Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GT6TtdHdBGkn5kmj_CMo4RnECGM.cer
File: GT6TtdHdBGkn5kmj_CMo4RnECGM.cer (raw, json)
Hash identifier: yNz7a2aUbhkdF4xtzHy+peKHQbO/Pxy/uH0anwnNpEM=
Subject key identifier: 19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E299
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:11:16 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 45081
IP: 121.255.0.0/16
IP: 202.141.160.0/19
IP: 2400:b600::/32
IP: 2401:1e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58009 (0xe299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:11:16 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=193E93B5D1DD046927E649A3FC2328E119C40863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:e9:6e:15:00:e9:49:2a:79:45:4d:3b:3c:
be:8a:bb:2c:46:68:0c:e9:cc:18:2f:8d:0a:47:41:
a2:27:a7:48:a3:88:49:49:38:3c:26:a5:5c:4c:af:
21:3f:cd:29:d6:7d:68:e4:ee:d0:f1:ea:0a:43:45:
57:fd:83:f7:8e:40:23:0d:15:60:23:a0:79:84:cd:
32:02:d3:83:29:e8:f0:28:06:6e:39:97:a9:8f:37:
e9:68:66:8d:40:a8:8e:19:20:e5:0a:46:86:4f:74:
b2:77:c3:bb:7c:9a:86:b4:17:05:7d:29:a9:b4:49:
d9:73:92:c4:6a:25:6c:c3:0c:2e:90:fd:e1:63:a4:
c9:ca:f4:b1:09:63:03:fd:fb:01:10:74:0b:24:6e:
66:70:b1:6f:25:2f:4f:a6:64:a4:a8:ce:e4:10:9b:
18:64:ca:ca:6b:9a:b5:c1:ae:0b:b9:e1:03:25:ec:
01:e1:22:46:1a:f9:a4:1f:74:de:55:49:f2:f8:e2:
10:f4:ba:f0:e9:4c:a0:97:16:4f:a6:da:4e:b9:3c:
7e:ce:11:b1:83:9e:15:30:35:8e:19:9b:32:88:c1:
e1:fb:d3:47:7c:4a:58:af:67:57:94:5a:56:db:b7:
aa:7f:e1:77:7e:38:28:71:9d:1e:90:51:16:3b:83:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:93:B5:D1:DD:04:69:27:E6:49:A3:FC:23:28:E1:19:C4:08:63
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/GT6TtdHdBGkn5kmj_CMo4RnECGM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45081
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
202.141.160.0/19
IPv6:
2400:b600::/32
2401:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
a2:b2:93:d0:cf:11:e4:b2:ed:47:a5:aa:72:f9:08:84:7c:45:
34:53:ca:62:26:75:b4:84:4a:04:8e:dc:49:3d:5c:f5:18:be:
95:03:d0:bd:52:fb:3f:be:c0:58:82:11:7b:4e:da:9b:d1:9f:
63:39:30:ca:f7:cf:3f:96:50:c0:bc:12:93:fa:d5:c4:73:f6:
47:29:18:fa:d6:52:68:c1:82:42:28:04:21:a6:f6:3e:75:20:
3b:7d:47:33:a0:00:e0:f3:44:26:b9:62:a2:55:3c:28:40:f4:
2a:22:14:06:a9:19:99:84:13:20:34:ca:94:d8:82:ba:34:dc:
09:91:6b:de:f4:52:51:a2:54:9e:ad:12:b1:cf:59:ff:c5:c8:
a5:64:47:49:da:b2:ba:d5:99:dc:37:bb:31:65:6b:be:c9:73:
a1:3d:b5:fd:c1:6c:e0:b6:17:56:c5:62:b7:bc:df:b8:62:77:
63:bb:25:c1:98:fa:19:d6:68:fc:c6:0d:ed:7a:06:8b:a5:e2:
7a:2a:1a:c6:4e:e7:bc:7b:60:e0:64:04:45:55:1a:b2:e0:33:
ef:6e:14:e7:f4:c9:cc:b8:e2:c2:4c:bd:13:f2:46:73:a3:0e:
3d:7b:01:3d:d4:c9:2e:bb:18:5f:f1:3c:5c:f3:7d:4c:8a:8a:
5c:82:d8:35
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIDAOKZMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzExMTZaFw0yNjEwMjMwMzAxMDNaMDMx
MTAvBgNVBAMTKDE5M0U5M0I1RDFERDA0NjkyN0U2NDlBM0ZDMjMyOEUxMTlDNDA4
NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/eluFQDpSSp5RU07
PL6KuyxGaAzpzBgvjQpHQaInp0ijiElJODwmpVxMryE/zSnWfWjk7tDx6gpDRVf9
g/eOQCMNFWAjoHmEzTIC04Mp6PAoBm45l6mPN+loZo1AqI4ZIOUKRoZPdLJ3w7t8
moa0FwV9Kam0SdlzksRqJWzDDC6Q/eFjpMnK9LEJYwP9+wEQdAskbmZwsW8lL0+m
ZKSozuQQmxhkysprmrXBrgu54QMl7AHhIkYa+aQfdN5VSfL44hD0uvDpTKCXFk+m
2k65PH7OEbGDnhUwNY4ZmzKIweH700d8SlivZ1eUWlbbt6p/4Xd+OChxnR6QURY7
g1kFAgMBAAGjggKKMIIChjAdBgNVHQ4EFgQUGT6TtdHdBGkn5kmj/CMo4RnECGMw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE5
Mi8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8xOTIvR1Q2VHRkSGRCR2tuNWttal9DTW80Um5FQ0dNLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAsBkwOgYIKwYBBQUHAQcBAf8EKzApMBEE
AgABMAsDAwB5/wMEBcqNoDAUBAIAAjAOAwUAJAC2AAMFACQBHgAwDQYJKoZIhvcN
AQELBQADggEBAKKyk9DPEeSy7UelqnL5CIR8RTRTymImdbSESgSO3Ek9XPUYvpUD
0L1S+z++wFiCEXtO2pvRn2M5MMr3zz+WUMC8EpP61cRz9kcpGPrWUmjBgkIoBCGm
9j51IDt9RzOgAODzRCa5YqJVPChA9CoiFAapGZmEEyA0ypTYgro03AmRa970UlGi
VJ6tErHPWf/FyKVkR0nasrrVmdw3uzFla77Jc6E9tf3BbOC2F1bFYre837hid2O7
JcGY+hnWaPzGDe16Boul4noqGsZO57x7YOBkBEVVGrLgM+9uFOf0ycy44sJMvRPy
RnOjDj17AT3UyS67GF/xPFzzfUyKilyC2DU=
-----END CERTIFICATE-----
Generated at Thu Oct 23 13:03:27 2025 by rpki-client