Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer
File: -b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer (raw, json)
Hash identifier: Olt+5BCxnfZmBUpm7A2axrTcWW0YTJuWrQMIp02D+t8=
Subject key identifier: F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3C8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:09:27 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 139.198.0.0/16
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Apr 2025 03:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15501 (0x3c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Apr 3 08:09:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F9BE3342C9FE8DB62E2F3B799B330CCDE3FE0C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:42:ae:e4:44:72:d7:f3:39:9b:11:4e:10:
15:95:b0:33:da:cd:0c:61:c3:53:98:1b:b8:a8:2f:
f4:ca:42:cc:7c:62:d9:4f:cf:ae:68:ad:af:7f:10:
b3:23:47:9e:b5:86:a5:38:99:09:89:34:47:39:14:
6e:9e:1a:8b:24:ee:7c:0e:9b:6f:e3:5c:d5:cf:f2:
6d:88:13:7e:e5:1a:4d:99:ab:9d:ad:7d:c1:b6:98:
f7:cf:7e:64:08:a8:45:f5:8f:a9:60:31:1a:55:8e:
9c:be:f9:2f:b6:85:96:53:bb:91:36:3b:f9:ab:e6:
97:93:ae:0b:58:3f:77:c7:a1:79:bd:9f:9b:7b:b5:
8a:ee:4a:1e:49:e5:ef:51:5a:5b:84:a5:53:01:cc:
18:93:25:f0:1c:3f:85:94:81:81:a2:02:2b:cd:a0:
5e:e6:31:3f:b9:62:e6:e0:14:51:79:97:77:b5:45:
b5:2f:37:07:0d:6f:0c:dd:c4:4e:50:62:fa:4a:a7:
a4:cd:92:01:c3:09:98:cd:90:49:f7:95:83:ac:8f:
d8:90:9d:19:ec:c3:e8:29:77:97:b2:57:44:bf:07:
96:6b:47:3a:18:30:3a:a2:4c:38:67:a4:16:00:ef:
5e:59:c5:bc:c5:72:ee:b7:4c:a9:1e:d7:98:e3:cb:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:08:f0:a4:2c:3a:69:ea:ed:bf:bf:ff:74:b0:48:aa:5d:50:
97:9a:14:76:c6:b7:89:56:39:58:ea:12:88:92:dd:91:ba:9d:
6d:27:c0:4f:2f:34:81:58:e6:90:1a:b5:87:93:6d:c9:a4:0c:
26:34:ea:0a:22:8f:37:01:58:8c:54:bd:0e:50:96:4f:17:64:
c3:21:ab:5e:18:cb:f6:e8:01:ec:40:dc:31:87:cb:30:3f:4d:
84:fc:ab:4a:d9:da:3c:82:de:97:a1:b8:26:8a:ca:46:ce:b0:
ea:c3:17:73:2f:80:52:6c:5b:72:dd:3f:0a:03:ab:2c:17:36:
dc:bb:db:6c:07:98:f2:41:b4:36:ae:00:91:6c:a5:26:46:15:
e0:93:b0:93:78:ad:67:fe:48:1c:33:2d:82:cc:bb:6d:b1:7d:
72:a6:87:55:e5:32:96:4f:05:78:6c:5d:64:17:a5:c0:32:c1:
31:5e:fc:22:0c:b2:c8:f7:a4:7b:f8:11:d4:e3:47:d5:f2:e6:
23:3d:04:d2:d5:2c:6d:39:90:37:05:9d:3d:1e:72:91:02:6d:
20:b4:d5:5d:2a:88:90:0e:9b:3a:7b:08:ad:ac:1d:5c:75:26:
db:78:a3:0a:4c:3c:f4:c8:d4:3c:15:8a:ef:37:c0:66:cd:af:
5c:31:fc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:53 2025 by rpki-client