Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer (raw, json)
Hash identifier: iE/NqCvWyViaMunzJkMlJ5SnahYhpvpWecd7uBvXfEo=
Subject key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DCEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 07 Sep 2025 19:34:39 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: IP: 36.206.0.0/16
IP: 36.212.0.0 -- 36.221.255.255
IP: 110.100.0.0/16
IP: 110.116.0.0/16
IP: 110.199.0.0/16
IP: 110.218.0.0/15
IP: 122.94.0.0/16
IP: 123.77.0.0/16
IP: 222.45.0.0/16
IP: 222.49.128.0/17
IP: 222.59.128.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Oct 2025 23:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56554 (0xdcea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 7 19:34:39 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:ad:1b:43:76:5d:77:9d:6c:3c:27:96:d9:
fb:42:1d:91:c9:d2:bc:ee:73:8e:09:97:59:99:b3:
20:75:1f:bb:19:ff:a8:22:12:f8:92:1b:37:f6:c6:
07:2f:f0:83:52:81:88:0e:ad:9c:7e:a1:60:0e:e9:
2f:1f:2f:6e:48:69:52:6f:a2:67:4f:3d:58:37:1f:
4f:59:4c:82:6d:74:4e:34:8e:c2:50:84:a9:2a:a7:
83:00:61:3d:e5:03:f9:b1:86:3f:04:4c:ce:69:33:
1d:31:6e:27:e1:01:be:88:c4:60:e6:00:2b:a3:b7:
09:f1:5e:9a:e5:87:ee:13:e6:b2:7b:b6:4c:9c:6c:
67:ee:9f:18:26:b8:05:9e:cc:b2:ff:ad:4f:9d:88:
78:8e:b7:bb:ef:9f:31:a5:88:96:3e:06:6c:34:46:
35:a4:e7:ca:eb:44:b3:51:10:57:32:6a:73:79:4e:
a7:ed:1e:7a:0c:b3:59:9b:c5:f8:1e:0d:dc:14:c3:
a3:87:63:5b:a9:8e:e8:c1:48:6a:a1:00:7d:82:67:
14:21:1d:01:d9:6c:47:a5:08:e4:6c:60:37:3e:cf:
01:0d:97:38:d8:37:af:98:9c:68:c9:e3:af:f2:7d:
9a:65:6a:21:61:40:a1:94:3a:c3:12:62:14:93:57:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.206.0.0/16
36.212.0.0-36.221.255.255
110.100.0.0/16
110.116.0.0/16
110.199.0.0/16
110.218.0.0/15
122.94.0.0/16
123.77.0.0/16
222.45.0.0/16
222.49.128.0/17
222.59.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3d:8e:b0:f2:e9:c4:0a:3e:dc:37:5e:b0:ae:c9:68:5b:f8:45:
f8:0e:c3:0c:ca:e6:c4:bb:67:d4:13:38:1d:39:84:e3:0e:b5:
a0:62:3d:8c:34:2e:de:83:26:dc:89:8e:6a:97:d5:f4:31:bf:
5a:46:49:92:92:5e:00:b3:a6:b4:ef:2a:9f:28:61:03:87:ca:
bc:a3:24:fd:68:60:a5:3d:c2:c0:c4:c6:87:46:d5:54:2c:4a:
61:9a:1d:0b:12:d0:57:cc:ad:a7:4f:c3:47:62:1f:32:ec:77:
c6:21:ac:8b:22:cb:73:e8:ee:df:91:74:9f:e6:a2:5c:c8:c4:
48:69:68:c6:a4:90:1c:f6:a0:63:ff:70:3e:0c:22:bb:eb:aa:
4e:1b:e8:0a:25:b0:ff:36:f0:91:a9:25:c2:fe:e8:fe:ac:7a:
20:dc:dc:e7:4b:6b:df:03:a7:a1:71:12:05:57:dd:27:6a:6f:
da:03:6d:bf:9e:a2:d9:e1:fe:2f:6b:2d:5d:df:33:19:ee:4e:
c2:37:36:a7:a5:f2:36:74:2a:e1:9e:d2:21:e3:db:09:e2:6b:
6e:09:d8:5a:45:e8:c0:29:10:c7:b5:d1:09:87:72:53:2c:d6:
46:0b:06:bb:35:3f:16:fe:be:ee:f4:db:ac:c3:37:43:02:40:
b8:67:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:04:46 2025 by rpki-client