Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5rGE-nKUtniPAEZzeWmhCOpgUCA.cer
File: 5rGE-nKUtniPAEZzeWmhCOpgUCA.cer (raw, json)
Hash identifier: tkLfrKuH6zQFBr9x2vPW7ifqd7n0IpjC/e6wAJcLNr4=
Subject key identifier: E6:B1:84:FA:72:94:B6:78:8F:00:46:73:79:69:A1:08:EA:60:50:20
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 459C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 07 Feb 2026 20:27:18 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: IP: 170.179.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17820 (0x459c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Feb 7 20:27:18 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=E6B184FA7294B6788F0046737969A108EA605020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:9a:2e:5b:4b:41:a5:35:b9:8d:dd:18:5d:
69:fa:03:8e:d8:eb:e7:ee:20:de:ef:db:ae:b4:5e:
18:91:03:62:fc:77:10:8e:03:7a:70:00:17:8c:cd:
16:29:90:cc:7d:52:30:ed:9b:cb:64:0c:b9:0f:db:
51:b0:a0:ec:d1:00:d2:38:ef:93:05:6b:dd:99:3a:
ef:eb:55:15:93:25:7b:a7:8b:02:af:0a:f0:a9:ef:
ab:b9:41:be:09:a3:49:fc:2d:de:fb:a7:4a:a1:59:
0e:ae:8d:29:37:83:7e:9e:dc:74:2d:03:40:2c:05:
4b:ba:81:85:f0:15:e6:26:71:86:19:af:cc:cf:65:
95:c5:7e:6d:1b:62:80:dd:90:56:0b:67:90:65:cb:
00:67:59:2a:96:c9:35:63:31:8c:9d:d8:b3:fe:a3:
9d:48:38:95:99:ee:d3:b2:d2:7f:66:d7:3e:62:89:
af:47:78:09:de:95:31:cd:0b:75:9c:51:04:f5:81:
d0:82:1c:67:8d:c1:5c:b1:01:8c:24:9d:99:c5:ab:
c0:6a:a0:a7:73:8b:df:9b:e8:19:97:f8:05:78:d2:
80:27:71:20:24:42:58:70:ea:64:5e:30:f0:6c:71:
8a:d4:02:7a:3e:8e:c8:df:7f:16:f6:3c:c8:fd:be:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:84:FA:72:94:B6:78:8F:00:46:73:79:69:A1:08:EA:60:50:20
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
170.179.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:e6:07:00:bb:58:88:53:4c:ea:07:27:1c:be:3e:f4:0b:bd:
42:34:cc:d6:a5:32:3b:f9:f5:b7:f0:8e:fe:6a:d9:e4:ef:61:
14:cf:61:80:06:9a:ee:54:0d:3d:03:00:97:1a:45:2e:3b:0e:
bd:9a:81:23:b8:5a:59:53:7b:11:40:a2:93:ed:9e:8b:ea:ab:
f9:09:33:27:50:3d:60:30:be:aa:7f:cf:32:c1:28:0f:07:60:
cd:51:28:60:27:53:34:4d:94:0a:3a:85:6f:03:14:be:e5:e8:
35:b7:e9:4f:cf:bd:9b:c5:84:90:34:70:37:eb:08:47:4c:9b:
6a:00:8d:34:be:90:a0:b3:55:f6:95:ad:2d:01:bb:c3:77:eb:
67:e8:27:fb:73:dd:1b:92:32:46:1f:23:4f:49:98:f9:04:98:
08:0c:eb:fe:c1:8c:f3:47:e6:e8:97:fa:99:8f:89:e8:d0:70:
46:c9:d2:b5:12:a0:32:73:d7:0e:a6:8b:39:52:7d:2b:4c:f0:
a7:0d:5d:52:12:82:9c:7f:0b:0e:fb:9f:8d:f1:0b:7c:1e:19:
21:70:f4:44:0e:c2:bf:ba:93:b1:56:09:c6:d2:0f:df:5f:e6:
91:f5:ad:4a:e9:84:12:f4:16:cd:e2:86:eb:9d:66:22:d1:55:
03:75:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:02 2026 by rpki-client