$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DaRKsNbqVGCDBJv5aVWb57PGQuo.cer File: DaRKsNbqVGCDBJv5aVWb57PGQuo.cer (raw, json) Hash identifier: lKZ3wHIhCZTpluZrz8ZfEouAwN7wbKy16p3eCdGjsu8= Subject key identifier: 0D:A4:4A:B0:D6:EA:54:60:83:04:9B:F9:69:55:9B:E7:B3:C6:42:EA Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4574 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/DaRKsNbqVGCDBJv5aVWb57PGQuo.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 02 Feb 2026 02:48:51 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 161.248.108.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17780 (0x4574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Feb 2 02:48:51 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=0DA44AB0D6EA546083049BF969559BE7B3C642EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:b2:42:b0:a2:26:ab:24:55:81:b7:12:ef: 32:48:f8:cb:8b:dc:60:5e:34:82:92:22:d4:4f:a7: bc:d2:a3:8b:24:69:14:73:7f:52:c7:f0:2b:61:22: 01:11:8d:24:e7:89:eb:68:3b:78:61:c5:3b:1b:41: 19:f6:08:36:d7:2d:97:a6:d0:99:80:c1:19:ce:27: b9:3c:da:1c:b3:6a:3d:92:be:a8:b6:af:20:39:92: de:cd:bf:ef:bc:d9:1b:e6:60:1e:e3:71:79:89:a4: 4c:20:c0:5f:fc:b2:58:73:98:70:48:eb:92:7a:d5: e8:07:1a:8f:13:0c:5c:7e:c8:1a:e4:d9:f0:82:65: a5:f5:2c:f6:eb:45:91:ca:4f:5c:52:db:1e:8a:36: 99:bc:71:a8:b0:7f:bb:e2:aa:11:e8:13:62:c8:6e: 07:6a:35:ed:94:6d:fb:cc:8e:63:6f:df:8b:c1:34: f0:97:65:0e:fb:f6:7c:16:5f:36:4d:d1:4e:2d:62: 8a:ff:3c:c7:21:c3:9e:a8:28:3f:07:33:f4:e1:48: 62:2b:c1:b9:5a:b0:2a:58:4f:35:d8:fb:e0:eb:4b: 1b:5c:14:91:13:44:ec:f0:a3:47:5f:70:03:60:d8: 2e:49:24:ed:ae:0d:e4:3a:59:c9:35:d8:b4:c4:3b: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:4A:B0:D6:EA:54:60:83:04:9B:F9:69:55:9B:E7:B3:C6:42:EA X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/DaRKsNbqVGCDBJv5aVWb57PGQuo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.108.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:fb:d9:43:37:bc:45:e7:17:c4:48:19:60:40:ea:0b:1a:4d: 1f:97:de:50:56:7b:ab:03:93:26:b1:41:4f:d9:bb:a8:37:04: 95:99:02:2a:c5:9f:43:5b:ba:21:6b:df:dc:f4:ad:4b:83:0f: c9:4f:5b:5a:8a:da:f6:25:64:53:cb:71:56:c8:6d:aa:0f:06: e4:c6:48:c7:98:3f:26:f6:23:e6:ba:08:66:a0:55:cc:5a:87: c8:5e:d7:23:61:c5:98:73:35:d9:68:37:e3:66:3a:70:8a:24: 0f:1e:22:30:8d:54:ea:79:60:eb:8e:bc:54:b0:3b:bd:8d:f7: 3f:74:c3:10:12:73:14:b4:bb:03:31:c0:f9:a2:cd:be:40:10: f2:af:0b:bd:2e:2b:99:ed:b5:8e:7e:f9:96:76:12:04:21:5f: bd:a1:e5:10:cd:78:8f:66:7e:0f:ff:b3:ed:e4:8d:79:69:f1: 23:ca:98:46:62:cb:9d:8e:fa:35:4a:07:62:f4:29:f7:c2:5d: 9f:d5:d4:be:fc:68:dd:86:b9:cb:b9:d6:3c:a5:42:1d:b2:05: 44:75:e2:d3:9b:c5:70:42:ae:24:ce:ca:de:f8:97:b0:df:50: ea:76:42:e7:75:4c:e6:c9:33:bc:92:33:03:e6:f5:35:f4:1b: f5:09:b6:13 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRXQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDIwMjAyNDg1MVoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoMERBNDRBQjBENkVBNTQ2MDgzMDQ5QkY5Njk1NTlCRTdCM0M2NDJF QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnPskKwoiarJFWBtxLv Mkj4y4vcYF40gpIi1E+nvNKjiyRpFHN/UsfwK2EiARGNJOeJ62g7eGHFOxtBGfYI Ntctl6bQmYDBGc4nuTzaHLNqPZK+qLavIDmS3s2/77zZG+ZgHuNxeYmkTCDAX/yy WHOYcEjrknrV6AcajxMMXH7IGuTZ8IJlpfUs9utFkcpPXFLbHoo2mbxxqLB/u+Kq EegTYshuB2o17ZRt+8yOY2/fi8E08JdlDvv2fBZfNk3RTi1iiv88xyHDnqgoPwcz 9OFIYivBuVqwKlhPNdj74OtLG1wUkRNE7PCjR19wA2DYLkkk7a4N5DpZyTXYtMQ7 t7MCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQNpEqw1upUYIMEm/lpVZvns8ZC6jAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8yNzE2L0RhUktzTmJxVkdDREJKdjVhVldiNTdQR1F1by5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGh+GwwDQYJKoZIhvcNAQELBQAD ggEBAC372UM3vEXnF8RIGWBA6gsaTR+X3lBWe6sDkyaxQU/Zu6g3BJWZAirFn0Nb uiFr39z0rUuDD8lPW1qK2vYlZFPLcVbIbaoPBuTGSMeYPyb2I+a6CGagVcxah8he 1yNhxZhzNdloN+NmOnCKJA8eIjCNVOp5YOuOvFSwO72N9z90wxAScxS0uwMxwPmi zb5AEPKvC70uK5nttY5++ZZ2EgQhX72h5RDNeI9mfg//s+3kjXlp8SPKmEZiy52O +jVKB2L0KffCXZ/V1L78aN2Gucu51jylQh2yBUR14tObxXBCriTOyt74l7DfUOp2 Qud1TObJM7ySMwPm9TX0G/UJthM= -----END CERTIFICATE-----Generated at Mon Mar 2 08:22:45 2026 by rpki-client