Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer
File: YUdo14zf1NPTMMvhK6DxuTJ6rM8.cer (raw, json)
Hash identifier: +rl8h5fJFCZ+xj4x83/wZjeu8aGxMYsbrr+z8SPTJGM=
Subject key identifier: 61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:51:07 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 103.98.124.0/22
IP: 103.98.248.0/21
IP: 2401:98c0::/32
IP: 2401:a5c0::/32
IP: 2401:a640::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47963 (0xbb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:51:07 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=614768D78CDFD4D3D330CBE12BA0F1B9327AACCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:c5:5d:9e:43:cd:8d:81:5b:89:65:8a:9d:
2e:f6:f3:10:b9:6e:de:d7:c4:4b:5a:43:bc:2e:cc:
4a:21:18:d7:c3:ce:5e:e1:27:aa:4d:08:15:3c:07:
68:0f:ff:33:fe:d6:a7:61:05:3e:7e:3e:4b:93:29:
44:c0:e0:fb:f9:32:1a:00:42:eb:7f:bb:dc:21:43:
7a:a3:fb:f2:4e:ca:f6:9a:96:4a:23:b1:cf:36:4a:
b9:33:2c:e9:a0:0c:68:08:a2:12:52:13:01:55:30:
22:01:5a:29:e9:ea:59:3a:ce:eb:2b:a1:df:f2:db:
17:3a:0f:56:6b:a0:b0:db:12:3f:29:ac:df:50:a3:
85:1c:99:6e:ea:e6:ab:7c:c0:fa:ab:3a:00:a8:54:
ce:79:12:55:7b:a8:fa:c3:b1:b2:d3:e5:01:85:0b:
7d:56:49:41:d9:51:5b:5d:81:d4:3e:ef:1b:60:6c:
29:61:0e:c5:f9:19:f4:76:7f:76:95:e1:89:31:7c:
d0:18:82:81:16:c0:de:85:71:d4:f4:e8:65:31:64:
18:5d:e7:34:e7:f5:fe:9e:8d:b6:02:0e:6f:77:1c:
5f:c3:af:08:c3:fc:f7:b7:a6:69:f9:19:d5:c3:f5:
83:c6:cd:5e:84:ca:8a:ed:6a:de:28:73:59:9f:81:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:68:D7:8C:DF:D4:D3:D3:30:CB:E1:2B:A0:F1:B9:32:7A:AC:CF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3303/YUdo14zf1NPTMMvhK6DxuTJ6rM8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.124.0/22
103.98.248.0/21
IPv6:
2401:98c0::/32
2401:a5c0::/32
2401:a640::/32
Signature Algorithm: sha256WithRSAEncryption
8c:13:d1:79:24:66:08:13:26:29:cb:85:63:3c:92:90:c8:f2:
00:9f:ca:8e:6e:91:f4:ca:59:5d:79:d3:69:4b:73:82:1f:b2:
cf:d1:6e:fa:24:42:ec:f6:6b:2a:7c:86:06:d5:89:3d:a0:31:
82:dd:f9:ea:e0:03:da:87:4f:bc:45:47:aa:11:4d:4a:d2:26:
73:1b:bd:e0:4a:ee:4f:9e:3a:5b:16:a5:cb:b6:01:f9:a5:1a:
5f:0e:73:73:50:1c:fb:95:0d:ce:ff:ec:37:c0:e5:e4:2e:80:
be:2c:e3:67:c6:cf:26:a0:09:0e:8a:15:2c:52:89:b0:86:97:
02:d3:65:74:8a:3a:28:f3:21:fb:fd:40:2e:97:e4:66:d0:1b:
49:4a:92:51:e0:11:a8:b0:fd:77:55:e5:3b:4e:09:7a:57:ec:
de:56:ed:19:7b:b1:a4:9a:02:c6:4b:13:d0:bc:fa:4f:9d:01:
46:8c:e7:b2:ba:ff:82:40:7b:f0:66:48:fd:05:f0:2a:49:c5:
16:12:13:3c:38:88:06:a6:8e:15:e4:b6:60:b1:ee:74:7a:22:
cd:52:48:77:b2:91:87:85:36:92:80:fd:47:9f:88:19:e9:be:
84:63:f5:cd:85:62:ea:ff:eb:5d:d6:28:e0:e1:11:02:ef:c8:
42:6c:20:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org