Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DLBMxaazmxSN1xDvXG4_LZOAtFU.cer
File: DLBMxaazmxSN1xDvXG4_LZOAtFU.cer (raw, json)
Hash identifier: CgdwYoY6WHN486RlNWaFGVBbX+wjQiWGB3vwUAk0nPE=
Subject key identifier: 0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:10:29 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 55989
IP: 45.124.76.0/22
IP: 103.43.132.0/22
IP: 103.157.212.0/23
IP: 103.192.208.0/22
IP: 103.235.100.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57945 (0xe259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:10:29 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=0CB04CC5A6B39B148DD710EF5C6E3F2D9380B455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:c6:32:88:0d:3d:7f:d7:d6:ce:f9:ee:ab:
6b:dd:e0:96:44:da:62:2e:12:ed:08:42:b9:15:23:
d1:a0:3c:86:ee:62:ad:db:96:42:6c:b0:5b:38:05:
3c:93:77:02:53:1e:db:42:3f:73:71:db:be:2a:f1:
8c:71:92:b5:42:87:8a:e4:5c:eb:be:a8:75:7e:6b:
dc:d0:fd:fc:31:02:be:6f:98:19:f7:4b:a6:26:0c:
7f:05:42:19:02:9a:94:07:9b:5b:65:ed:15:f9:58:
b1:49:f6:4f:bd:e6:51:67:19:d1:00:58:e1:3a:1e:
58:5f:4c:b0:ec:e9:ac:c6:70:bb:52:4c:6b:f7:df:
04:3d:91:b8:48:94:b6:20:59:51:16:bb:68:71:04:
fd:14:2c:06:c2:52:ab:c2:0e:60:3d:54:e1:ca:88:
21:9f:ce:8e:af:dd:27:22:74:eb:d2:f4:76:fd:8b:
9e:ed:c6:36:a1:b5:f8:80:23:8b:ce:9d:13:a8:af:
ef:c5:60:1e:69:2d:c9:79:16:e3:ea:56:e8:bd:ae:
b3:42:37:34:33:30:4d:dd:6b:25:fd:2c:3e:ce:e4:
93:84:94:8f:ba:a8:df:3d:12:e8:3f:0a:b1:ad:52:
cf:6e:1c:2a:ea:1b:d9:12:ce:46:57:49:7f:00:c1:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55989
sbgp-ipAddrBlock: critical
IPv4:
45.124.76.0/22
103.43.132.0/22
103.157.212.0/23
103.192.208.0/22
103.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
27:c6:bd:eb:8d:9f:1a:bc:1f:4d:30:dc:dd:4c:16:1f:a2:c9:
20:92:d8:78:60:43:1c:f6:6c:ed:71:b3:5c:77:2e:5b:9c:4a:
82:0f:41:ac:29:88:23:0c:05:d5:4f:6c:93:35:96:c9:9f:7c:
04:60:39:7d:6e:47:da:c0:a5:e2:aa:bc:56:de:8e:4b:54:b6:
70:c0:ac:7a:90:fb:09:d7:56:db:37:9e:e0:51:6a:84:ec:78:
98:63:f7:24:f6:76:4d:67:03:f5:2e:57:fe:be:8c:06:8f:ff:
ab:0d:be:73:fa:ec:38:dd:ca:50:31:ac:6d:59:50:c3:d0:30:
cf:a0:ae:c3:d7:c2:61:77:a4:94:79:46:7c:04:a2:1b:5e:33:
b6:0f:75:3a:b4:56:97:f4:8e:69:8a:73:d3:3c:f7:5f:64:3d:
15:f9:ff:36:27:d4:0b:23:97:46:20:2c:cf:87:0d:93:99:06:
0b:25:72:d8:67:69:44:09:a1:ad:47:49:87:29:cb:2d:6c:26:
60:90:5a:7e:d1:d8:54:ad:02:c5:fa:5f:86:94:6b:9c:f7:f5:
8b:39:a0:d5:99:62:dd:5a:66:9f:60:e7:00:21:b7:e6:08:f0:
3b:38:f3:d5:6c:0f:d9:0d:63:eb:4f:39:9a:02:5b:d4:83:38:
05:11:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:19:49 2025 by rpki-client