Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8TFVXiUHmvSjlXQFGf2lmQqEL-U.cer
File: 8TFVXiUHmvSjlXQFGf2lmQqEL-U.cer (raw, json)
Hash identifier: W+ZVuOo15sMdpawVEYLPmrIVqOqk2Omq3uZgEerhi24=
Subject key identifier: F1:31:55:5E:25:07:9A:F4:A3:95:74:05:19:FD:A5:99:0A:84:2F:E5
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3C16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/8TFVXiUHmvSjlXQFGf2lmQqEL-U.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:32:15 +0000
Certificate not after: Sat 03 Jan 2026 02:04:14 +0000
Subordinate resources: IP: 161.248.92.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15382 (0x3c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:32:15 2025 GMT
Not After : Jan 3 02:04:14 2026 GMT
Subject: CN=F131555E25079AF4A395740519FDA5990A842FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:f3:ee:f8:2f:96:25:40:33:59:5c:28:50:
b8:12:85:37:b3:ed:67:b2:1f:af:c7:04:da:c9:2b:
ad:68:1e:fb:23:fe:20:93:5a:08:d6:de:48:a7:1d:
13:b5:f8:6e:db:95:d4:8e:ef:b2:50:5a:97:c2:70:
c1:f3:7d:db:f2:ee:89:62:c2:74:9c:63:52:5c:b4:
80:40:41:c5:7a:bd:0d:5b:b0:77:4a:30:19:1c:8b:
f2:67:11:3c:f9:34:3b:01:53:05:64:cc:2f:83:fe:
b6:89:d3:43:97:a7:b2:cf:85:0b:d3:10:82:c4:0d:
ea:c9:2f:8b:25:ea:6c:2a:38:e5:e0:e9:81:48:59:
d7:30:0e:db:c2:aa:7c:9f:e9:8d:5e:d4:97:5e:6e:
3b:2c:eb:33:ed:ff:6e:1b:21:5f:c7:48:e1:3d:cc:
90:08:72:2e:de:63:17:b8:32:9e:36:85:ce:61:5e:
40:9c:31:d0:a0:12:65:1e:9b:22:bc:9a:a1:78:56:
5c:58:d6:87:26:b9:06:08:b3:db:83:d1:6b:13:30:
ec:e2:3b:1d:3b:6b:77:6f:1a:52:be:f5:42:ad:e8:
c9:ee:e7:49:f3:ba:e9:39:27:ff:43:98:71:18:92:
47:58:32:13:02:8b:3f:b1:b1:ec:83:8e:16:9e:bb:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:55:5E:25:07:9A:F4:A3:95:74:05:19:FD:A5:99:0A:84:2F:E5
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/8TFVXiUHmvSjlXQFGf2lmQqEL-U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.92.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f2:f4:e3:1c:cd:61:34:47:ce:4a:83:82:9d:88:b8:67:6b:
ca:ce:68:99:ac:91:c4:8e:17:1d:62:4e:ee:fd:0a:05:71:61:
e0:28:7f:0f:a7:d6:26:d2:65:a4:47:92:e1:04:5b:92:ee:ee:
41:dc:89:53:87:af:1c:7f:4c:fe:70:57:34:70:a0:50:7b:da:
a2:80:67:d9:e8:0d:9f:fa:7a:d5:de:96:8f:a4:68:07:d8:7f:
b7:7f:b3:ec:ac:b1:19:ac:d9:90:31:99:fb:27:e3:43:2b:8a:
c9:e8:a0:7d:8a:a2:70:c4:09:50:f0:1d:a4:97:7e:16:6f:05:
93:41:94:88:b6:1a:e9:c9:ba:c4:0a:47:74:20:cc:ee:f7:71:
78:3e:e1:d2:53:c8:59:d4:b5:cd:91:a0:cb:86:8c:ea:b5:0e:
cb:db:d1:11:24:bd:fa:49:c4:95:c0:e7:d4:1f:52:04:fd:e6:
cf:bb:37:8f:8d:2e:42:d8:f5:94:02:b3:6c:ef:e9:b5:41:e5:
59:a2:c4:d2:fd:ae:78:fc:e2:27:9a:69:2a:6e:d3:c7:38:7d:
b0:18:4b:7a:0a:23:c6:8b:59:83:32:b6:0a:fa:b0:59:3e:11:
5c:f7:ef:4b:cf:9e:6b:95:85:f0:1b:d5:38:e7:f8:fa:7f:96:
81:88:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:52 2025 by rpki-client