Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KIbeg5SgnMzWLU6w5QHhsxUy7VE.cer
File: KIbeg5SgnMzWLU6w5QHhsxUy7VE.cer (raw, json)
Hash identifier: DfJRlO+a97HxL6WMS147QBNe/7VU4g3MEYBRMUKxtG8=
Subject key identifier: 28:86:DE:83:94:A0:9C:CC:D6:2D:4E:B0:E5:01:E1:B3:15:32:ED:51
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C3A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/KIbeg5SgnMzWLU6w5QHhsxUy7VE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 02 Jan 2025 03:36:29 +0000
Certificate not after: Fri 02 Jan 2026 03:35:16 +0000
Subordinate resources: IP: 119.233.128.0/17
IP: 2404:b900::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50082 (0xc3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jan 2 03:36:29 2025 GMT
Not After : Jan 2 03:35:16 2026 GMT
Subject: CN=2886DE8394A09CCCD62D4EB0E501E1B31532ED51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:09:c7:93:c1:fc:89:07:4c:4b:db:dd:c5:
41:04:7b:27:fa:c1:31:99:41:97:31:fa:07:a4:50:
81:8f:f7:bb:30:94:4f:bc:99:46:79:ee:bf:e7:40:
ea:30:61:0d:9b:1c:93:22:9f:16:30:c1:ce:66:9a:
69:fb:88:44:e7:db:3d:8b:82:4b:50:eb:8d:f0:f4:
cb:77:a3:92:78:02:75:72:a5:01:d5:ca:27:9f:81:
6e:16:73:79:c2:43:32:34:6a:ed:8f:e1:d9:30:f8:
bf:95:2d:d5:8e:22:84:0d:a4:ec:9d:20:2f:d3:b1:
0b:0a:79:39:7c:53:0f:26:14:39:c8:38:a4:72:04:
f2:53:34:67:72:2c:bc:fa:51:93:65:50:fc:df:2d:
41:7d:3b:9d:8c:e5:1d:f3:67:f4:87:1a:ad:90:99:
4c:74:2e:bf:16:94:3c:2b:28:2f:c9:e7:d9:b5:cd:
7e:d0:99:dd:75:12:50:35:af:d8:65:a1:8a:27:99:
f1:d6:ed:9e:36:75:cb:da:5d:66:ed:87:4a:fd:73:
59:7b:b5:cd:70:71:c6:a3:5b:34:69:f9:5c:df:c8:
31:8f:b8:52:89:e6:8f:3d:e2:c7:b2:84:76:95:46:
f5:90:ac:da:67:86:20:91:32:dc:2d:6d:31:13:26:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:DE:83:94:A0:9C:CC:D6:2D:4E:B0:E5:01:E1:B3:15:32:ED:51
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/KIbeg5SgnMzWLU6w5QHhsxUy7VE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.233.128.0/17
IPv6:
2404:b900::/32
Signature Algorithm: sha256WithRSAEncryption
a7:44:97:41:df:1d:ee:fe:96:67:19:5f:7f:d0:c5:03:88:7d:
92:a1:83:53:b5:ed:8f:44:f6:73:0e:4f:a0:f8:ba:66:b4:3e:
77:84:f0:cb:65:8a:a1:b2:a3:c9:d9:90:52:bb:e2:02:b3:91:
96:90:b0:73:6b:79:6e:76:63:40:5d:bc:52:85:2e:38:c0:29:
23:58:00:cf:76:d2:6a:73:fa:c8:9b:67:75:b4:f6:64:e4:1d:
65:14:8e:4a:57:5e:95:14:9a:68:8f:a7:8b:c8:96:2f:d5:f9:
17:d2:97:10:4d:3f:51:33:c1:6a:ef:10:e5:a2:94:bf:81:22:
d0:c7:28:22:7c:ca:69:62:81:fc:36:ba:92:4e:e9:4d:bf:3d:
6d:23:26:ce:de:8c:48:5a:83:52:31:c8:c0:c9:2e:7c:fc:58:
49:84:89:3d:87:85:0c:ce:7f:07:95:03:62:c8:bf:e2:6e:7e:
fe:5a:28:a8:f4:a0:d1:db:6b:5f:c2:23:11:be:5c:a4:26:f0:
f7:66:1f:84:22:65:7d:d2:56:b2:0a:83:c4:32:a4:e7:46:c6:
f9:42:26:f4:96:37:42:36:b6:d6:9d:96:38:ec:ed:49:05:28:
d2:91:11:1c:d7:b8:a2:ed:76:bc:62:d2:87:71:29:5e:c9:cb:
bf:de:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:18:58 2025 by rpki-client