$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/C6F78F62408927F518ECE35D446D4E99A20B6318.cer File: C6F78F62408927F518ECE35D446D4E99A20B6318.cer (raw, json) Hash identifier: 3KjCS6088NAGjC+MftNTJcroirKVRSkkLzJlsj9HzEw= Subject key identifier: C6:F7:8F:62:40:89:27:F5:18:EC:E3:5D:44:6D:4E:99:A2:0B:63:18 Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Certificate serial: 75D211A410EDE42F0E0C9B38F95C2368064AA769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Manifest: rsync://krill.nic.edu.cn/repo/nic/1/C6F78F62408927F518ECE35D446D4E99A20B6318.mft caRepository: rsync://krill.nic.edu.cn/repo/nic/1/ Notify URL: https://krill.nic.edu.cn/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 03:06:17 +0000 Certificate not after: Tue 11 Aug 2026 03:11:17 +0000 Subordinate resources: IP: 103.165.110.0/26 Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d2:11:a4:10:ed:e4:2f:0e:0c:9b:38:f9:5c:23:68:06:4a:a7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Validity Not Before: Aug 12 03:06:17 2025 GMT Not After : Aug 11 03:11:17 2026 GMT Subject: CN=C6F78F62408927F518ECE35D446D4E99A20B6318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:15:f5:69:d8:c1:33:df:fd:f7:83:88:bd:e9: 35:91:8c:21:3a:83:9a:59:2e:9f:bd:db:16:9d:a0: b3:31:91:83:ed:b9:e8:1b:e6:7f:56:0d:15:70:e3: bf:49:c1:f1:12:bd:33:e8:63:76:15:b6:f8:91:54: d6:18:e5:7d:6a:1c:47:97:4c:a9:69:80:f1:6f:88: 4b:11:d1:fe:91:7e:34:03:22:af:86:a7:07:c9:a7: aa:1f:7c:e7:39:3b:d9:da:53:f4:80:be:fa:49:2d: af:a4:bc:85:c5:4d:27:09:78:c7:03:ae:7c:ff:15: 0f:dd:9f:ca:3d:ec:cf:42:68:d7:cb:26:29:08:73: e3:f5:63:11:8a:94:25:fd:64:ef:3f:7e:44:ba:0f: 28:1d:b6:45:a0:07:b2:7e:0e:5c:f6:db:d4:38:d4: e0:da:65:71:86:0c:7b:62:49:c6:7d:b9:8b:4f:c9: 7d:b5:db:9d:70:6b:08:a9:cd:5a:cf:85:88:bd:d3: d3:1d:55:ae:83:20:58:9a:d6:e9:d1:07:8c:8f:c8: 0d:ac:f6:c8:a0:70:2b:66:cd:54:c5:68:9b:99:93: 59:5a:ef:0b:95:77:35:f9:2c:74:11:a3:47:6f:81: 27:20:5d:10:a6:98:1e:29:1f:21:fe:fb:46:e7:a2: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:F7:8F:62:40:89:27:F5:18:EC:E3:5D:44:6D:4E:99:A2:0B:63:18 X509v3 Authority Key Identifier: keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject Information Access: CA Repository - URI:rsync://krill.nic.edu.cn/repo/nic/1/ RPKI Manifest - URI:rsync://krill.nic.edu.cn/repo/nic/1/C6F78F62408927F518ECE35D446D4E99A20B6318.mft RPKI Notify - URI:https://krill.nic.edu.