$ rpki-client -vvvf rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer File: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (raw, json) Hash identifier: X5eHZsFx2CNDn4h1wfCpglvePm+cG7Xak6K7yFdfF8A= Subject key identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 61BA662C1EC26A911625EA306CA100B6E46F8681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Manifest: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft caRepository: rsync://krill.rpki-measurement.site/repo/measurements/2/ Notify URL: https://krill.rpki-measurement.site/rrdp/notification.xml Certificate not before: Wed 16 Sep 2026 23:58:00 +0000 Certificate not after: Thu 16 Sep 2027 00:03:00 +0000 Subordinate resources: IP: 103.165.110.0/23 Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ba:66:2c:1e:c2:6a:91:16:25:ea:30:6c:a1:00:b6:e4:6f:86:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Sep 16 23:58:00 2026 GMT Not After : Sep 16 00:03:00 2027 GMT Subject: CN=325627320199C076DC2D552334D2FEB715E4EDD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:b8:bb:64:5c:d4:1d:ce:7e:a8:54:65:36: 22:2c:43:35:91:08:e0:a8:7e:d5:44:33:c6:23:d9: e8:33:a2:a6:8e:36:a4:a6:56:72:db:c2:48:d6:b2: 40:5a:e3:51:92:da:1b:b3:17:74:98:84:a5:02:df: 30:6d:4e:f0:9a:bf:d1:4e:6e:52:4f:15:2f:73:ca: 0f:b1:a4:a6:f3:c0:a8:96:5a:23:fe:20:97:1b:56: b4:e2:16:64:69:13:5e:c0:fb:c6:c6:4c:81:63:29: ec:d9:50:24:74:eb:ff:be:22:0c:42:d9:f9:3a:cb: 76:58:25:35:8f:54:58:84:c5:51:ee:6f:bf:86:e7: bf:ed:51:68:83:5c:03:27:a4:2b:53:35:22:72:bc: ea:3c:cf:0b:c6:8a:d6:c7:dc:ad:86:e8:43:53:a0: 5c:30:b4:f9:45:3e:0f:92:96:ac:33:32:88:5a:65: 70:a3:cf:93:b6:ad:57:a8:e6:5e:da:9a:71:e7:6f: 9e:94:9a:1d:77:95:ec:79:d0:de:c5:6e:a4:d0:0d: 2b:1c:1b:83:e5:5a:4c:e4:3d:f3:a9:91:24:b9:57: 30:b4:18:ca:36:d6:e7:89:db:f1:b9:34:19:35:73: 97:ad:0f:46:b0:11:ff:72:9a:f7:c1:4e:cb:9d:d9: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: CA Repository - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/ RPKI Manifest - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft RPKI Notify - URI:https://krill.rpki-measurement.site/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.110.0/23 Signature Algorithm: sha256WithRSAEncryption 61:4e:1c:23:18:77:21:af:a9:c9:ff:ab:96:b2:fb:0e:6e:79: 14:e4:53:83:9f:e1:ea:de:44:27:50:03:2a:c7:8f:f6:75:c2: bb:5b:aa:8c:a6:ad:30:81:2c:fe:dc:1f:11:28:bb:b2:59:fe: 0c:cc:3e:e7:0f:c7:a9:62:a8:da:03:85:a9:d3:ce:1e:ac:37: