Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
File: ze9xEd6YvXVtkrNNOU2i057_m44.cer (raw, json)
Hash identifier: MimjKvB04sTJCsBJ71yjvIPrdNu2xdqSdDIp8sc7Amg=
Subject key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:06:18 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 58593
IP: 42.159.0.0/16
IP: 103.9.8.0/22
IP: 163.228.0.0/16
IP: 2404:7940::/32
IP: 2406:e500::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 11:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57607 (0xe107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:06:18 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:2d:87:41:8f:b7:96:8d:b1:e7:38:4c:8b:
1b:d7:13:01:85:92:1c:d0:f8:03:c2:b8:2b:3e:15:
c3:99:f0:37:b6:3f:f7:de:af:ad:f4:f6:79:a4:e0:
ca:5e:a2:70:55:58:b0:b9:a0:a4:42:0a:5a:48:fa:
fa:81:90:6e:65:18:77:47:e6:e6:61:b4:a6:68:a5:
5d:48:cb:70:fb:12:68:12:12:00:e4:d9:fd:ef:23:
dc:a3:ad:f0:e5:27:43:fc:fd:56:c5:af:36:b6:18:
73:82:7f:c1:1f:ea:ac:a0:1b:31:dc:3c:30:8d:3a:
1f:86:e3:bd:24:e6:04:e0:ae:ff:a6:5d:ab:99:50:
0b:58:b7:8a:59:77:54:d7:ab:8a:b8:54:b6:b7:65:
6a:56:dd:ab:41:12:28:3a:d3:38:f0:68:1d:41:00:
13:1b:d7:38:90:9c:85:ed:70:c1:be:1c:61:10:08:
b8:3f:45:53:1b:8c:b4:ee:c2:6a:e1:f9:23:3e:85:
ee:c4:cd:e1:3a:82:90:e0:2b:b5:02:64:3f:04:ab:
18:86:c9:0f:07:65:83:31:ce:c6:1b:14:72:22:34:
77:18:4d:df:09:71:83:89:02:b3:b6:6c:39:bf:a0:
85:57:3c:3c:25:75:03:da:02:4a:de:f4:15:01:f4:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58593
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
163.228.0.0/16
IPv6:
2404:7940::/32
2406:e500::/32
Signature Algorithm: sha256WithRSAEncryption
a0:d1:50:78:bb:15:89:45:5d:61:fd:49:b0:a3:47:51:f8:41:
fc:b2:2a:9c:c4:17:87:a1:b2:15:51:3d:fc:bd:d6:65:d7:72:
8b:c7:49:57:17:d8:c6:71:ed:90:df:c4:48:4d:2f:b1:28:ca:
81:bc:df:35:cc:ed:e0:23:2c:f1:b2:25:27:97:55:fa:06:42:
61:6e:70:0c:78:e8:9e:2a:48:4c:b1:fb:cc:94:ff:31:26:dd:
21:5d:ca:dd:82:04:a6:94:af:d4:8d:a8:b0:31:8b:2a:04:07:
99:59:ed:95:2f:a4:5e:d7:91:cc:8d:eb:d5:62:03:7b:2d:2b:
50:e8:06:a1:1e:8c:21:14:e1:b9:01:71:af:56:e6:cc:24:e1:
8d:cb:10:16:70:29:31:9c:03:fb:a2:eb:39:7e:40:4b:58:bc:
b2:a2:5f:ab:ec:6d:24:58:1d:be:33:03:35:9b:b2:ca:52:fd:
bc:da:6f:3e:e6:74:b9:5e:4a:c6:a8:60:ae:83:d6:fa:92:41:
ca:dd:a0:60:a3:56:07:34:88:e8:35:0a:aa:e4:a1:9b:32:de:
6e:38:66:d3:67:56:fb:c8:c8:95:aa:5b:4f:7a:22:bc:58:3b:
5e:27:5d:03:94:d8:8e:06:35:9b:d9:a1:cc:c5:aa:1e:24:d3:
62:55:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 08:08:08 2025 by rpki-client