$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer File: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (raw, json) Hash identifier: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY= Subject key identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 47BE709B43BC89C8945BDCD5812E64FE50B02AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Manifest: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft caRepository: rsync://krill.rpki-measurement.site/repo/measurements/2/ Notify URL: https://krill.rpki-measurement.site/rrdp/notification.xml Certificate not before: Wed 15 Oct 2025 01:49:23 +0000 Certificate not after: Wed 14 Oct 2026 01:54:23 +0000 Subordinate resources: IP: 103.165.110.0/23 Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:be:70:9b:43:bc:89:c8:94:5b:dc:d5:81:2e:64:fe:50:b0:2a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Oct 15 01:49:23 2025 GMT Not After : Oct 14 01:54:23 2026 GMT Subject: CN=325627320199C076DC2D552334D2FEB715E4EDD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:b8:bb:64:5c:d4:1d:ce:7e:a8:54:65:36: 22:2c:43:35:91:08:e0:a8:7e:d5:44:33:c6:23:d9: e8:33:a2:a6:8e:36:a4:a6:56:72:db:c2:48:d6:b2: 40:5a:e3:51:92:da:1b:b3:17:74:98:84:a5:02:df: 30:6d:4e:f0:9a:bf:d1:4e:6e:52:4f:15:2f:73:ca: 0f:b1:a4:a6:f3:c0:a8:96:5a:23:fe:20:97:1b:56: b4:e2:16:64:69:13:5e:c0:fb:c6:c6:4c:81:63:29: ec:d9:50:24:74:eb:ff:be:22:0c:42:d9:f9:3a:cb: 76:58:25:35:8f:54:58:84:c5:51:ee:6f:bf:86:e7: bf:ed:51:68:83:5c:03:27:a4:2b:53:35:22:72:bc: ea:3c:cf:0b:c6:8a:d6:c7:dc:ad:86:e8:43:53:a0: 5c:30:b4:f9:45:3e:0f:92:96:ac:33:32:88:5a:65: 70:a3:cf:93:b6:ad:57:a8:e6:5e:da:9a:71:e7:6f: 9e:94:9a:1d:77:95:ec:79:d0:de:c5:6e:a4:d0:0d: 2b:1c:1b:83:e5:5a:4c:e4:3d:f3:a9:91:24:b9:57: 30:b4:18:ca:36:d6:e7:89:db:f1:b9:34:19:35:73: 97:ad:0f:46:b0:11:ff:72:9a:f7:c1:4e:cb:9d:d9: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: CA Repository - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/ RPKI Manifest - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft RPKI Notify - URI:https://krill.rpki-measurement.site/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.110.0/23 Signature Algorithm: sha256WithRSAEncryption 47:0a:43:c3:d3:3d:a0:5d:ad:74:dd:78:ed:ba:b0:c9:a9:fe: 9f:3e:15:24:ad:b6:da:74:f4:91:df:50:be:e6:59:b0:c3:c0: 73:14:91:79:7d:57:4f:71:0e:66:7f:f9:3f:c7:de:dc:cd:3c: 0e:24:fc:d2:72:9e:6f:76:10:b2:81:37:ab:06:51:c3:07:5d: 3d:50:37:58:45:c1:8c:11:15:b9:1c:af:06:b6:08:44:e5:93: ff:d9:48:e9:96:97:82:35:83:3a:91:30:4b:7f:21:93:28:81: 1d:11:b5:7e:6c:ac:4b:11:2e:9e:b4:a4:a0:9d:50:ee:49:5b: a3:3a:19:00:96:01:80:70:53:d7:bd:dc:43:c2:81:b3:ae:f9: 0e:bd:a6:4f:70:ac:78:d3:1b:7a:c1:37:cc:8b:a1:47:c7:97: d6:bd:81:a3:30:3e:3b:01:f7:3f:4d:a4:38:06:f3:9a:e7:80: dd:65:c7:61:db:88:0a:29:9c:63:d3:02:ea:1d:cb:e7:14:f4: b4:27:90:35:29:ed:74:9e:07:1b:12:91:d0:52:81:cb:19:44: 00:e9:aa:c7:f1:68:4e:b7:a3:1b:c9:3b:a0:b8:09:fd:b8:be: c5:f1:07:79:81:f9:4e:c2:b7:a4:84:c1:ce:63:93:e3:7c:db: 43:72:87:3c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUR75wm0O8iciUW9zVgS5k/lCwKucwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI1MTAxNTAxNDkyM1oX DTI2MTAxNDAxNTQyM1owMzExMC8GA1UEAxMoMzI1NjI3MzIwMTk5QzA3NkRDMkQ1 NTIzMzREMkZFQjcxNUU0RURENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4kuLtkXNQdzn6oVGU2IixDNZEI4Kh+1UQzxiPZ6DOipo42pKZWctvCSNay QFrjUZLaG7MXdJiEpQLfMG1O8Jq/0U5uUk8VL3PKD7GkpvPAqJZaI/4glxtWtOIW ZGkTXsD7xsZMgWMp7NlQJHTr/74iDELZ+TrLdlglNY9UWITFUe5vv4bnv+1RaINc AyekK1M1InK86jzPC8aK1sfcrYboQ1OgXDC0+UU+D5KWrDMyiFplcKPPk7atV6jm XtqacedvnpSaHXeV7HnQ3sVupNANKxwbg+VaTOQ986mRJLlXMLQYyjbW54nb8bk0 GTVzl60PRrAR/3Ka98FOy53ZPccCAwEAAaOCApwwggKYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDJWJzIBmcB23C1VIzTS/rcV5O3XMB8GA1UdIwQYMBaAFBgW OQFVvgg5aUtqfnLKjb+k69kVMA4GA1UdDwEB/wQEAwIBBjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8yLzE4 MTYzOTAxNTVCRTA4Mzk2OTRCNkE3RTcyQ0E4REJGQTRFQkQ5MTUuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0dCWTVB VlctQ0RscFMycC1jc3FOdjZUcjJSVS5jZXIwggEQBggrBgEFBQcBCwSCAQIwgf8w RAYIKwYBBQUHMAWGOHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vbWVhc3VyZW1lbnRzLzIvMHAGCCsGAQUFBzAKhmRyc3luYzovL2tyaWxs LnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBvL21lYXN1cmVtZW50cy8yLzMyNTYy NzMyMDE5OUMwNzZEQzJENTUyMzM0RDJGRUI3MTVFNEVERDcubWZ0MEUGCCsGAQUF BzANhjlodHRwczovL2tyaWxsLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAWelbjANBgkqhkiG9w0BAQsFAAOCAQEARwpD w9M9oF2tdN147bqwyan+nz4VJK222nT0kd9QvuZZsMPAcxSReX1XT3EOZn/5P8fe 3M08DiT80nKeb3YQsoE3qwZRwwddPVA3WEXBjBEVuRyvBrYIROWT/9lI6ZaXgjWD OpEwS38hkyiBHRG1fmysSxEunrSkoJ1Q7klbozoZAJYBgHBT173cQ8KBs675Dr2m T3CseNMbesE3zIuhR8eX1r2BozA+OwH3P02kOAbzmueA3WXHYduICimcY9MC6h3L 5xT0tCeQNSntdJ4HGxKR0FKByxlEAOmqx/FoTrejG8k7oLgJ/bi+xfEHeYH5TsK3 pITBzmOT43zbQ3KHPA== -----END CERTIFICATE-----Generated at Wed Nov 5 21:20:40 2025 by rpki-client