Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/89605Z7lMyYp7F4LaGZtNuKXN2s.cer
File: 89605Z7lMyYp7F4LaGZtNuKXN2s.cer (raw, json)
Hash identifier: wkviAxMxRgllLf7mGIlxYzYsw/I20lg7PAFM1cN2oS8=
Subject key identifier: F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BD88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Oct 2024 06:17:11 +0000
Certificate not after: Thu 09 Oct 2025 05:57:36 +0000
Subordinate resources: AS: 151275
IP: 2401:cbe0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48520 (0xbd88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 06:17:11 2024 GMT
Not After : Oct 9 05:57:36 2025 GMT
Subject: CN=F3DEB4E59EE5332629EC5E0B68666D36E297376B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:57:63:d3:05:64:ef:c0:c9:e4:b4:52:ed:
ae:f8:b0:46:52:5b:9c:39:84:96:1f:7e:7e:91:d2:
c0:cd:0c:dd:48:94:c5:1c:0c:ab:b0:a7:e5:53:c1:
ed:f5:c8:ea:da:dd:e1:8f:22:cd:c2:57:12:af:c5:
57:60:10:29:64:2e:b2:15:44:65:1d:f3:8d:bb:46:
0e:de:2b:11:25:11:39:08:39:25:89:d0:de:67:b5:
a0:4f:50:04:e8:b8:89:42:d5:f8:86:9f:14:0c:ab:
74:7b:44:64:f3:87:ad:d0:f5:a9:0f:b9:0e:57:9a:
9b:70:80:64:42:77:5c:2f:f8:d8:03:d4:b2:98:dc:
e0:c8:eb:1f:51:64:89:5f:97:35:22:9e:62:81:10:
7f:de:c6:25:4f:ae:f0:be:5f:ad:3d:59:d4:49:7f:
81:c8:f4:f4:be:3b:71:71:8b:64:16:ac:90:51:21:
7f:54:dc:98:8c:e2:3c:68:e4:9d:32:7e:64:8d:2d:
19:c8:af:0d:8a:3f:eb:37:75:18:88:d8:b1:cc:7b:
38:cc:e2:07:0d:4d:63:dd:ae:8f:97:4f:dd:3f:cd:
f0:0c:e7:2d:33:3e:c7:42:25:d5:ce:3b:a9:51:cc:
8d:0f:7c:6a:3b:3d:a3:5b:1b:4e:a2:5b:f2:5f:14:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:B4:E5:9E:E5:33:26:29:EC:5E:0B:68:66:6D:36:E2:97:37:6B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/89605Z7lMyYp7F4LaGZtNuKXN2s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151275
sbgp-ipAddrBlock: critical
IPv6:
2401:cbe0::/32
Signature Algorithm: sha256WithRSAEncryption
50:06:89:9d:f1:71:80:0e:f2:46:4d:48:36:d3:d5:9e:86:57:
6e:4c:d4:d8:83:f9:e6:01:77:7d:ce:65:26:92:f3:79:9d:ae:
93:28:10:ac:ea:65:3e:ac:f0:ca:f2:48:87:d9:87:37:2f:89:
17:ca:c9:c7:58:23:2b:ac:04:0e:9a:cc:39:69:1a:7c:a1:e5:
e5:ed:b9:f4:01:bb:6f:fe:27:3a:e5:cb:27:ee:42:0a:8b:0f:
42:24:db:09:39:17:00:e3:bb:54:2f:99:fa:7c:cb:9a:67:88:
59:9f:76:db:16:f3:7c:3a:77:d6:13:f3:f0:d2:1f:bc:f4:36:
3b:31:f8:9c:bd:d8:fd:d0:90:16:dd:6c:d6:cb:8a:dd:e4:1a:
f5:f9:6f:f7:c6:5a:2f:54:98:47:8d:e2:ef:be:d6:9c:57:60:
16:7c:08:a7:b5:f0:8c:76:a2:d4:6e:87:a8:e5:df:bf:d7:02:
ad:02:73:f1:21:19:76:31:da:96:83:06:4f:3e:b6:38:0a:44:
4b:da:9c:1d:0b:07:1e:e3:8d:64:16:93:25:e5:8f:26:fd:a8:
70:8b:3c:90:ba:33:4c:15:52:4b:63:26:0a:7c:33:2f:01:72:
55:49:94:5f:3c:79:f9:bd:76:9e:17:24:15:96:5c:d7:d0:36:
99:e8:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:31:18 2025 by rpki-client