$ rpki-client -vvvf rsync.cernet.net/repo/cernet/0/817927D20E6A8C197992DC60BB83083D9B359181.cer File: 817927D20E6A8C197992DC60BB83083D9B359181.cer (raw, json) Hash identifier: tlDSgZrQ7KLJsEwemDKTaSkg++3NF8ypOIUPvnssT1o= Subject key identifier: 81:79:27:D2:0E:6A:8C:19:79:92:DC:60:BB:83:08:3D:9B:35:91:81 Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 7E6AD87E435CD5087E1D0A90AB4E996B53DA52CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Manifest: rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft caRepository: rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/ Notify URL: https://krill.rpki-measurement.site/rrdp/notification.xml Certificate not before: Fri 18 Sep 2026 13:12:45 +0000 Certificate not after: Fri 17 Sep 2027 13:17:45 +0000 Subordinate resources: AS: 142664 IP: 240a:a00e::/32 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6a:d8:7e:43:5c:d5:08:7e:1d:0a:90:ab:4e:99:6b:53:da:52:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Sep 18 13:12:45 2026 GMT Not After : Sep 17 13:17:45 2027 GMT Subject: CN=817927D20E6A8C197992DC60BB83083D9B359181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:76:c7:62:23:cb:45:d2:1b:57:bc:20:17: 1a:50:53:30:72:0a:51:e3:d9:c0:0d:eb:c1:03:84: 55:06:1b:a3:a3:fc:de:3e:65:5e:52:45:cf:e0:9a: 4c:e5:f9:8d:9a:a6:e7:7b:f3:2e:db:93:6c:79:b2: 1c:41:52:67:30:11:09:c7:dc:c2:32:96:44:2e:29: 5a:e3:99:b4:fd:f8:fa:6f:dd:43:53:62:7e:8a:df: ae:4a:6b:98:05:ec:9b:37:be:29:93:58:07:ea:94: 3a:ed:7b:5a:69:84:35:e9:2e:3b:b5:b0:44:4f:d3: 93:06:7f:dd:4a:aa:5d:bc:98:eb:00:97:f3:58:98: d9:d6:a6:23:41:3a:6f:f2:e3:19:87:1d:93:f6:c2: 98:a1:17:de:69:1d:6a:e3:d8:1e:02:5d:d4:45:96: 64:75:7a:25:d5:46:dd:a8:f9:29:3f:50:32:2e:6a: 9a:62:63:6d:88:06:7e:c4:7f:09:f3:25:a2:8e:23: 9b:13:aa:96:65:63:4b:df:e8:28:0b:00:3f:86:00: b2:17:da:84:e4:49:fe:19:d3:2f:b3:c3:03:62:62: a2:8e:80:f2:15:86:68:7b:06:b5:4b:ad:2f:a9:6b: b5:18:8b:e8:bb:87:c0:f8:7e:1c:04:ae:31:fc:e4: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:79:27:D2:0E:6A:8C:19:79:92:DC:60:BB:83:08:3D:9B:35:91:81 X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: CA Repository - URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/ RPKI Manifest - URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft RPKI Notify - URI:https://krill.rpki-measurement.site/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a00e::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 142664 Signature Algorithm: sha256WithRSAEncryption cc:31:8f:35:25:de:73:85:2e:4d:6f:ac:2b:57:e6:f6:c4:a2: 7c:0c:68:26:05:7b:88:99:3b:82:21:bd:9b:c5:d9:10:97:81: ee:2e:0f:98:11:9e:05:f8:0c:18:a9:a0:9e:92:b5:a5:b6:24: 