$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer File: f_5usVL6-W0Yv8af0-O_mYYqqfE.cer (raw, json) Hash identifier: Qr5Sp3/gZCj80ReIWaUFvuqLkhiKxGXEBgJxUaVRWt4= Subject key identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: EB3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 11 Feb 2026 19:57:22 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 210.87.72.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 00:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60221 (0xeb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 11 19:57:22 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:89:f8:c1:a6:4b:5f:a3:87:13:d9:1c:2e: b9:b9:5b:de:5b:2a:02:c8:76:e6:ee:9e:d9:1c:e6: c6:bf:98:a6:48:c6:f9:81:e1:84:b8:47:97:1c:3a: 3f:67:b2:64:5a:26:dc:4f:df:52:da:3e:a2:9d:fc: e0:35:08:44:d4:63:7d:19:04:14:59:1a:1f:32:8f: d8:c1:36:14:af:ef:1e:0e:45:a0:0a:7c:5e:91:37: 02:fd:0e:8e:78:24:66:ce:77:ce:7c:9d:4e:03:85: 4d:dd:16:01:98:4a:4d:c4:70:15:b4:91:a6:b3:f3: 7e:7b:4d:2e:52:30:0c:7b:84:2a:25:d5:89:f3:f5: 05:87:4d:22:3c:ae:4b:0b:6c:5f:1c:8d:cb:cd:33: e8:25:57:d2:0f:da:e3:98:52:a8:d2:6c:a1:6b:2d: 7c:80:e6:06:d2:89:85:2c:f2:10:3f:d4:67:fe:5c: e5:db:b5:5c:50:a6:8b:90:17:5f:21:d7:fe:4b:a0: 79:9a:91:f1:9b:8e:c3:02:49:57:ab:6b:62:b0:31: 3e:85:09:dc:e8:9d:dc:2a:c2:1a:03:71:68:36:74: 90:f8:01:41:ed:b0:56:48:53:76:fb:a1:de:06:44: 46:0b:c9:74:cb:7b:32:ab:91:1b:3a:46:ea:23:bc: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.87.72.0/23 Signature Algorithm: sha256WithRSAEncryption 76:e5:f0:e5:e6:0c:56:b7:c6:e4:a6:6b:3e:15:27:a2:d3:aa: 39:b0:f7:a1:66:5f:e4:18:9a:69:7a:67:57:4c:2d:7e:d6:1f: f0:cd:62:c9:e1:81:74:39:05:96:48:45:9f:76:46:49:6a:5b: 02:fa:5b:ac:92:25:c7:d4:46:80:82:e4:40:58:06:14:4d:99: 23:0a:2c:0f:fb:78:74:61:d5:ba:76:fc:c5:6f:72:28:0c:53: d4:82:67:c3:0b:d3:f1:68:90:f0:72:4a:86:63:d8:81:70:a4: 02:d1:ae:33:15:6d:0f:29:2c:c0:0c:19:5d:f8:e8:8c:5c:51: 68:13:0d:71:12:3f:68:59:b2:ad:6d:c9:83:72:3d:8f:59:5e: 57:be:d7:f4:85:73:fb:76:22:cf:c0:21:db:66:d4:1b:8e:b5: ce:a6:b8:21:b2:1f:fb:81:6a:2a:67:9a:7b:d5:67:b6:96:57: b5:bc:57:f3:03:96:f5:88:06:bf:23:4a:22:74:80:43:d3:cb: c2:28:3d:3a:b3:9b:d5:b5:d9:36:6b:31:66:03:25:37:e0:de: cb:50:c8:aa:e9:8e:14:a4:36:1b:97:da:61:e2:f0:ae:10:a5: 57:1a:13:6c:e2:f5:0b:31:28:3a:73:fe:0f:62:e4:09:bd:30: 1a:81:54:79 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOs9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAyMTExOTU3MjJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDdGRkU2RUIxNTJGQUY5NkQxOEJGQzY5RkQzRTNCRjk5ODYyQUE5 RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgon4waZLX6OHE9kc Lrm5W95bKgLIdubuntkc5sa/mKZIxvmB4YS4R5ccOj9nsmRaJtxP31LaPqKd/OA1 CETUY30ZBBRZGh8yj9jBNhSv7x4ORaAKfF6RNwL9Do54JGbOd858nU4DhU3dFgGY Sk3EcBW0kaaz8357TS5SMAx7hCol1Ynz9QWHTSI8rksLbF8cjcvNM+glV9IP2uOY UqjSbKFrLXyA5gbSiYUs8hA/1Gf+XOXbtVxQpouQF18h1/5LoHmakfGbjsMCSVer a2KwMT6FCdzondwqwhoDcWg2dJD4AUHtsFZIU3b7od4GREYLyXTLezKrkRs6Ruoj vEZfAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUf/5usVL6+W0Yv8af0+O/mYYqqfEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0Ni9mXzV1c1ZMNi1XMFl2OGFmMC1PX21ZWXFxZkUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ldIMA0GCSqGSIb3DQEBCwUA A4IBAQB25fDl5gxWt8bkpms+FSei06o5sPehZl/kGJppemdXTC1+1h/wzWLJ4YF0 OQWWSEWfdkZJalsC+luskiXH1EaAguRAWAYUTZkjCiwP+3h0YdW6dvzFb3IoDFPU gmfDC9PxaJDwckqGY9iBcKQC0a4zFW0PKSzADBld+OiMXFFoEw1xEj9oWbKtbcmD cj2PWV5Xvtf0hXP7diLPwCHbZtQbjrXOprghsh/7gWoqZ5p71We2lle1vFfzA5b1 iAa/I0oidIBD08vCKD06s5vVtdk2azFmAyU34N7LUMiq6Y4UpDYbl9ph4vCuEKVX GhNs4vULMSg6c/4PYuQJvTAagVR5 -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:46 2026 by rpki-client