBGRDI2
QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuu2s2AmKV+souIcS
IFBgrB6mi3Unn76IGJAiOOEP5o3/gdOy2oeFRVJzfq28biLQ68sEYDjfJDjSvkA0
b4Fn4TSpSltgcrbZIBL2KMZr4jwYXsRMq5uvWqOmPFnfEQA/hPIaja+4OZUiNJnb
o4IAIWNPkjauNRwbGwlVQICnvMVOqAiKRDSIMpI8JqGn1J91geQqlswL55DS+9NO
UIJVbI1tIEFBo42HsiH3Hp2+YwGD9Hd9/M5627Mkwu/zAegL7mnqujuo5T7h3PlO
kufXV2qJGnz7hJggPz95LIBOMQKL0UM02LX8zMCs7ygq/OJEsAuIbjvahOucxw57
wAyRAgMBAAGjggKMMIICiDAdBgNVHQ4EFgQUTdNpVbTnoAyh+m7c2oSqBzD9Jq4w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIy
MDMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjIwMy9UZE5wVmJUbm9BeWgtbTdjMm9TcUJ6RDlKcTQubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmnzA6BggrBgEFBQcBBwEB/wQrMCkw
GAQCAAEwEgMEBD0IoAMEAmcNxAMEA3xsCDANBAIAAjAHAwUAJAV9QDANBgkqhkiG
9w0BAQsFAAOCAQEAqORaQbxRfNI/UOCdgC4sT+WvweaNMM14Mn41DcntJrFIQsvg
q9Qz4v48R7SnOi9WLHWYf60Fah2TIfFLN4n47UxY15B4/jclVNt2/8G6PPGwG6zX
ivmdkY1hBbelEX75W8iBUMcr1lBpT0tSHYLL9vDZIDI4InF3NW6lZfz6CMNH69gX
l3OSY5NwkJZ4ry9CKH4JvgPuratjeOoF+pc6G4uqoJvwMEGpIab4bDv3iceipmSx
7xrqygHidErSsbdZ5bUlyi8QNB6AbPPAF7xwAkw4VCGKACm5r9uoWVHrHJKjLtgi
9FNGSqeK35a0D4z5zptbMBEdSUkGQK4uFxiAyg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:01 2025 by rpki-client