Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YBt2TrIFMYSt13mb83x-Ctsz99w.cer
File: YBt2TrIFMYSt13mb83x-Ctsz99w.cer (raw, json)
Hash identifier: 0kRQHTqgjzGpELBCZntc3GWNxEmqUzsSH6ZmAl+qj60=
Subject key identifier: 60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:29:23 +0000
Certificate not after: Wed 03 Dec 2025 07:38:23 +0000
Subordinate resources: IP: 2401:dd60::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52181 (0xcbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:29:23 2025 GMT
Not After : Dec 3 07:38:23 2025 GMT
Subject: CN=601B764EB2053184ADD7799BF37C7E0ADB33F7DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:2d:8b:3d:6f:c2:e2:da:f9:ce:f9:51:f5:
04:63:64:4a:85:6c:6c:f6:13:8e:80:3b:db:bb:65:
fe:55:b3:49:25:03:09:8e:58:39:04:7e:6f:a9:84:
71:59:66:94:6c:20:a5:4d:4c:90:88:b8:fa:b2:13:
8d:89:91:c6:40:ad:de:30:be:5a:0a:e7:9d:aa:1e:
0d:23:97:71:f1:ec:67:3f:37:47:2d:9f:d4:b5:35:
4c:79:f0:9d:e3:bb:3c:51:30:1d:f7:a2:29:67:35:
62:1a:16:02:ff:1f:e9:be:53:b2:df:72:f1:c7:8f:
5a:1f:98:82:a5:98:3e:d8:f8:ff:87:44:48:6d:bc:
66:0b:e5:30:db:d6:69:cb:39:00:fa:e3:ea:ec:17:
28:68:eb:25:1d:4a:23:92:6c:a1:cc:15:a1:bf:8e:
b4:a7:c2:c6:de:7c:51:55:fe:0f:da:66:21:0f:11:
f9:55:35:b2:fa:ac:db:9f:8e:0a:77:38:18:c8:d4:
78:1d:67:5b:67:a6:41:59:aa:a0:46:fe:c6:ba:d1:
84:e3:47:dc:c4:02:60:d2:51:76:78:54:25:74:21:
85:0d:19:f8:df:3c:4d:38:04:06:d4:58:c0:74:74:
76:d4:b0:bf:59:11:57:9a:cb:46:4a:8f:b4:89:af:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1B:76:4E:B2:05:31:84:AD:D7:79:9B:F3:7C:7E:0A:DB:33:F7:DC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/YBt2TrIFMYSt13mb83x-Ctsz99w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:dd60::/32
Signature Algorithm: sha256WithRSAEncryption
28:09:fe:75:b0:53:6b:b7:eb:f2:f9:16:56:61:59:69:10:e2:
c6:fb:33:6a:49:a7:8c:1f:4b:ca:5a:5c:3a:81:58:93:ed:2c:
73:1b:8a:9a:a8:81:05:e3:92:0d:e0:ab:cb:b7:7c:c6:24:13:
a2:36:9c:7c:49:d5:91:dd:e6:f2:0e:1f:60:d2:7c:a2:84:0b:
cf:9c:98:e7:57:7f:6c:67:70:e6:95:5f:62:e4:67:19:5c:82:
04:6b:a1:a2:35:8f:e4:15:b4:0d:2b:cc:68:64:09:a9:c3:43:
b6:91:7b:04:10:0b:1e:b6:19:51:91:ec:fb:5c:d2:a2:60:ca:
9b:15:1f:65:dc:fd:65:ac:af:2d:40:9f:2c:b2:70:d3:89:6c:
9e:47:9e:3b:e9:f1:12:2e:a4:3b:23:50:03:8d:88:bd:d9:f3:
43:31:5c:51:f4:89:cf:c7:27:18:9c:73:1b:d0:b5:19:33:87:
80:47:19:aa:37:64:c2:0d:55:3b:38:d1:20:c5:0a:83:7f:2f:
13:0e:18:eb:e5:6f:4f:60:ac:0a:76:b9:1f:07:12:83:f3:83:
c4:60:5b:4d:7f:ef:f4:19:61:f8:25:a8:32:92:fc:b2:34:05:
ec:8e:14:cc:88:3f:5f:d9:dd:ee:57:f8:80:72:79:52:d4:5f:
fa:28:c6:e4
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDAMvVMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMzI5MjNaFw0yNTEyMDMwNzM4MjNaMDMx
MTAvBgNVBAMTKDYwMUI3NjRFQjIwNTMxODRBREQ3Nzk5QkYzN0M3RTBBREIzM0Y3
REMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhi2LPW/C4tr5zvlR
9QRjZEqFbGz2E46AO9u7Zf5Vs0klAwmOWDkEfm+phHFZZpRsIKVNTJCIuPqyE42J
kcZArd4wvloK552qHg0jl3Hx7Gc/N0ctn9S1NUx58J3juzxRMB33oilnNWIaFgL/
H+m+U7LfcvHHj1ofmIKlmD7Y+P+HREhtvGYL5TDb1mnLOQD64+rsFyho6yUdSiOS
bKHMFaG/jrSnwsbefFFV/g/aZiEPEflVNbL6rNufjgp3OBjI1HgdZ1tnpkFZqqBG
/sa60YTjR9zEAmDSUXZ4VCV0IYUNGfjfPE04BAbUWMB0dHbUsL9ZEVeay0ZKj7SJ
r09PAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUYBt2TrIFMYSt13mb83x+Ctsz99ww
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
MzYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzMzNi9ZQnQyVHJJRk1ZU3QxM21iODN4LUN0c3o5OXcubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHdYDANBgkqhkiG9w0BAQsF
AAOCAQEAKAn+dbBTa7fr8vkWVmFZaRDixvszakmnjB9LylpcOoFYk+0scxuKmqiB
BeOSDeCry7d8xiQTojacfEnVkd3m8g4fYNJ8ooQLz5yY51d/bGdw5pVfYuRnGVyC
BGuhojWP5BW0DSvMaGQJqcNDtpF7BBALHrYZUZHs+1zSomDKmxUfZdz9ZayvLUCf
LLJw04lsnkeeO+nxEi6kOyNQA42IvdnzQzFcUfSJz8cnGJxzG9C1GTOHgEcZqjdk
wg1VOzjRIMUKg38vEw4Y6+VvT2CsCna5HwcSg/ODxGBbTX/v9Blh+CWoMpL8sjQF
7I4UzIg/X9nd7lf4gHJ5UtRf+ijG5A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:50 2025 by rpki-client