$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer File: rfvoMVB70kEq-LhxELshC7RrLH4.cer (raw, json) Hash identifier: GkL5scAjlm0GxPVLNhw7m6W0G+wpyLKJt8QfhxJ8+Cc= Subject key identifier: AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: EAB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 26 Jan 2026 06:56:32 +0000 Certificate not after: Tue 19 Jan 2027 07:29:19 +0000 Subordinate resources: IP: 43.247.4.0/24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 05:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60083 (0xeab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 26 06:56:32 2026 GMT Not After : Jan 19 07:29:19 2027 GMT Subject: CN=ADFBE831507BD2412AF8B87110BB210BB46B2C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:c8:d3:24:bb:d4:39:65:13:b9:01:f6:41: 77:84:f0:fa:12:f4:21:37:0f:d0:cf:14:b6:e5:76: 19:98:93:59:13:65:cd:dd:f1:83:00:9f:af:62:5d: 72:22:b2:88:3a:e9:ac:de:ec:ed:40:52:07:a2:78: 90:16:80:fe:d5:df:ab:72:61:77:77:3f:97:76:1c: 5c:b4:78:22:7f:ae:3f:48:ec:d3:fb:04:00:f3:c0: 07:10:41:f8:80:46:eb:f2:ab:29:fd:02:26:19:c1: 3d:2b:47:da:98:b5:44:58:23:55:4a:61:77:62:0f: c4:30:3e:b2:22:ea:eb:a6:37:04:b7:14:3a:87:7b: 81:a3:cd:7b:15:5e:8c:57:0d:94:2b:17:a2:d5:b5: 13:5e:95:62:b9:7b:e5:e3:14:be:a1:41:c0:0a:43: 9e:55:4c:ef:d7:48:50:bc:b7:1f:e7:60:7d:ca:9a: de:d4:60:77:c6:a4:f7:1a:a9:eb:85:04:2f:35:50: da:40:ae:05:03:1f:30:0d:d8:24:5f:7f:f3:fb:86: aa:fa:f8:da:c0:de:09:35:30:35:50:1b:4c:fb:72: 16:69:94:39:69:cb:ae:4d:ff:c9:ae:8d:41:17:57: a2:8f:48:74:a8:35:ce:d2:77:e9:6c:23:4f:3d:e1: c0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.247.4.0/24 Signature Algorithm: sha256WithRSAEncryption a5:5b:20:f9:28:55:a8:8b:e4:92:2e:c7:80:fd:60:4f:09:3b: ce:ee:b2:a1:90:09:75:14:9c:76:14:13:8a:b5:9c:46:48:bd: 96:68:db:b9:3b:8c:44:32:2f:3b:7a:60:88:f1:08:2f:06:27: b0:e0:09:f6:81:c4:82:76:25:84:b1:6b:9d:4e:65:5b:12:84: 60:fa:f4:6c:54:9f:78:32:96:6b:b6:85:e2:c7:92:ab:3e:7f: b9:2c:06:0e:f7:a1:bd:8b:89:73:89:a2:48:89:3b:ad:a5:24: 8d:5f:b5:11:68:1b:b4:5a:02:8f:38:fb:db:c3:0d:b6:ab:ba: 07:d6:de:24:e3:32:6c:b9:08:95:84:c0:59:23:60:6b:75:96: b9:1a:5f:af:e3:36:cc:17:34:f7:3d:73:c5:64:d0:55:71:fc: cf:01:3b:8b:4e:d6:db:a4:34:aa:43:c9:c5:f6:3d:83:b9:8a: 35:6a:2e:a6:97:46:9b:81:75:a1:45:40:2f:01:e3:79:30:54: bc:e1:80:b1:27:21:73:bf:70:07:98:e9:d1:70:7e:59:09:4d: c4:41:68:46:86:5b:82:ca:f5:f7:db:c6:c3:c0:4f:95:01:f3: 99:b0:c4:25:46:00:3e:d7:b7:29:3f:f9:29:6d:ce:d2:05:c0: 68:7d:4e:37 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOqzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMjYwNjU2MzJaFw0yNzAxMTkwNzI5MTlaMDMx MTAvBgNVBAMTKEFERkJFODMxNTA3QkQyNDEyQUY4Qjg3MTEwQkIyMTBCQjQ2QjJD N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVMjTJLvUOWUTuQH2 QXeE8PoS9CE3D9DPFLbldhmYk1kTZc3d8YMAn69iXXIisog66aze7O1AUgeieJAW gP7V36tyYXd3P5d2HFy0eCJ/rj9I7NP7BADzwAcQQfiARuvyqyn9AiYZwT0rR9qY tURYI1VKYXdiD8QwPrIi6uumNwS3FDqHe4GjzXsVXoxXDZQrF6LVtRNelWK5e+Xj FL6hQcAKQ55VTO/XSFC8tx/nYH3Kmt7UYHfGpPcaqeuFBC81UNpArgUDHzAN2CRf f/P7hqr6+NrA3gk1MDVQG0z7chZplDlpy65N/8mujUEXV6KPSHSoNc7Sd+lsI089 4cD7AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUrfvoMVB70kEq+LhxELshC7RrLH4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MjUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQyNS9yZnZvTVZCNzBrRXEtTGh4RUxzaEM3UnJMSDQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/cEMA0GCSqGSIb3DQEBCwUA A4IBAQClWyD5KFWoi+SSLseA/WBPCTvO7rKhkAl1FJx2FBOKtZxGSL2WaNu5O4xE Mi87emCI8QgvBiew4An2gcSCdiWEsWudTmVbEoRg+vRsVJ94MpZrtoXix5KrPn+5 LAYO96G9i4lziaJIiTutpSSNX7URaBu0WgKPOPvbww22q7oH1t4k4zJsuQiVhMBZ I2BrdZa5Gl+v4zbMFzT3PXPFZNBVcfzPATuLTtbbpDSqQ8nF9j2DuYo1ai6ml0ab gXWhRUAvAeN5MFS84YCxJyFzv3AHmOnRcH5ZCU3EQWhGhluCyvX328bDwE+VAfOZ sMQlRgA+17cpP/kpbc7SBcBofU43 -----END CERTIFICATE-----Generated at Mon Mar 2 02:57:16 2026 by rpki-client