Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer
File: 5e3FZP6LAvLPhwCTu_3cMn1tk5U.cer (raw, json)
Hash identifier: xp4p7vaWXnNsOhhlQJHsoce6sXAbI30rO8ZSf36Oznw=
Subject key identifier: E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D896
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:13:20 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: IP: 211.148.224.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55446 (0xd896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:13:20 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=E5EDC564FE8B02F2CF870093BBFDDC327D6D9395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:b7:26:82:17:07:04:ee:31:bb:44:78:85:
4c:b7:f8:36:cd:25:d8:e2:dc:8e:09:0f:e8:da:c3:
10:01:1c:5a:b1:0f:45:87:33:7b:29:52:6e:ba:a0:
6a:ae:64:17:7f:d0:ff:e3:4e:02:86:20:46:ef:75:
63:2d:cf:51:d3:4c:1d:d7:af:73:a7:5d:89:21:3b:
48:a1:0b:3a:c0:f5:da:de:69:85:72:84:ca:58:41:
b5:61:00:21:fe:3c:61:6c:3b:0d:b4:56:9c:8d:a3:
17:e9:f0:6f:12:42:0f:cc:36:a6:7d:61:76:8a:db:
54:b6:30:b1:de:dd:99:e4:b6:3f:fb:a7:49:e1:54:
0a:41:9c:3a:be:96:1b:64:e3:98:2c:27:3e:13:f0:
cc:d8:d7:7e:64:9a:27:22:48:ec:a0:d0:f4:af:82:
c7:a1:66:bf:30:e2:ff:7c:d1:5c:c5:6c:e1:27:88:
08:42:00:3c:28:18:87:36:20:22:e2:bc:f6:07:22:
0b:34:0c:8b:04:f7:b3:8c:60:ef:fb:4f:83:c1:06:
29:5d:25:e8:81:22:7d:7a:72:99:59:da:22:57:a4:
af:3d:05:99:92:a2:49:1c:1b:92:82:54:29:b4:1d:
f9:06:90:06:e8:98:f3:6e:e3:9e:40:3a:0d:f2:67:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:C5:64:FE:8B:02:F2:CF:87:00:93:BB:FD:DC:32:7D:6D:93:95
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2748/5e3FZP6LAvLPhwCTu_3cMn1tk5U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.148.224.0/19
Signature Algorithm: sha256WithRSAEncryption
21:96:8d:6b:b4:2c:64:18:c8:b4:c0:02:47:98:ab:ca:b9:5e:
fd:32:07:76:f1:ce:6b:01:94:c5:79:f5:b4:ac:2b:5f:ee:1f:
cc:7b:17:f7:59:74:a0:fa:87:b0:9b:19:b9:61:21:da:85:b7:
3e:c4:6c:98:a8:a6:c2:e1:76:f4:f6:6a:11:0b:51:e6:25:98:
d3:3f:52:d9:7a:d1:ac:46:05:d5:6f:97:d7:d2:b2:e0:14:42:
be:c7:8f:91:f9:42:85:83:9a:92:a8:11:0b:24:27:ee:c9:96:
b2:52:36:d3:8c:8b:cd:ea:94:4a:35:ae:fa:ad:da:83:a9:57:
49:e4:ac:4a:88:28:3b:79:e9:a6:84:13:66:7b:54:f2:78:d1:
a2:5a:c8:7a:55:c1:f8:34:bc:20:68:4a:fe:94:71:67:05:8b:
e3:ec:ad:d1:d8:96:02:c8:d6:c7:39:f2:ca:12:12:b7:67:dd:
8b:5d:80:b2:13:6d:05:c5:96:f5:2b:e3:5d:d7:36:d2:b3:2c:
e5:cd:ae:d8:fb:97:d2:ee:de:54:d2:9a:f3:b5:40:c2:af:92:
7d:28:c8:bf:03:46:e4:c1:bf:f5:df:07:2b:d2:55:4d:e8:b7:
f2:ea:23:5f:69:14:72:33:c7:43:a0:06:13:a4:b4:44:80:22:
c2:e7:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:03 2025 by rpki-client