73:f6:2d:ba:59:e7:0c:5f:96:e9:3a:ae:db:97:f7:92:7e:7b: 41:58:6c:f4:e9:52:17:ff:6d:e1:0f:e1:5e:f7:c1:e3:ff:91: f3:a8:52:cd:76:e6:9a:91:27:cd:8e:e3:5c:14:af:f4:7a:31: 69:8d:08:05:12:f2:02:27:5c:99:a7:eb:7a:45:ed:27:4c:13: b3:4a:b5:2f:31:3d:a5:fc:b6:4d:72:db:dc:e5:56:de:df:ae: d4:cf:df:af:b2:ce:32:9c:56:37:9a:d1:19:e0:b5:3f:64:1d: bb:0e:6f:81:54:cc:57:3f:f2:4b:ce:4d:9b:5a:5b:16:b1:0f: 12:b2:18:94:4a:66:89:27:2c:1f:80:57:3a:a9:4f:39:f3:3d: e8:68:cf:88:ff:7a:4c:0a:d5:24:0f:cd:df:db:1d:7a:08:9e: 18:40:89:3b:c6:87:51:c8:69:7b:17:72:63:00:9c:29:be:17: 42:0d:35:d9:87:2d:08:dc:de:31:19:24:95:49:ad:89:da:c1: 9a:0f:fe:4d -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUfmrYfkNc1Qh+HQqQq06Za1PaUs0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDkxODEzMTI0NVoX DTI3MDkxNzEzMTc0NVowMzExMC8GA1UEAxMoODE3OTI3RDIwRTZBOEMxOTc5OTJE QzYwQkI4MzA4M0Q5QjM1OTE4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk7dsdiI8tF0htXvCAXGlBTMHIKUePZwA3rwQOEVQYbo6P83j5lXlJFz+Ca TOX5jZqm53vzLtuTbHmyHEFSZzARCcfcwjKWRC4pWuOZtP34+m/dQ1Niforfrkpr mAXsmze+KZNYB+qUOu17WmmENekuO7WwRE/TkwZ/3UqqXbyY6wCX81iY2damI0E6 b/LjGYcdk/bCmKEX3mkdauPYHgJd1EWWZHV6JdVG3aj5KT9QMi5qmmJjbYgGfsR/ CfMloo4jmxOqlmVjS9/oKAsAP4YAshfahORJ/hnTL7PDA2Jioo6A8hWGaHsGtUut L6lrtRiL6LuHwPh+HASuMfzknXsCAwEAAaOCAsAwggK8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIF5J9IOaowZeZLcYLuDCD2bNZGBMB8GA1UdIwQYMBaAFMHv OSxQBZfKPLouHseqHsP1CiiyMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3JzeW5jLmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9DMUVG MzkyQzUwMDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi93ZTg1TEZB Rmw4bzh1aTRleDZvZXdfVUtLTEkuY2VyMIIBGQYIKwYBBQUHAQsEggELMIIBBzBI BggrBgEFBQcwBYY8cnN5bmM6Ly9rcmlsbC5ycGtpLW1lYXN1cmVtZW50LnNpdGUv cmVwby9hc19ycF9tYXBwaW5nX2NhLzAvMHQGCCsGAQUFBzAKhmhyc3luYzovL2ty aWxsLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBvL2FzX3JwX21hcHBpbmdfY2Ev MC84MTc5MjdEMjBFNkE4QzE5Nzk5MkRDNjBCQjgzMDgzRDlCMzU5MTgxLm1mdDBF BggrBgEFBQcwDYY5aHR0cHM6Ly9rcmlsbC5ycGtpLW1lYXN1cmVtZW50LnNpdGUv cnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkCqAOMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwItSDANBgkqhkiG9w0BAQsFAAOCAQEAzDGPNSXec4UuTW+sK1fm 9sSifAxoJgV7iJk7giG9m8XZEJeB7i4PmBGeBfgMGKmgnpK1pbYkc/YtulnnDF+W 6Tqu25f3kn57QVhs9OlSF/9t4Q/hXvfB4/+R86hSzXbmmpEnzY7jXBSv9HoxaY0I BRLyAidcmafrekXtJ0wTs0q1LzE9pfy2TXLb3OVW3t+u1M/fr7LOMpxWN5rRGeC1 P2Qduw5vgVTMVz/yS85Nm1pbFrEPErIYlEpmiScsH4BXOqlPOfM96GjPiP96TArV JA/N39sdegieGECJO8aHUchpexdyYwCcKb4XQg012YctCNzeMRkklUmtidrBmg/+ TQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:23:32 2026 by rpki-client