ba:ec:a5:5e:6a:77:89:6a:7c:ee:5f:03:10:e2:1d:af:fe:a0: 3b:6a:c1:a6:0b:e0:55:40:8c:81:ae:0a:86:88:17:d0:af:e4: db:e3:d5:ae:a5:75:62:e9:ce:da:48:a2:82:64:66:ea:bc:06: 3a:85:31:fe:c5:03:27:6d:46:6a:4b:80:ff:fa:67:ec:4a:7e: a8:23:32:3a:5e:33:d5:3f:a9:c3:d6:a3:98:84:e4:15:e6:53: 86:b0:ab:37:d5:1f:66:23:1e:be:d7:4c:ae:d2:38:d2:e1:58: e6:99:09:01:dc:4f:b2:aa:08:d3:7a:62:10:7e:c9:82:ca:24: 62:ef:5b:29:8a:c1:a8:7f:90:74:6e:69:25:93:28:de:fb:45: 74:43:9b:7e:22:c2:23:28:b4:19:f7:1f:12:34:2c:f1:da:89: 66:d3:56:4f:98:23:5f:73:4e:a4:eb:54:0c:dd:e2:90:3e:9d: 5e:bc:b1:9b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUYbpmLB7CapEWJeowbKEAtuRvhoEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI2MDkxNjIzNTgwMFoX DTI3MDkxNjAwMDMwMFowMzExMC8GA1UEAxMoMzI1NjI3MzIwMTk5QzA3NkRDMkQ1 NTIzMzREMkZFQjcxNUU0RURENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4kuLtkXNQdzn6oVGU2IixDNZEI4Kh+1UQzxiPZ6DOipo42pKZWctvCSNay QFrjUZLaG7MXdJiEpQLfMG1O8Jq/0U5uUk8VL3PKD7GkpvPAqJZaI/4glxtWtOIW ZGkTXsD7xsZMgWMp7NlQJHTr/74iDELZ+TrLdlglNY9UWITFUe5vv4bnv+1RaINc AyekK1M1InK86jzPC8aK1sfcrYboQ1OgXDC0+UU+D5KWrDMyiFplcKPPk7atV6jm XtqacedvnpSaHXeV7HnQ3sVupNANKxwbg+VaTOQ986mRJLlXMLQYyjbW54nb8bk0 GTVzl60PRrAR/3Ka98FOy53ZPccCAwEAAaOCApwwggKYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDJWJzIBmcB23C1VIzTS/rcV5O3XMB8GA1UdIwQYMBaAFBgW OQFVvgg5aUtqfnLKjb+k69kVMA4GA1UdDwEB/wQEAwIBBjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8yLzE4 MTYzOTAxNTVCRTA4Mzk2OTRCNkE3RTcyQ0E4REJGQTRFQkQ5MTUuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0dCWTVB VlctQ0RscFMycC1jc3FOdjZUcjJSVS5jZXIwggEQBggrBgEFBQcBCwSCAQIwgf8w RAYIKwYBBQUHMAWGOHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vbWVhc3VyZW1lbnRzLzIvMHAGCCsGAQUFBzAKhmRyc3luYzovL2tyaWxs LnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBvL21lYXN1cmVtZW50cy8yLzMyNTYy NzMyMDE5OUMwNzZEQzJENTUyMzM0RDJGRUI3MTVFNEVERDcubWZ0MEUGCCsGAQUF BzANhjlodHRwczovL2tyaWxsLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAWelbjANBgkqhkiG9w0BAQsFAAOCAQEAYU4c Ixh3Ia+pyf+rlrL7Dm55FORTg5/h6t5EJ1ADKseP9nXCu1uqjKatMIEs/twfESi7 sln+DMw+5w/HqWKo2gOFqdPOHqw3uuylXmp3iWp87l8DEOIdr/6gO2rBpgvgVUCM ga4KhogX0K/k2+PVrqV1YunO2kiigmRm6rwGOoUx/sUDJ21GakuA//pn7Ep+qCMy Ol4z1T+pw9ajmITkFeZThrCrN9UfZiMevtdMrtI40uFY5pkJAdxPsqoI03piEH7J gsokYu9bKYrBqH+QdG5pJZMo3vtFdEObfiLCIyi0GfcfEjQs8dqJZtNWT5gjX3NO pOtUDN3ikD6dXryxmw== -----END CERTIFICATE-----Generated at Mon Sep 21 21:17:45 2026 by rpki-client