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.110.0/26 Signature Algorithm: sha256WithRSAEncryption 96:f0:c7:b0:64:3a:62:e3:d9:f4:b1:4c:ff:4e:d7:a5:d1:e6: bd:88:ca:d1:e9:1c:cd:60:c2:c9:af:0c:9e:9f:97:43:48:26: 1b:ce:62:27:43:cf:41:48:44:0f:06:85:c1:1b:2e:4f:6d:c7: 72:53:81:a0:6d:58:94:65:ef:b1:70:2a:6d:ec:c6:2e:78:27: 2f:c4:e4:54:89:fc:12:79:d7:c7:c1:99:7c:d3:a2:b8:8e:3c: 68:94:96:86:49:1b:0b:c1:a5:64:db:d8:2b:d2:39:d3:43:5f: 48:62:73:3c:59:74:76:00:fe:0f:82:46:e1:49:dc:9a:19:57: ab:45:f1:cb:05:b5:a9:ff:ac:b9:4e:31:a0:34:02:02:93:3e: b9:9d:2f:84:8c:4f:df:08:69:84:91:6c:46:73:2c:c1:c6:f3: 99:53:f8:bd:5c:f2:a9:27:2a:9a:d1:81:e3:c6:73:ba:74:e2: 5f:1f:53:96:73:95:c0:f2:6b:e9:83:1f:f7:fe:1a:49:4b:70: b9:d3:11:e6:53:da:35:77:c3:77:99:a4:2d:ff:3b:f8:60:21: ea:69:80:4c:14:60:4b:41:6f:39:6a:2c:f0:a1:41:6b:94:f0: e6:4d:55:bd:d6:b1:d8:9f:c8:ca:98:4c:45:76:05:f9:77:c4: 2d:32:b5:8e -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUddIRpBDt5C8ODJs4+VwjaAZKp2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEyhEMTI0ODYwN0Iw REREMEEyMTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5MB4XDTI1MDgxMjAzMDYxN1oX DTI2MDgxMTAzMTExN1owMzExMC8GA1UEAxMoQzZGNzhGNjI0MDg5MjdGNTE4RUNF MzVENDQ2RDRFOTlBMjBCNjMxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEV9WnYwTPf/feDiL3pNZGMITqDmlkun73bFp2gszGRg+256Bvmf1YNFXDj v0nB8RK9M+hjdhW2+JFU1hjlfWocR5dMqWmA8W+ISxHR/pF+NAMir4anB8mnqh98 5zk72dpT9IC++kktr6S8hcVNJwl4xwOufP8VD92fyj3sz0Jo18smKQhz4/VjEYqU Jf1k7z9+RLoPKB22RaAHsn4OXPbb1DjU4NplcYYMe2JJxn25i0/JfbXbnXBrCKnN Ws+FiL3T0x1VroMgWJrW6dEHjI/IDaz2yKBwK2bNVMVom5mTWVrvC5V3NfksdBGj R2+BJyBdEKaYHikfIf77RueifJECAwEAAaOCAmgwggJkMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMb3j2JAiSf1GOzjXURtTpmiC2MYMB8GA1UdIwQYMBaAFNEk hgew3dCiFujX+sXiwud3ChE5MA4GA1UdDwEB/wQEAwIBBjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8xL0Qx MjQ4NjA3QjBEREQwQTIxNkU4RDdGQUM1RTJDMkU3NzcwQTExMzkuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyLzBTU0dC N0RkMEtJVzZOZjZ4ZUxDNTNjS0VUay5jZXIwgdwGCCsGAQUFBwELBIHPMIHMMDAG CCsGAQUFBzAFhiRyc3luYzovL2tyaWxsLm5pYy5lZHUuY24vcmVwby9uaWMvMS8w XAYIKwYBBQUHMAqGUHJzeW5jOi8va3JpbGwubmljLmVkdS5jbi9yZXBvL25pYy8x L0M2Rjc4RjYyNDA4OTI3RjUxOEVDRTM1RDQ0NkQ0RTk5QTIwQjYzMTgubWZ0MDoG CCsGAQUFBzANhi5odHRwczovL2tyaWxsLm5pYy5lZHUuY24vcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgABMAcDBQZnpW4AMA0GCSqGSIb3DQEBCwUAA4IBAQCW8MewZDpi 49n0sUz/Ttel0ea9iMrR6RzNYMLJrwyen5dDSCYbzmInQ89BSEQPBoXBGy5Pbcdy U4GgbViUZe+xcCpt7MYueCcvxORUifwSedfHwZl806K4jjxolJaGSRsLwaVk29gr 0jnTQ19IYnM8WXR2AP4PgkbhSdyaGVerRfHLBbWp/6y5TjGgNAICkz65nS+EjE/f CGmEkWxGcyzBxvOZU/i9XPKpJyqa0YHjxnO6dOJfH1OWc5XA8mvpgx/3/hpJS3C5 0xHmU9o1d8N3maQt/zv4YCHqaYBMFGBLQW85aizwoUFrlPDmTVW91rHYn8jKmExF dgX5d8QtMrWO -----END CERTIFICATE-----Generated at Sat Aug 23 21:12:14 2025 by rpki-client