Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
File: mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer (raw, json)
Hash identifier: bnUdJL/VpLHp/3d255GdpCScsqNV73KwNhq6wlocKMY=
Subject key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E0C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:05:34 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 23853
IP: 103.91.138.0/23
IP: 120.136.128.0/18
IP: 203.95.128.0/18
IP: 211.144.192.0/19
IP: 211.147.64.0/19
IP: 2404:7600::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57545 (0xe0c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:05:34 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:60:b2:7e:05:90:bf:c9:0e:f0:dc:a7:3e:
d4:cd:18:a6:fd:f4:a5:f4:25:8a:4e:2a:d5:bf:b2:
9d:30:1b:ea:de:dc:a1:dc:6d:3f:f7:ab:2f:19:dd:
7e:31:d3:1c:44:80:d9:8b:a6:33:92:42:ed:3d:31:
21:4a:d3:af:d1:bf:9b:b7:4e:8f:9c:6f:1d:99:a1:
3d:b0:48:4f:30:1f:ae:25:6f:50:bd:6f:6c:57:08:
45:46:85:9f:1d:6d:84:e3:00:9b:5c:ec:99:49:02:
26:da:3f:d3:fb:16:d3:76:a7:2c:cd:80:42:0c:af:
42:e5:b4:79:f9:39:45:c6:06:61:68:7d:e6:36:a2:
f4:82:2d:55:d0:01:58:8c:d1:f3:4d:d2:a2:83:70:
d4:0c:78:df:2d:9f:27:b2:8e:d5:f0:5c:5e:64:7c:
26:48:7c:d2:32:a8:e2:c9:a8:2e:47:e3:8b:f4:c0:
27:63:62:bf:ef:2f:e9:f0:81:48:e1:3b:c5:5d:83:
85:41:34:e4:30:85:29:37:ec:b3:92:59:19:b4:da:
f6:ed:53:32:9d:25:1d:e3:1d:c4:1f:ff:f8:36:d9:
31:a6:33:d5:40:37:c4:98:aa:55:be:a0:b6:16:6d:
93:fa:de:a4:fa:5a:34:be:97:c0:2d:5b:e3:c6:d5:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23853
sbgp-ipAddrBlock: critical
IPv4:
103.91.138.0/23
120.136.128.0/18
203.95.128.0/18
211.144.192.0/19
211.147.64.0/19
IPv6:
2404:7600::/32
Signature Algorithm: sha256WithRSAEncryption
7e:8e:f8:ad:d6:47:e1:c2:5a:f7:74:ad:27:c3:05:3d:9a:ae:
6e:e3:0c:58:0f:44:74:16:63:a8:0b:72:3a:65:7a:8d:c9:a1:
63:38:a3:61:f8:35:4f:10:af:b5:2c:37:7d:86:97:3d:87:8f:
dd:75:c1:9f:17:fc:72:9d:82:24:7c:65:b9:c3:d4:47:70:89:
ac:c6:22:cd:ea:e8:d6:7e:41:35:7a:51:43:8f:7d:c5:e2:13:
54:21:08:dd:87:e7:b5:58:53:59:e1:93:5f:ec:59:ad:88:44:
1d:f5:cb:ed:b3:be:9d:9d:f6:69:eb:6e:75:8a:e4:70:b6:86:
6a:ec:d8:09:c7:d0:cb:1c:75:fe:d6:df:5a:b6:95:ca:9e:df:
48:71:7c:e9:07:d5:4d:2e:c8:9e:46:7a:7e:94:e8:1f:c1:86:
4d:52:48:2f:25:d8:93:e4:bc:b5:a3:04:c4:99:34:12:c7:22:
ae:1b:3d:4a:e0:da:f5:21:ef:70:a4:ec:57:d8:ef:d3:0f:78:
0d:df:98:40:b2:c9:72:be:9e:56:67:29:b1:27:8f:ad:72:cb:
bd:02:e5:aa:f9:5f:ed:f7:0b:56:d9:af:0d:b3:9d:80:52:51:
7b:2a:5e:43:43:9e:36:f9:b4:b0:b6:64:02:13:20:a5:de:f3:
42:80:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 13:04:26 2025 by rpki-client