Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
File: hfO_0aFAkMSCmloxOk0x-cyPMS8.cer (raw, json)
Hash identifier: 6dwQptMN2fNf/lcos4TloWf67n5v3tyjQYpVnXxB23I=
Subject key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AE25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:19:37 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 38372
IP: 112.73.0.0/16
IP: 119.38.128.0/18
IP: 120.31.0.0/16
IP: 2402:3240::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 May 2024 11:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44581 (0xae25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:19:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:d4:7e:0b:d5:5e:33:82:ae:a0:31:86:4e:
cc:00:80:ae:3e:35:a8:92:2e:4c:f4:ff:1c:60:81:
de:41:62:5a:87:d0:80:9a:00:64:5a:49:81:92:d1:
e7:00:c7:ae:53:cc:13:dc:6a:35:04:00:41:71:78:
4b:63:cd:a5:3b:55:55:0e:a6:84:ea:74:df:c8:5c:
a4:f8:6c:b1:f9:27:3e:66:47:3d:34:e8:21:5a:9a:
7d:32:e3:0a:f4:9b:53:8b:df:4e:d0:49:32:61:86:
dd:79:2a:b7:d8:eb:87:5c:4b:d8:52:76:9e:91:82:
df:23:70:16:fa:13:12:54:bb:d3:84:70:d5:d7:49:
41:5e:42:ba:41:07:46:06:94:5a:91:41:0a:b7:97:
68:e5:fe:cc:49:9c:98:20:c2:f0:76:c8:1a:78:42:
45:81:29:03:91:e8:20:b7:c9:9e:b5:b8:8c:5f:56:
ae:7c:fe:dd:9a:5c:c5:4d:81:4d:53:3a:15:94:8a:
3c:d4:01:3d:f8:52:13:72:6d:55:ee:2b:f7:66:0b:
02:cc:6e:a7:33:f9:f8:8d:d3:e7:df:e1:4c:d1:e8:
61:4d:c2:eb:3e:4a:74:13:ef:2f:0d:bc:6c:e2:0e:
52:08:c0:9b:e5:e1:59:05:eb:b0:9a:e9:df:76:ea:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38372
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/16
119.38.128.0/18
120.31.0.0/16
IPv6:
2402:3240::/32
Signature Algorithm: sha256WithRSAEncryption
96:f6:6b:0b:d6:db:ba:bf:dc:64:dd:98:29:60:d6:41:ed:e4:
8b:5b:e1:c9:af:bd:f4:d9:23:e4:01:91:ca:b0:8f:1e:85:2a:
db:14:89:28:f2:56:54:78:eb:27:ea:71:16:59:3e:9f:27:06:
f1:7a:89:19:fc:89:61:dd:7e:48:7d:47:86:99:6f:e7:8f:31:
75:ff:bf:10:92:a4:f5:f2:15:fb:97:be:fc:b5:17:51:74:4a:
a6:95:3a:e8:4c:27:14:26:7e:18:9c:14:95:46:de:9a:44:1f:
3e:35:7c:78:fb:2f:a3:fd:b7:ef:f7:e2:f9:1d:7f:35:8b:da:
df:3f:c7:80:ab:e7:dd:d4:85:e8:ea:47:08:70:bc:6c:5b:57:
02:e8:30:08:a6:78:f8:68:2b:fa:ba:71:8d:67:cd:56:ad:f1:
db:fc:48:3c:49:fc:75:59:6a:80:d4:0d:d1:63:29:fb:80:19:
62:76:ba:04:af:04:8d:5d:4d:85:ac:9b:cf:43:f6:07:0c:6c:
e7:50:4d:31:a6:da:92:a9:cb:a7:5a:33:b2:3f:ae:39:d1:f9:
83:26:a8:bc:9c:e3:39:60:10:4d:7a:86:1a:62:3d:69:7c:cb:
9f:1a:57:3b:3d:73:ec:0f:31:72:60:1b:76:82:76:3e:9d:81:
39:9b:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org