Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TnhsicjML72c4lQNmb4SziD2uLM.cer
File: TnhsicjML72c4lQNmb4SziD2uLM.cer (raw, json)
Hash identifier: 6qrfBVeWNNfRfBTefY6BoI8YRNvBZRajG5H2U/D9m9Q=
Subject key identifier: 4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 379B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:50:25 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 140.205.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14235 (0x379b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:50:25 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4E786C89C8CC2FBD9CE2540D99BE12CE20F6B8B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:76:8a:27:fc:c2:a3:61:bf:ef:9b:d7:7c:
f0:ce:20:b0:ab:37:32:db:96:4c:c9:e5:8f:e3:e7:
77:e2:52:73:88:84:98:de:35:f7:3d:aa:62:cd:96:
3c:82:b4:c6:46:47:70:a5:aa:48:bf:07:ab:5a:c7:
81:4c:27:c4:6d:2f:e0:2d:7a:2f:7b:48:bf:d5:5e:
62:65:37:07:d4:53:1c:db:92:f4:c2:10:f4:10:a2:
54:30:d5:3a:f7:dc:a5:aa:49:e1:d2:ca:db:27:bc:
ad:30:ed:d1:b6:d5:f9:40:72:04:66:43:df:d4:ca:
52:6a:60:0d:8e:bb:13:ff:61:7b:45:b5:db:61:67:
45:17:4f:17:23:94:17:3f:38:a1:33:59:86:b6:2b:
91:75:73:53:52:21:00:e4:d1:6e:98:da:46:0f:74:
a3:c2:1b:01:6d:16:2b:a2:83:63:51:21:ed:d5:04:
e7:d3:29:d5:c2:46:1f:41:f4:96:9d:68:d0:b3:57:
05:0b:6f:19:87:0c:32:db:fb:b0:da:25:fe:57:3a:
ec:02:ea:e7:b7:2d:15:7c:b2:49:d5:d8:c6:38:3c:
99:2c:15:dc:bc:73:7d:59:b6:f3:c2:26:19:87:cf:
98:26:0c:a5:6b:08:81:13:4c:f6:6f:9c:8a:f2:ce:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:53:b8:c9:02:17:52:c6:b4:42:aa:70:f2:f7:63:cb:17:77:
3a:eb:14:f9:d1:01:06:46:93:a9:bc:f5:a3:6b:b7:58:b7:13:
2e:6a:65:87:b8:41:63:96:40:fd:04:b4:72:af:c7:69:f2:15:
e3:4e:41:ba:6a:00:8f:62:0a:39:ab:ef:ee:9a:71:88:36:ff:
d7:eb:37:48:f3:26:bb:00:ca:2a:15:f9:10:25:0e:91:85:65:
5a:64:73:ea:a0:27:26:6f:60:28:ab:42:42:60:92:eb:b4:64:
eb:92:6e:72:cb:ef:86:af:e9:fd:58:12:24:43:89:21:44:04:
df:dc:cb:1e:27:81:5e:2d:05:16:eb:47:5d:f8:50:b9:d2:71:
ab:92:1c:cf:db:c9:91:55:38:2f:1a:bb:a9:9b:65:55:b5:29:
87:0c:6c:fd:21:46:bc:87:de:03:f1:7c:59:31:1d:c4:42:56:
71:2c:91:1f:1f:f8:cd:7e:ee:0b:8f:42:78:07:7d:f3:b3:9e:
59:52:d4:0d:76:ae:c5:83:cb:6e:8e:0c:0f:21:3b:16:56:53:
8f:9c:60:7f:99:80:29:74:6a:8b:08:87:80:5c:9e:31:c1:ad:
70:dd:46:77:5c:34:ab:ee:e6:4e:f4:eb:a5:0e:4a:6b:00:1f:
db:6a:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:44 2025 by rpki-client