$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer File: 49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer (raw, json) Hash identifier: SfgNng1eQqESKDp6G91JZBmwAJymbp2wYyyQ9zQ4hBA= Subject key identifier: 49:77:6F:25:BA:04:7D:AE:08:37:69:8D:FC:0C:1C:96:89:EE:4F:AA Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Certificate serial: 2D5153059D50A9383BE71ADD96414498289C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Manifest: rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft caRepository: rsync://krill.rpki-measurement.site/repo/measurements/1/ Notify URL: https://krill.rpki-measurement.site/rrdp/notification.xml Certificate not before: Mon 04 Aug 2025 17:45:14 +0000 Certificate not after: Mon 03 Aug 2026 17:50:14 +0000 Subordinate resources: IP: 103.165.110.0/23 Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:51:53:05:9d:50:a9:38:3b:e7:1a:dd:96:41:44:98:28:9c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Validity Not Before: Aug 4 17:45:14 2025 GMT Not After : Aug 3 17:50:14 2026 GMT Subject: CN=49776F25BA047DAE0837698DFC0C1C9689EE4FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:f7:f8:92:d6:64:58:41:af:b5:9b:96:77: 1b:47:f2:0d:b6:72:c4:f8:ea:4c:0b:15:84:ad:15: a9:7d:09:c9:71:26:4f:1d:fe:5f:92:5f:5c:68:09: bf:c9:0c:73:54:4f:df:66:db:8a:c9:22:8a:0f:17: 13:a5:fd:85:f8:a4:64:72:b3:e7:4c:39:45:d2:28: 7a:18:91:d6:83:14:bd:99:49:83:97:9c:65:77:25: 8f:5a:e4:cb:fa:96:c9:61:fb:2a:8a:b0:55:45:fa: 36:43:63:18:0a:9c:28:06:d2:4d:ef:a5:06:ef:ee: 6f:3d:25:2b:70:b7:a7:e1:ef:31:5c:09:1c:f9:c2: d7:80:7c:e6:a2:a5:23:0b:45:4e:85:ff:9d:ff:02: 82:1c:82:40:9b:dc:80:a2:41:23:b0:ab:2b:74:a2: a8:59:67:74:62:cc:38:5c:a4:a6:3b:08:de:60:76: a1:70:f1:f0:02:1f:97:11:16:2e:ab:2b:43:b1:6f: 04:f1:4b:f9:65:a5:a3:91:c9:ff:0a:06:ea:f9:ad: 4d:14:cf:57:86:e4:4a:89:ff:23:4c:47:1e:5d:a9: 6a:38:0d:c1:0d:85:20:89:01:cf:db:81:69:ba:d6: d0:62:e8:95:6e:37:6a:1e:c1:24:68:8d:82:32:71: 8f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:77:6F:25:BA:04:7D:AE:08:37:69:8D:FC:0C:1C:96:89:EE:4F:AA X509v3 Authority Key Identifier: keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject Information Access: CA Repository - URI:rsync://krill.rpki-measurement.site/repo/measurements/1/ RPKI Manifest - URI:rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft RPKI Notify - URI:https://krill.rpki-measurement.site/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.110.