Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
File: xMVT2QII7y67l2ljJf_-xcD_FW8.cer (raw, json)
Hash identifier: K0AsQckCODlPQL+L2tQ5NClJQWVybqGcHelhmuuVxeo=
Subject key identifier: C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C404
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 08 Jan 2025 09:02:19 +0000
Certificate not after: Sat 27 Sep 2025 02:44:52 +0000
Subordinate resources: IP: 45.249.12.0/22
IP: 45.249.208.0/23
IP: 103.150.10.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50180 (0xc404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jan 8 09:02:19 2025 GMT
Not After : Sep 27 02:44:52 2025 GMT
Subject: CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:d9:14:25:47:c0:2e:b8:93:72:0b:f5:36:
2f:34:ca:ee:2a:72:da:e2:3f:9a:3c:80:fa:e2:91:
e2:34:5e:62:16:d7:b4:13:38:05:62:35:b6:9f:b0:
2c:7f:ff:40:44:61:36:b9:51:36:2d:c7:ab:b3:94:
b1:d5:ea:04:09:4f:be:d6:40:8f:61:23:ad:da:99:
69:26:52:4d:5c:2a:04:50:0b:5c:40:3c:9d:0b:b7:
f2:f1:d1:3b:d3:1c:ae:72:14:56:65:c2:09:ad:f5:
c7:ec:8a:e1:d0:4b:c0:36:4c:3d:7d:40:3f:6a:e1:
52:94:75:69:3f:0b:bf:21:9f:d6:f8:77:e3:19:22:
df:ca:f2:62:c9:fc:76:35:24:5a:a9:7b:21:ee:8a:
b4:2a:2c:f9:23:ea:dd:64:2a:c4:96:ce:06:95:3d:
db:ff:c8:ba:3d:65:4d:13:c6:53:54:2a:ca:23:15:
49:05:ef:05:fb:d7:6e:21:09:a1:a4:c4:b4:46:2b:
d2:fe:cb:19:0e:58:0a:29:89:c5:06:14:13:44:db:
d3:de:cf:1c:11:91:ba:0d:de:db:f8:a5:95:2b:03:
4a:24:b4:56:41:a5:f4:e0:e0:06:c7:21:d7:29:9a:
a1:16:71:d1:9a:df:4d:ad:6e:15:c0:4e:9b:57:b5:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.12.0/22
45.249.208.0/23
103.150.10.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:74:ef:be:40:05:53:92:2b:18:f9:fc:2c:aa:da:70:99:03:
f2:6b:a2:8e:88:6c:b8:fd:a5:0d:02:b1:60:34:45:1d:20:dd:
24:88:57:42:dd:d0:7c:28:b6:9e:48:19:d1:8c:54:2e:4e:c2:
34:4f:15:43:c6:7c:50:d1:64:0e:ef:4c:67:f4:cd:af:20:dc:
15:fd:f9:8f:7e:58:5f:29:ac:2c:79:4a:f3:35:f2:21:05:79:
0d:ca:2a:67:03:92:a4:79:5b:48:73:70:23:de:b0:7b:0b:5a:
e7:7f:e3:dd:71:07:27:7c:57:f5:d2:f2:d3:c0:79:b5:ef:16:
d4:2a:22:4f:23:35:26:f0:67:c5:4e:8a:cf:71:2a:5c:29:eb:
61:34:1b:07:a7:c5:6b:29:30:ad:e5:75:56:44:39:72:64:0c:
1d:91:e3:4e:7e:e9:d3:ff:ad:db:61:a1:51:76:fe:bb:6d:d4:
5c:99:0d:37:e1:f9:a5:45:24:3f:d4:a7:da:21:30:af:9d:5e:
10:91:09:69:31:3c:8c:f3:c8:b4:93:19:a6:93:01:48:77:1f:
00:74:6a:7a:e9:fb:ce:f1:96:e4:0d:15:d0:77:cc:9d:17:39:
e8:08:81:42:d8:ed:d2:db:be:5b:53:13:b6:6e:53:1f:a0:24:
8b:01:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:28:22 2025 by rpki-client