Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/XTqAkIy6pPTbBrykx87XLMcmN7o.cer
File: XTqAkIy6pPTbBrykx87XLMcmN7o.cer (raw, json)
Hash identifier: +0W+An8BgShSrRP4PLDTjdmaIFt+v8XcEka7PzugG4g=
Subject key identifier: 5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BAAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:48:41 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 37969
IP: 103.83.64.0/22
IP: 103.98.92.0 -- 103.98.99.255
IP: 2400:8fc0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47789 (0xbaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:48:41 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5D3A80908CBAA4F4DB06BCA4C7CED72CC72637BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:71:e7:ba:19:6d:8c:0e:24:8b:57:27:d1:
33:cd:ae:80:83:a6:15:4c:b2:57:5b:3c:06:1b:ec:
9b:0e:cf:95:7c:d2:b2:50:d1:4e:7f:66:b7:5b:3b:
d9:a1:b5:3c:88:47:e2:a4:ba:ad:8d:50:d9:89:13:
13:04:85:a3:c5:d0:9f:02:af:07:be:8d:0c:26:59:
90:a9:79:be:74:d8:84:67:4d:f0:09:b1:3b:72:ab:
b7:f1:78:71:89:6c:00:4a:03:c3:1a:4a:3c:f1:1f:
02:ef:f0:ab:93:22:eb:d8:c9:b7:40:9a:b2:a4:14:
48:95:25:30:b2:c6:18:21:47:f1:c6:08:5e:e4:27:
04:92:b3:3b:a2:80:7a:e8:d4:b9:a9:98:39:fa:9d:
1d:3e:6c:f1:94:29:3b:75:fc:73:f9:c8:4f:7f:fe:
e0:fd:64:37:99:25:68:23:06:d6:3f:fd:b0:d8:b9:
b2:50:3c:d4:a4:d2:fc:d0:b1:23:3b:70:a8:95:69:
7e:61:14:3b:33:4d:88:16:42:a5:80:82:e6:17:03:
b8:e6:76:a3:9f:49:e5:5a:78:a7:0a:c1:be:58:a5:
22:1a:f6:8c:6c:72:1e:88:8c:2f:16:63:ce:a2:5d:
dc:eb:25:7b:5d:e9:3d:c7:2c:61:db:db:46:b4:b3:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37969
sbgp-ipAddrBlock: critical
IPv4:
103.83.64.0/22
103.98.92.0-103.98.99.255
IPv6:
2400:8fc0::/32
Signature Algorithm: sha256WithRSAEncryption
04:50:9f:48:fa:3d:56:ac:c9:c3:f4:4f:db:1f:f9:c8:aa:0b:
ef:83:9a:bf:65:a9:b9:e1:d7:60:3c:a8:96:b8:c9:35:04:57:
13:70:5c:b8:fe:d9:4f:cb:94:5e:76:43:a3:81:d5:9a:0a:d2:
f8:26:26:a8:6e:38:a0:80:cf:ee:7a:50:73:78:a9:52:0a:2f:
a3:8e:38:eb:b2:f3:c1:8b:bc:ba:6c:bd:19:ca:b9:ae:e9:c7:
13:9d:f7:9d:5d:25:05:42:ef:08:d2:3a:29:c8:e5:f6:35:54:
d4:62:88:ec:5b:e6:a5:9f:ac:77:ce:52:32:83:22:d9:27:d9:
ac:51:e1:c0:16:62:de:b6:4c:e2:4e:a9:eb:a7:43:66:1f:52:
7c:e4:39:dc:02:c1:42:bb:bb:9b:28:e0:1d:06:c1:63:7a:58:
9d:6c:83:69:8c:07:ec:1b:ef:86:2b:af:5a:a3:55:c3:60:48:
15:06:85:6f:99:e4:b6:ca:e5:42:7c:70:ed:12:52:ef:c1:c2:
42:b7:e1:6e:34:99:07:58:87:5c:ee:09:17:4d:26:a2:6c:54:
ee:1e:14:c6:46:e6:e0:c4:9b:83:fa:34:95:92:9f:ce:3c:20:
a6:0d:06:ba:4d:ad:e2:cb:7a:7c:d9:8e:78:46:97:1f:f2:a0:
af:b2:50:9e
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDALqtMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ4NDFaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDVEM0E4MDkwOENCQUE0RjREQjA2QkNBNEM3Q0VENzJDQzcyNjM3
QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXnHnuhltjA4ki1cn
0TPNroCDphVMsldbPAYb7JsOz5V80rJQ0U5/ZrdbO9mhtTyIR+Kkuq2NUNmJExME
haPF0J8Crwe+jQwmWZCpeb502IRnTfAJsTtyq7fxeHGJbABKA8MaSjzxHwLv8KuT
IuvYybdAmrKkFEiVJTCyxhghR/HGCF7kJwSSszuigHro1LmpmDn6nR0+bPGUKTt1
/HP5yE9//uD9ZDeZJWgjBtY//bDYubJQPNSk0vzQsSM7cKiVaX5hFDszTYgWQqWA
guYXA7jmdqOfSeVaeKcKwb5YpSIa9oxsch6IjC8WY86iXdzrJXtd6T3HLGHb20a0
s0EDAgMBAAGjggKOMIICijAdBgNVHQ4EFgQUXTqAkIy6pPTbBrykx87XLMcmN7ow
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy
NjIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzI2Mi9YVHFBa0l5NnBQVGJCcnlreDg3WExNY21ON28ubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCUUTA8BggrBgEFBQcBBwEB/wQtMCsw
GgQCAAEwFAMEAmdTQDAMAwQCZ2JcAwQCZ2JgMA0EAgACMAcDBQAkAI/AMA0GCSqG
SIb3DQEBCwUAA4IBAQAEUJ9I+j1WrMnD9E/bH/nIqgvvg5q/Zam54ddgPKiWuMk1
BFcTcFy4/tlPy5RedkOjgdWaCtL4JiaobjiggM/uelBzeKlSCi+jjjjrsvPBi7y6
bL0Zyrmu6ccTnfedXSUFQu8I0jopyOX2NVTUYojsW+aln6x3zlIygyLZJ9msUeHA
FmLetkziTqnrp0NmH1J85DncAsFCu7ubKOAdBsFjelidbINpjAfsG++GK69ao1XD
YEgVBoVvmeS2yuVCfHDtElLvwcJCt+FuNJkHWIdc7gkXTSaibFTuHhTGRubgxJuD
+jSVkp/OPCCmDQa6Ta3iy3p82Y54Rpcf8qCvslCe
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org