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:e7:e7:ee:21:80:09:86:7f:92:44:c6:87:39:59:aa:3f:83: f9:2c:c2:7f:e3:04:29:61:d3:d8:54:f8:3f:25:7f:48:71:7c: 6f:ab:55:92:7a:ab:81:c9:b7:a2:85:35:0f:51:0b:81:88:82: 9a:30:a8:76:e3:4b:35:ce:eb:b5:61:4c:dc:39:1b:69:43:e2: 82:12:71:60:f9:c1:9c:94:03:74:f5:8d:74:64:84:67:8d:ec: 1d:9f:29:70:f8:73:f3:b4:03:7a:a4:cd:2d:07:1c:5e:3d:25: da:fe:4f:74:c2:66:8e:79:40:4b:b8:a0:5c:92:7c:47:44:e9: 51:bc:9b:64:14:ec:e1:ce:89:5b:40:0a:c2:c5:24:9f:30:db: 1e:fc:8f:87:7f:76:aa:66:73:03:b1:7d:38:b7:25:c3:1e:c3: 23:a2:01:40:9d:48:fc:04:4d:f4:60:12:00:84:60:b1:3f:71: 0c:b5:6b:3d:cd:f7:ce:33:1b:f9:f0:de:bf:fc:b8:90:9f:48: fd:4e:06:27:c4:b8:06:99:55:37:71:b4:53:10:bf:d9:f4:b8: 77:55:46:f3:55:76:c9:09:34:c9:96:73:37:dd:91:63:0b:b0: 90:7b:34:f1:cf:34:19:8b:ac:0f:36:fe:f4:79:9a:b9:b5:12: 24:27:68:ad -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgITLVFTBZ1QqTg75xrdlkFEmCicIzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFFNUQ2MTAwMDAxMTAvBgNVBAUTKEQxMjQ4NjA3QjBE REQwQTIxNkU4RDdGQUM1RTJDMkU3NzcwQTExMzkwHhcNMjUwODA0MTc0NTE0WhcN MjYwODAzMTc1MDE0WjAzMTEwLwYDVQQDEyg0OTc3NkYyNUJBMDQ3REFFMDgzNzY5 OERGQzBDMUM5Njg5RUU0RkFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5v3+JLWZFhBr7WblncbR/INtnLE+OpMCxWErRWpfQnJcSZPHf5fkl9caAm/ yQxzVE/fZtuKySKKDxcTpf2F+KRkcrPnTDlF0ih6GJHWgxS9mUmDl5xldyWPWuTL +pbJYfsqirBVRfo2Q2MYCpwoBtJN76UG7+5vPSUrcLen4e8xXAkc+cLXgHzmoqUj C0VOhf+d/wKCHIJAm9yAokEjsKsrdKKoWWd0Ysw4XKSmOwjeYHahcPHwAh+XERYu qytDsW8E8Uv5ZaWjkcn/Cgbq+a1NFM9XhuRKif8jTEceXalqOA3BDYUgiQHP24Fp utbQYuiVbjdqHsEkaI2CMnGPxQIDAQABo4ICnDCCApgwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUSXdvJboEfa4IN2mN/AwclonuT6owHwYDVR0jBBgwFoAU0SSG B7Dd0KIW6Nf6xeLC53cKETkwDgYDVR0PAQH/BAQDAgEGMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzEvRDEy NDg2MDdCMERERDBBMjE2RThEN0ZBQzVFMkMyRTc3NzBBMTEzOS5jcmwwfgYIKwYB BQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3Jl cG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMFNTR0I3 RGQwS0lXNk5mNnhlTEM1M2NLRVRrLmNlcjCCARAGCCsGAQUFBwELBIIBAjCB/zBE BggrBgEFBQcwBYY4cnN5bmM6Ly9rcmlsbC5ycGtpLW1lYXN1cmVtZW50LnNpdGUv cmVwby9tZWFzdXJlbWVudHMvMS8wcAYIKwYBBQUHMAqGZHJzeW5jOi8va3JpbGwu cnBraS1tZWFzdXJlbWVudC5zaXRlL3JlcG8vbWVhc3VyZW1lbnRzLzEvNDk3NzZG MjVCQTA0N0RBRTA4Mzc2OThERkMwQzFDOTY4OUVFNEZBQS5tZnQwRQYIKwYBBQUH MA2GOWh0dHBzOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRlL3JyZHAvbm90 aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBZ6VuMA0GCSqGSIb3DQEBCwUAA4IBAQBe5+fu IYAJhn+SRMaHOVmqP4P5LMJ/4wQpYdPYVPg/JX9IcXxvq1WSequBybeihTUPUQuB iIKaMKh240s1zuu1YUzcORtpQ+KCEnFg+cGclAN09Y10ZIRnjewdnylw+HPztAN6 pM0tBxxePSXa/k90wmaOeUBLuKBcknxHROlRvJtkFOzhzolbQArCxSSfMNse/I+H f3aqZnMDsX04tyXDHsMjogFAnUj8BE30YBIAhGCxP3EMtWs9zffOMxv58N6//LiQ n0j9TgYnxLgGmVU3cbRTEL/Z9Lh3VUbzVXbJCTTJlnM33ZFjC7CQezTxzzQZi6wP Nv70eZq5tRIkJ2it -----END CERTIFICATE-----Generated at Sun Aug 10 13:43:46 2025 by rpki-client