Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
File: yxZwfq8L39Eyav2b3sav-m5jupg.cer (raw, json)
Hash identifier: vLkRKVVdLARFdD/cUjSjSQnz/8W0t666ly/1bkXaNP0=
Subject key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E15F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:07:16 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 37968
IP: 103.2.164.0/22
IP: 103.168.98.0/23
IP: 202.46.224.0/20
IP: 2407:8f40::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57695 (0xe15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:07:16 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:77:fc:8d:77:10:86:f6:17:af:4a:1d:90:
0c:e8:53:e8:2c:f3:79:a6:8c:c4:9e:03:ba:9e:06:
ef:22:01:51:4b:e4:5c:5e:3b:f0:62:b6:6a:a0:20:
11:20:87:67:11:0f:cc:2e:53:4c:2b:a6:b0:e6:0a:
08:be:c0:9c:4c:16:ab:50:a0:74:76:26:fb:20:81:
c0:e3:7a:a6:45:d1:15:24:eb:ae:1a:a0:43:20:4c:
6e:8b:1d:77:59:64:6e:7d:d6:67:51:ec:7e:b1:92:
a6:3f:6c:1f:06:54:51:57:eb:10:a5:1d:ce:70:ca:
90:29:05:52:7f:83:c4:57:71:83:85:20:be:30:12:
b3:94:df:7b:16:6d:e0:65:fa:38:5e:52:ce:25:94:
a3:82:d3:27:81:fb:4d:d7:2f:5d:8a:ad:fb:98:f6:
e4:9a:2b:b1:5a:5f:08:0e:5e:de:a3:57:4c:c3:b9:
22:90:1d:18:60:16:4a:0f:2d:64:77:7b:6b:f7:2b:
d2:13:a4:b2:51:32:0f:bb:70:4c:6a:c1:74:8e:10:
26:35:35:f5:67:82:01:25:16:75:ec:03:58:3e:25:
cf:bd:ae:16:85:60:a6:06:a8:e4:ac:60:7f:11:a5:
63:8a:ae:86:d6:aa:9d:81:84:19:85:51:76:99:80:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37968
sbgp-ipAddrBlock: critical
IPv4:
103.2.164.0/22
103.168.98.0/23
202.46.224.0/20
IPv6:
2407:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
7c:23:50:10:7a:65:9f:a0:1c:6e:f3:99:4b:05:bd:61:c8:b8:
75:3f:0b:c5:d4:cd:ed:a7:7f:ca:69:c3:27:58:3e:63:b0:e1:
45:44:52:38:3d:24:7b:4c:84:f1:5c:17:7a:c9:44:90:52:3a:
18:aa:f6:4e:b8:fd:bc:8a:8b:ee:79:2e:da:07:1c:56:b1:07:
f6:6e:58:b1:b6:c6:43:af:2a:16:0e:ef:21:6c:c0:94:34:9b:
02:90:2d:03:19:11:ba:aa:d9:28:f1:f8:29:5e:0e:02:cd:0a:
75:1a:46:13:c9:98:f4:fc:37:11:d9:e2:92:d1:ff:64:88:ca:
a6:8a:c6:66:b1:fb:95:df:26:44:c1:90:a4:56:8b:e6:7f:4d:
48:db:b4:54:58:04:5f:22:4a:8b:d9:7a:42:03:f2:f5:01:c1:
20:7c:5d:4b:83:b6:f0:01:9e:ec:f2:ef:57:9a:70:b9:5f:cc:
77:68:c4:f3:a7:d6:45:85:da:12:eb:f7:31:8f:46:a0:65:11:
ea:16:2c:10:f4:09:f1:9d:ff:f1:2a:6d:2f:51:e3:21:96:dc:
65:ed:82:f3:3b:bb:f3:e8:64:c3:c0:1c:90:89:c7:87:1c:c6:
ed:4f:ec:b5:ec:74:ef:6b:8c:bf:cb:44:4e:ee:ac:29:3b:ea:
4a:b1:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 13:03:24 2025 by rpki-client