$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/mg5E9kaa32neXCm8u0D5Ow4Ym5g.cer File: mg5E9kaa32neXCm8u0D5Ow4Ym5g.cer (raw, json) Hash identifier: qMIWFwdyAsbVI/5co37EtCBKWCAZcsDbk1Frybqx/zw= Subject key identifier: 9A:0E:44:F6:46:9A:DF:69:DE:5C:29:BC:BB:40:F9:3B:0E:18:9B:98 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: EBA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/mg5E9kaa32neXCm8u0D5Ow4Ym5g.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Feb 2026 04:18:53 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 137771 IP: 2402:4060::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 00:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60322 (0xeba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 27 04:18:53 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=9A0E44F6469ADF69DE5C29BCBB40F93B0E189B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:8b:e2:db:06:a9:79:fc:9f:f6:8f:63:b6: 3a:02:3b:5e:77:51:21:8a:a2:be:32:62:5b:41:67: fe:84:71:66:2c:0b:3e:cd:9b:cc:29:cf:7f:e9:ae: 27:57:93:8e:be:c0:a6:1c:78:e4:aa:97:bb:27:3f: 32:91:b7:68:c1:3e:7f:d2:99:99:e8:7a:b7:b4:e8: 30:ca:82:9a:20:be:7e:e6:2e:f0:4e:ab:fb:af:65: 0a:77:21:34:b0:ac:b7:8a:a1:cf:87:5b:e1:2d:70: 67:b7:b7:04:a7:38:26:6c:65:99:5d:4c:89:1d:b6: d5:ed:e8:c3:52:0b:2f:81:ca:5f:e6:15:19:bc:5a: 6f:27:85:ba:d1:91:19:83:cb:96:3e:62:d9:0c:b3: c2:5d:ba:c2:06:56:fb:6d:f5:c6:9e:af:64:e5:ef: 7a:c7:8f:12:52:d5:c0:90:31:ba:a1:f6:0e:a9:46: 39:bd:c3:94:9b:87:cc:69:78:21:fc:6a:79:d1:c1: 10:42:48:12:6a:9e:9b:cb:2a:04:b4:89:05:a8:2b: eb:fb:00:14:71:d9:cf:8a:5b:fb:ed:c9:c6:84:9c: c4:02:60:f8:d4:01:b9:83:4c:cc:25:0e:45:90:17: 92:54:e9:aa:92:0a:8e:5b:9e:2b:c2:4c:7a:f1:a0: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0E:44:F6:46:9A:DF:69:DE:5C:29:BC:BB:40:F9:3B:0E:18:9B:98 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/mg5E9kaa32neXCm8u0D5Ow4Ym5g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137771 sbgp-ipAddrBlock: critical IPv6: 2402:4060::/32 Signature Algorithm: sha256WithRSAEncryption 72:6e:0e:fd:2a:89:9e:ea:9c:6f:79:3c:64:11:71:23:86:0f: 48:fd:9d:05:b9:a7:48:01:d3:8e:41:97:9a:a8:ab:0f:c6:8f: 5d:d6:77:10:7f:bf:be:ca:30:09:c0:b7:a6:0e:77:44:18:9d: 24:20:02:2b:6c:8b:42:02:cb:b1:cd:37:65:ff:cd:f5:9f:d8: c3:1f:21:0e:2d:9f:9b:e3:e8:b4:c6:c3:08:4e:79:64:38:d1: 13:54:2e:3b:45:f3:f7:bf:ac:5c:fe:67:d7:78:68:52:11:8a: 3b:f1:56:96:18:c5:27:28:98:8a:41:88:85:87:29:43:76:df: 31:9b:32:7f:f8:c8:fe:b2:47:98:63:ec:36:18:6e:16:ee:da: fa:9f:14:7a:49:59:40:34:1b:83:23:46:81:2c:42:dd:24:bb: a0:71:d9:00:1e:a9:ea:17:17:6c:1d:c0:69:3a:40:29:5d:c4: 5e:b5:59:45:a2:5f:18:8f:6b:ac:ad:c8:8e:17:57:38:73:cd: a9:46:7b:16:7e:1d:90:a5:30:75:cc:3c:ca:22:fe:4b:66:61: d3:ec:e7:2e:3b:8f:64:a7:2f:22:b1:fc:19:60:e1:13:d4:e7: 56:a7:cd:41:cd:ef:d7:fa:cf:d6:be:7e:59:e1:38:e1:bd:19: f1:4b:01:27 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDAOuiMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAyMjcwNDE4NTNaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDlBMEU0NEY2NDY5QURGNjlERTVDMjlCQ0JCNDBGOTNCMEUxODlC OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYsYvi2wapefyf9o9j tjoCO153USGKor4yYltBZ/6EcWYsCz7Nm8wpz3/pridXk46+wKYceOSql7snPzKR t2jBPn/SmZnoere06DDKgpogvn7mLvBOq/uvZQp3ITSwrLeKoc+HW+EtcGe3twSn OCZsZZldTIkdttXt6MNSCy+Byl/mFRm8Wm8nhbrRkRmDy5Y+YtkMs8JdusIGVvtt 9caer2Tl73rHjxJS1cCQMbqh9g6pRjm9w5Sbh8xpeCH8annRwRBCSBJqnpvLKgS0 iQWoK+v7ABRx2c+KW/vtycaEnMQCYPjUAbmDTMwlDkWQF5JU6aqSCo5bnivCTHrx oN2FAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUmg5E9kaa32neXCm8u0D5Ow4Ym5gw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MTgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQxOC9tZzVFOWthYTMybmVYQ204dTBENU93NFltNWcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaKzAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQCQGAwDQYJKoZIhvcNAQELBQADggEBAHJuDv0qiZ7qnG95PGQR cSOGD0j9nQW5p0gB045Bl5qoqw/Gj13WdxB/v77KMAnAt6YOd0QYnSQgAitsi0IC y7HNN2X/zfWf2MMfIQ4tn5vj6LTGwwhOeWQ40RNULjtF8/e/rFz+Z9d4aFIRijvx VpYYxScomIpBiIWHKUN23zGbMn/4yP6yR5hj7DYYbhbu2vqfFHpJWUA0G4MjRoEs Qt0ku6Bx2QAeqeoXF2wdwGk6QCldxF61WUWiXxiPa6ytyI4XVzhzzalGexZ+HZCl MHXMPMoi/ktmYdPs5y47j2SnLyKx/Blg4RPU51anzUHN79f6z9a+flnhOOG9GfFL ASc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:03:02 2026 by rpki-client