Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
File: hfO_0aFAkMSCmloxOk0x-cyPMS8.cer (raw, json)
Hash identifier: AAI7iT5tZE/BiY5nPDfDnwN9GTwHh6RBijw3EuH4kJs=
Subject key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BAB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:48:51 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 38372
IP: 112.73.0.0/16
IP: 119.38.128.0/18
IP: 120.31.0.0/16
IP: 2402:3240::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47801 (0xbab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:48:51 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:d4:7e:0b:d5:5e:33:82:ae:a0:31:86:4e:
cc:00:80:ae:3e:35:a8:92:2e:4c:f4:ff:1c:60:81:
de:41:62:5a:87:d0:80:9a:00:64:5a:49:81:92:d1:
e7:00:c7:ae:53:cc:13:dc:6a:35:04:00:41:71:78:
4b:63:cd:a5:3b:55:55:0e:a6:84:ea:74:df:c8:5c:
a4:f8:6c:b1:f9:27:3e:66:47:3d:34:e8:21:5a:9a:
7d:32:e3:0a:f4:9b:53:8b:df:4e:d0:49:32:61:86:
dd:79:2a:b7:d8:eb:87:5c:4b:d8:52:76:9e:91:82:
df:23:70:16:fa:13:12:54:bb:d3:84:70:d5:d7:49:
41:5e:42:ba:41:07:46:06:94:5a:91:41:0a:b7:97:
68:e5:fe:cc:49:9c:98:20:c2:f0:76:c8:1a:78:42:
45:81:29:03:91:e8:20:b7:c9:9e:b5:b8:8c:5f:56:
ae:7c:fe:dd:9a:5c:c5:4d:81:4d:53:3a:15:94:8a:
3c:d4:01:3d:f8:52:13:72:6d:55:ee:2b:f7:66:0b:
02:cc:6e:a7:33:f9:f8:8d:d3:e7:df:e1:4c:d1:e8:
61:4d:c2:eb:3e:4a:74:13:ef:2f:0d:bc:6c:e2:0e:
52:08:c0:9b:e5:e1:59:05:eb:b0:9a:e9:df:76:ea:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38372
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/16
119.38.128.0/18
120.31.0.0/16
IPv6:
2402:3240::/32
Signature Algorithm: sha256WithRSAEncryption
55:52:c8:cd:1f:d1:6a:6c:9a:e7:87:31:81:15:a3:8f:fe:0c:
25:d1:a3:c5:ec:e3:b3:29:da:c0:f3:02:b2:93:b6:85:27:e3:
1f:94:5a:2c:c0:86:1d:3a:26:51:3c:27:98:83:96:a8:0f:57:
22:98:3c:9d:23:ba:b7:4c:a3:bf:38:34:ad:8f:7c:3f:02:de:
61:65:6b:b9:f9:0c:6b:11:90:86:c8:b2:e6:93:46:0b:bf:87:
e0:8a:75:78:3f:89:95:02:d8:73:02:7f:a0:08:8d:3e:6e:c5:
77:55:7d:5e:eb:87:e1:e8:bf:e7:53:4f:64:ab:49:f9:5e:99:
13:b3:0c:76:9c:71:37:90:03:08:84:b9:49:2a:34:9c:d6:20:
a7:e0:23:06:c8:41:e8:4a:a6:ef:64:c0:d2:ec:1a:e2:0c:2b:
db:f5:43:e0:66:99:22:57:82:3f:37:36:5a:b4:32:e3:81:8d:
f3:34:ee:96:a7:5a:50:87:82:67:ea:ae:fc:a0:f8:e6:0d:59:
08:0d:84:40:dd:88:b3:44:c1:bb:67:b1:ea:13:2a:5e:72:49:
30:95:cb:8a:2b:5d:44:b5:a5:28:a9:95:f4:86:08:e9:3d:26:
98:75:21:36:0c:5b:f0:80:d0:a6:b0:c4:23:c0:c9:b2:5b:27:
a5:c9:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:40 2024 by rpki-client on console-ams.rpki-client.org