Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TnhsicjML72c4lQNmb4SziD2uLM.cer
File: TnhsicjML72c4lQNmb4SziD2uLM.cer (raw, json)
Hash identifier: K9XQZ469LjVZ/M8UVR1yRd8/30ZnmQcuJd6+5hghLHo=
Subject key identifier: 4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3C5F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:05:26 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 140.205.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15455 (0x3c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Apr 3 08:05:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4E786C89C8CC2FBD9CE2540D99BE12CE20F6B8B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:76:8a:27:fc:c2:a3:61:bf:ef:9b:d7:7c:
f0:ce:20:b0:ab:37:32:db:96:4c:c9:e5:8f:e3:e7:
77:e2:52:73:88:84:98:de:35:f7:3d:aa:62:cd:96:
3c:82:b4:c6:46:47:70:a5:aa:48:bf:07:ab:5a:c7:
81:4c:27:c4:6d:2f:e0:2d:7a:2f:7b:48:bf:d5:5e:
62:65:37:07:d4:53:1c:db:92:f4:c2:10:f4:10:a2:
54:30:d5:3a:f7:dc:a5:aa:49:e1:d2:ca:db:27:bc:
ad:30:ed:d1:b6:d5:f9:40:72:04:66:43:df:d4:ca:
52:6a:60:0d:8e:bb:13:ff:61:7b:45:b5:db:61:67:
45:17:4f:17:23:94:17:3f:38:a1:33:59:86:b6:2b:
91:75:73:53:52:21:00:e4:d1:6e:98:da:46:0f:74:
a3:c2:1b:01:6d:16:2b:a2:83:63:51:21:ed:d5:04:
e7:d3:29:d5:c2:46:1f:41:f4:96:9d:68:d0:b3:57:
05:0b:6f:19:87:0c:32:db:fb:b0:da:25:fe:57:3a:
ec:02:ea:e7:b7:2d:15:7c:b2:49:d5:d8:c6:38:3c:
99:2c:15:dc:bc:73:7d:59:b6:f3:c2:26:19:87:cf:
98:26:0c:a5:6b:08:81:13:4c:f6:6f:9c:8a:f2:ce:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:6C:89:C8:CC:2F:BD:9C:E2:54:0D:99:BE:12:CE:20:F6:B8:B3
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/TnhsicjML72c4lQNmb4SziD2uLM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:9c:ae:ae:14:6f:0f:83:c8:10:04:5d:02:85:01:73:13:3e:
fd:bf:12:0a:4a:74:38:ba:88:bc:93:ed:c5:3e:a2:98:a5:be:
ca:0c:7a:d2:2d:49:f0:cd:ec:9b:4e:14:fc:08:54:f7:ee:f6:
12:3d:31:62:a6:e4:f6:3c:fb:37:54:7f:e0:20:a4:27:38:42:
c2:10:10:33:1c:c9:03:7c:97:69:96:18:bd:14:ea:cc:55:22:
2f:46:5a:f6:5e:25:b4:b9:8c:a2:05:49:2a:64:83:e0:83:ec:
89:a7:24:82:7f:8d:30:29:a6:f0:b6:aa:91:60:08:c2:7d:dc:
24:cf:a1:12:ce:6c:6a:02:47:39:0a:e0:54:18:ce:87:ee:77:
bd:0f:a0:8a:22:a8:8a:cb:f7:e2:e4:ae:a6:34:59:c6:40:75:
75:67:be:4d:5b:95:27:dc:21:d0:08:34:1d:7a:54:37:e3:f4:
10:db:e3:3d:d9:47:37:7c:fc:5f:e3:6f:3a:bb:26:29:88:8f:
8e:66:4d:c7:5b:a2:2f:a6:5a:c3:c4:90:1d:18:44:20:0a:be:
d9:8b:96:5b:5c:45:02:1e:e0:15:06:93:f2:26:0f:e0:02:c5:
d5:ea:13:b7:2c:a2:96:af:1d:8f:64:c5:08:19:59:8a:c2:00:
df:97:8d:df
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICPF8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw
QTU0QTk1MTk1QTExMB4XDTI1MDQwMzA4MDUyNloXDTI2MDQwMzA4MDAwOVowMzEx
MC8GA1UEAxMoNEU3ODZDODlDOENDMkZCRDlDRTI1NDBEOTlCRTEyQ0UyMEY2QjhC
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJSLdoon/MKjYb/vm9d8
8M4gsKs3MtuWTMnlj+Pnd+JSc4iEmN419z2qYs2WPIK0xkZHcKWqSL8Hq1rHgUwn
xG0v4C16L3tIv9VeYmU3B9RTHNuS9MIQ9BCiVDDVOvfcpapJ4dLK2ye8rTDt0bbV
+UByBGZD39TKUmpgDY67E/9he0W122FnRRdPFyOUFz84oTNZhrYrkXVzU1IhAOTR
bpjaRg90o8IbAW0WK6KDY1Eh7dUE59Mp1cJGH0H0lp1o0LNXBQtvGYcMMtv7sNol
/lc67ALq57ctFXyySdXYxjg8mSwV3LxzfVm288ImGYfPmCYMpWsIgRNM9m+civLO
nzMCAwEAAaOCAlIwggJOMB0GA1UdDgQWBBROeGyJyMwvvZziVA2ZvhLOIPa4szAf
BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx
RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzM0MS9UbmhzaWNqTUw3MmM0bFFObWI0U3ppRDJ1TE0ubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjM0wDQYJKoZIhvcNAQELBQADggEB
AJKcrq4Ubw+DyBAEXQKFAXMTPv2/EgpKdDi6iLyT7cU+opilvsoMetItSfDN7JtO
FPwIVPfu9hI9MWKm5PY8+zdUf+AgpCc4QsIQEDMcyQN8l2mWGL0U6sxVIi9GWvZe
JbS5jKIFSSpkg+CD7ImnJIJ/jTAppvC2qpFgCMJ93CTPoRLObGoCRzkK4FQYzofu
d70PoIoiqIrL9+LkrqY0WcZAdXVnvk1blSfcIdAINB16VDfj9BDb4z3ZRzd8/F/j
bzq7JimIj45mTcdboi+mWsPEkB0YRCAKvtmLlltcRQIe4BUGk/ImD+ACxdXqE7cs
opavHY9kxQgZWYrCAN+Xjd8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:49 2025 by rpki-client