Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer
File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer (raw, json)
Hash identifier: giGFCgEF176BjMFff3nQQD/M1EIaP91aRY/f7mkIOg4=
Subject key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CD0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:07:21 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 2401:afa0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Apr 2025 10:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52493 (0xcd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Apr 3 08:07:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:dc:71:22:d2:70:ab:1f:d3:2d:91:ff:bb:
e2:c2:c2:6f:a8:17:19:22:ca:1a:c6:48:a9:a9:23:
26:d4:f7:94:66:1a:c8:98:4d:ce:80:6e:0e:fe:e4:
a0:ef:b7:81:20:29:d0:5f:2e:2c:45:fc:41:5c:9b:
a5:19:7c:62:43:6a:d9:15:64:35:93:11:3a:aa:a2:
a9:26:25:76:fb:0d:d3:42:6b:7e:c7:f5:a3:35:3e:
4c:7c:9c:0c:39:8b:45:b1:06:42:f7:ac:cc:c8:3e:
07:12:b8:a0:54:a4:4f:81:2d:8d:d2:28:5c:0d:36:
e1:3b:60:7f:42:22:f9:37:53:c2:d4:52:7c:de:40:
a4:d0:e1:ca:bf:f8:1f:d8:a1:3f:d8:5c:e5:73:fe:
86:1b:12:7a:e9:5f:64:69:43:35:4b:f1:ab:0e:dd:
39:cf:ef:0e:e5:91:62:cd:18:e3:42:30:2d:ec:7b:
61:63:9d:92:9b:25:5c:64:11:43:8b:6b:51:49:f0:
da:5f:3c:a0:e9:c4:bd:32:6a:97:a8:dc:5c:39:d5:
9d:60:6c:9c:e7:07:a9:d7:da:8e:1b:3b:94:31:c1:
c0:cb:95:0b:a6:94:81:6d:7f:92:44:e5:1c:36:73:
6c:3b:de:12:55:7b:65:58:41:9f:c6:65:54:40:29:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:afa0::/32
Signature Algorithm: sha256WithRSAEncryption
33:13:a2:81:c9:2c:fd:31:57:3f:4a:63:0c:e6:06:91:9c:bd:
c8:bf:cd:28:3c:58:ce:0e:81:55:ce:44:7c:5b:04:c8:1e:fe:
ac:95:3d:1d:2b:93:fa:58:4c:30:76:1f:92:36:5f:28:0f:98:
31:fc:22:fa:3f:16:69:e3:b3:26:4a:2f:2b:87:7e:eb:af:73:
c0:82:65:4f:3a:37:94:68:a6:fb:74:71:fe:f7:97:43:9c:51:
62:7a:3b:8f:11:a8:c5:44:1b:e7:0a:7c:c0:94:79:6b:d1:f0:
47:65:0e:cd:63:b1:08:f3:57:d4:f2:74:27:81:00:fb:c1:59:
63:e5:02:de:0e:8a:f2:d8:32:25:0c:f8:08:62:6f:84:8d:a6:
4f:c4:be:52:5f:d7:b1:b1:d6:6a:a3:45:37:37:9c:29:ef:b0:
15:3e:3c:4c:48:c4:e6:16:fe:de:b2:f0:72:d1:05:75:8e:12:
c2:76:e7:e2:79:e2:b0:f2:b6:7c:f2:7f:3b:6e:92:9a:c0:a6:
b3:66:67:05:cf:96:ad:fe:10:c6:9f:a7:e5:17:13:15:75:ef:
87:7f:44:4f:42:9b:22:e3:08:78:d5:d3:80:15:1c:47:84:7b:
ff:23:0c:87:12:4e:5c:04:88:6c:aa:a7:71:e7:fa:c7:da:0b:
be:83:8b:8a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDAM0NMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA3MjFaFw0yNjA0MDMwODAwMDlaMDMx
MTAvBgNVBAMTKDMyOUYyQUZDODZGRTlGMUZBQzlGMkY4QkIzMTJCNUFCOUM5MThD
MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDNxxItJwqx/TLZH/
u+LCwm+oFxkiyhrGSKmpIybU95RmGsiYTc6Abg7+5KDvt4EgKdBfLixF/EFcm6UZ
fGJDatkVZDWTETqqoqkmJXb7DdNCa37H9aM1Pkx8nAw5i0WxBkL3rMzIPgcSuKBU
pE+BLY3SKFwNNuE7YH9CIvk3U8LUUnzeQKTQ4cq/+B/YoT/YXOVz/oYbEnrpX2Rp
QzVL8asO3TnP7w7lkWLNGONCMC3se2FjnZKbJVxkEUOLa1FJ8NpfPKDpxL0yapeo
3Fw51Z1gbJznB6nX2o4bO5QxwcDLlQumlIFtf5JE5Rw2c2w73hJVe2VYQZ/GZVRA
KVczAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUMp8q/Ib+nx+sny+LsxK1q5yRjCYw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzMwMS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGvoDANBgkqhkiG9w0BAQsF
AAOCAQEAMxOigcks/TFXP0pjDOYGkZy9yL/NKDxYzg6BVc5EfFsEyB7+rJU9HSuT
+lhMMHYfkjZfKA+YMfwi+j8WaeOzJkovK4d+669zwIJlTzo3lGim+3Rx/veXQ5xR
Yno7jxGoxUQb5wp8wJR5a9HwR2UOzWOxCPNX1PJ0J4EA+8FZY+UC3g6K8tgyJQz4
CGJvhI2mT8S+Ul/XsbHWaqNFNzecKe+wFT48TEjE5hb+3rLwctEFdY4Swnbn4nni
sPK2fPJ/O26SmsCms2ZnBc+Wrf4Qxp+n5RcTFXXvh39ET0KbIuMIeNXTgBUcR4R7
/yMMhxJOXASIbKqncef6x9oLvoOLig==
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:01:44 2025 by rpki-client