Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer
File: UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer (raw, json)
Hash identifier: YC5abXW/5xKLqTFNHFnHYp7/SaCKh3gs+DX/fIbhhjQ=
Subject key identifier: 50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: EBD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 06 Mar 2026 02:22:28 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: IP: 45.124.44.0/22
IP: 101.251.128.0/20
IP: 103.192.164.0/22
IP: 111.67.192.0/20
IP: 182.18.0.0/17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60371 (0xebd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Mar 6 02:22:28 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=5052DEE92823C58F2927F22DFA6936291D1B9037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:25:df:55:58:a9:90:9e:8e:f1:f3:d7:9a:
1f:31:bb:6b:d2:d8:06:0a:c9:fc:84:fd:aa:61:df:
72:bd:06:00:9d:97:5d:f3:5a:a2:aa:f7:93:5f:65:
72:a0:30:08:c9:1c:5a:ed:49:81:9f:73:3c:5d:2e:
be:27:e0:8a:0f:61:22:3b:34:d5:89:de:a8:c5:96:
a3:c7:75:39:19:d4:9b:8c:40:fd:ac:8a:84:f9:02:
b9:5d:e8:25:68:0e:13:23:73:7e:46:60:34:91:28:
15:d1:40:f7:ec:0a:fb:12:02:a7:aa:c3:6c:03:3a:
2d:0d:93:04:8e:c7:ec:99:ce:bf:f9:f7:2a:d0:a7:
41:93:7f:96:22:a0:21:db:81:b8:2c:d4:dd:50:f0:
f3:96:0a:b8:fe:95:bf:26:ed:75:1a:c3:0b:bf:3c:
c5:7a:b0:e3:ba:ba:c1:3d:3b:cc:3d:30:5d:3f:81:
15:69:87:92:fc:06:a8:04:25:70:4e:7e:71:ae:80:
7c:d6:eb:61:d5:13:75:9d:3a:ba:8c:e2:ab:15:e9:
5a:c7:68:44:d8:8f:3c:d0:9b:e6:0f:7e:a3:91:73:
c9:0d:2b:b8:fd:c1:b2:91:18:f9:4d:c5:4c:f6:5e:
ca:49:86:e2:21:60:fc:82:a1:f4:45:8a:f1:1d:07:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.44.0/22
101.251.128.0/20
103.192.164.0/22
111.67.192.0/20
182.18.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b3:b1:fa:a3:ab:71:34:c2:ca:09:56:d0:19:ec:48:de:c9:97:
3b:17:92:14:14:72:c3:3e:39:09:31:a6:9c:4f:93:e1:78:8b:
68:83:2c:55:ae:e8:cf:dd:25:51:52:c6:98:9a:80:3a:fc:1b:
97:ab:2f:03:49:31:a0:4d:a2:01:50:2c:fc:a1:6d:a8:58:0a:
95:15:56:1b:70:ab:8b:31:a7:5b:fd:c1:b1:50:f4:08:56:ae:
1f:83:51:0f:ff:13:9c:04:49:dc:7c:b3:70:57:6e:ad:cd:20:
6f:49:92:02:49:ba:d4:19:b3:25:5b:5f:5a:51:b4:d0:60:e2:
97:f7:92:1d:f2:ef:7d:2f:28:47:ed:21:92:b7:ed:6f:e6:3e:
4c:60:57:44:09:48:e8:4d:c5:53:bc:b4:65:73:ac:9a:c1:5e:
78:d0:8e:3d:12:82:f8:c3:0f:6b:52:1b:1a:72:df:a1:d1:e5:
16:0a:f0:fe:ae:01:21:2d:1a:78:b1:da:20:6d:f9:63:66:39:
57:2b:df:e8:e9:f3:5c:51:4e:98:e1:75:65:a9:05:65:60:d7:
52:24:a1:69:98:b7:b0:0a:dd:1f:d0:54:8c:fd:02:00:a1:3d:
a2:77:4a:f2:f0:a3:a6:1e:90:dd:eb:fa:5f:6f:e3:7e:b0:38:
19:a4:3d:91
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIDAOvTMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAzMDYwMjIyMjhaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDUwNTJERUU5MjgyM0M1OEYyOTI3RjIyREZBNjkzNjI5MUQxQjkw
MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzyXfVVipkJ6O8fPX
mh8xu2vS2AYKyfyE/aph33K9BgCdl13zWqKq95NfZXKgMAjJHFrtSYGfczxdLr4n
4IoPYSI7NNWJ3qjFlqPHdTkZ1JuMQP2sioT5Arld6CVoDhMjc35GYDSRKBXRQPfs
CvsSAqeqw2wDOi0NkwSOx+yZzr/59yrQp0GTf5YioCHbgbgs1N1Q8POWCrj+lb8m
7XUawwu/PMV6sOO6usE9O8w9MF0/gRVph5L8BqgEJXBOfnGugHzW62HVE3WdOrqM
4qsV6VrHaETYjzzQm+YPfqORc8kNK7j9wbKRGPlNxUz2XspJhuIhYPyCofRFivEd
B61FAgMBAAGjggJtMIICaTAdBgNVHQ4EFgQUUFLe6SgjxY8pJ/It+mk2KR0bkDcw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
NzcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM3Ny9VRkxlNlNnanhZOHBKX0l0LW1rMktSMGJrRGMubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLXwsAwQEZfuAAwQCZ8CkAwQE
b0PAAwQHthIAMA0GCSqGSIb3DQEBCwUAA4IBAQCzsfqjq3E0wsoJVtAZ7EjeyZc7
F5IUFHLDPjkJMaacT5PheItogyxVrujP3SVRUsaYmoA6/BuXqy8DSTGgTaIBUCz8
oW2oWAqVFVYbcKuLMadb/cGxUPQIVq4fg1EP/xOcBEncfLNwV26tzSBvSZICSbrU
GbMlW19aUbTQYOKX95Id8u99LyhH7SGSt+1v5j5MYFdECUjoTcVTvLRlc6yawV54
0I49EoL4ww9rUhsact+h0eUWCvD+rgEhLRp4sdogbfljZjlXK9/o6fNcUU6Y4XVl
qQVlYNdSJKFpmLewCt0f0FSM/QIAoT2id0ry8KOmHpDd6/pfb+N+sDgZpD2R
-----END CERTIFICATE-----
Generated at Thu Apr 16 09:35:51 2026 by rpki-client