$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer File: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (raw, json) Hash identifier: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI= Subject key identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 262F2ED39DE8AEA97A4A2A0B10405C128B5AB0AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Manifest: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft caRepository: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/ Notify URL: https://alias.rpki-measurement.site/rrdp/notification.xml Certificate not before: Tue 28 Apr 2026 10:05:40 +0000 Certificate not after: Tue 27 Apr 2027 10:10:40 +0000 Subordinate resources: IP: 103.165.110.0/23 IP: 240a:a801::/32 Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2f:2e:d3:9d:e8:ae:a9:7a:4a:2a:0b:10:40:5c:12:8b:5a:b0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Apr 28 10:05:40 2026 GMT Not After : Apr 27 10:10:40 2027 GMT Subject: CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e1:b4:18:33:80:49:42:33:c0:94:15:ff:5b: f6:df:0c:48:c8:2c:af:6e:b7:0d:52:42:4c:0e:27: 74:92:f5:f4:d2:4f:0f:15:f4:e5:9d:19:0c:b9:9f: 97:4f:67:13:38:e2:38:62:0c:d2:9b:86:d5:38:db: 64:9c:da:cf:78:3e:c8:7f:36:10:5b:9a:fb:9f:30: 6d:97:e8:81:5f:f6:de:76:da:4f:b1:02:bf:99:c3: a8:6a:77:97:18:52:ec:56:13:fd:c1:47:d2:95:ee: 42:30:9e:06:80:02:67:c4:6d:d8:ad:8e:02:16:63: 62:54:3f:cc:e1:d4:96:76:be:33:b6:df:a9:f2:5c: ea:b3:83:4d:a1:cf:a0:c5:97:4b:9e:83:af:30:19: 30:7f:c4:1e:ae:f7:df:26:a1:20:19:fb:de:68:a2: 59:2b:f0:4f:95:35:08:33:21:e3:2e:51:bf:a5:46: fc:7e:c5:84:f9:fa:b1:0e:6c:ec:50:be:4b:9a:a7: 36:7b:2c:c7:71:33:ce:9b:78:b2:b0:a7:11:ce:6d: 29:e9:40:45:cf:31:b7:65:ea:96:e0:73:b1:9f:f3: d8:d9:4b:0b:5c:48:88:ea:b2:b5:52:04:7f:8a:16: c9:8a:32:97:f8:ee:a2:5c:12:12:b1:5f:c5:64:42: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: CA Repository - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/ RPKI Manifest - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft RPKI Notify - URI:https://alias.rpki-measurement.site/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.110.0/23 IPv6: 240a:a801::/32 Signature Algorithm: sha256WithRSAEncryption 4c:cd:b5:e4:fc:18:c0:7e:25:55:11:b2:e3:82:0c:5e:4a:c9: b2:06:09:69:f7:ff:e0:ce:ee:13:45:0e:75:e3:0f:dd:0f:f9: 3a:e0:cc:64:51:d0:c5:d7:68:9e:d1:66:14:c8:88:1c:49:6d: b1:9b:e5:26:42:f4:f9:dd:b6:9a:f7:fe:df:6c:0a:9b:64:f4: 9b:71:ff:75:9a:40:af:5d:39:13:74:db:10:6b:2c:f5:eb:34: a2:32:a4:98:3d:1a:6a:17:b4:b7:76:ae:77:c0:3b:62:bc:5b: 24:18:9a:b5:8f:65:63:47:37:01:58:70:10:e1:12:4d:6c:c0: 71:68:fd:13:00:8d:d4:75:65:98:dd:8c:b7:c0:4a:ff:12:ee: 17:e0:22:e1:5b:b3:09:69:ed:94:fa:41:b2:ab:95:a1:63:d9: aa:80:29:e3:44:15:cc:72:e0:dd:77:2a:ed:0e:32:34:4c:bd: 5d:20:40:05:ea:ff:3e:bf:9d:1f:69:93:4e:da:bb:ae:d5:63: b2:6f:c0:e9:a5:d4:6a:f8:2c:39:0a:27:57:2a:e1:01:7c:17: d4:3d:1e:6e:65:5e:f7:7f:49:54:a2:57:5a:63:ea:8b:b8:a6: 19:e9:d6:de:ad:cf:42:5c:8b:ff:79:13:af:8e:75:1c:bb:e2: b7:a7:5a:98 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUJi8u053orql6SioLEEBcEotasK0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI2MDQyODEwMDU0MFoX DTI3MDQyNzEwMTA0MFowMzExMC8GA1UEAxMoOUQ0RkQ3NkQ3NkREMDdGQUZFNTlB MjkyNjBEODREREExRDZFMDA3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPhtBgzgElCM8CUFf9b9t8MSMgsr263DVJCTA4ndJL19NJPDxX05Z0ZDLmf l09nEzjiOGIM0puG1TjbZJzaz3g+yH82EFua+58wbZfogV/23nbaT7ECv5nDqGp3 lxhS7FYT/cFH0pXuQjCeBoACZ8Rt2K2OAhZjYlQ/zOHUlna+M7bfqfJc6rODTaHP oMWXS56DrzAZMH/EHq733yahIBn73miiWSvwT5U1CDMh4y5Rv6VG/H7FhPn6sQ5s 7FC+S5qnNnssx3Ezzpt4srCnEc5tKelARc8xt2XqluBzsZ/z2NlLC1xIiOqytVIE f4oWyYoyl/juolwSErFfxWRCtJsCAwEAAaOCArAwggKsMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ1P12123Qf6/lmikmDYTdodbgB7MB8GA1UdIwQYMBaAFBgW OQFVvgg5aUtqfnLKjb+k69kVMA4GA1UdDwEB/wQEAwIBBjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8yLzE4 MTYzOTAxNTVCRTA4Mzk2OTRCNkE3RTcyQ0E4REJGQTRFQkQ5MTUuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0dCWTVB VlctQ0RscFMycC1jc3FOdjZUcjJSVS5jZXIwggEVBggrBgEFBQcBCwSCAQcwggED MEYGCCsGAQUFBzAFhjpyc3luYzovL2FsaWFzLnJwa2ktbWVhc3VyZW1lbnQuc2l0 ZS9yZXBvL2NoaWxkX2FsaWFzX2NhLzAvMHIGCCsGAQUFBzAKhmZyc3luYzovL2Fs aWFzLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBvL2NoaWxkX2FsaWFzX2NhLzAv OUQ0RkQ3NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREExRDZFMDA3Qi5tZnQwRQYI KwYBBQUHMA2GOWh0dHBzOi8vYWxpYXMucnBraS1tZWFzdXJlbWVudC5zaXRlL3Jy ZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ6VuMA0EAgACMAcDBQAkCqgBMA0G CSqGSIb3DQEBCwUAA4IBAQBMzbXk/BjAfiVVEbLjggxeSsmyBglp9//gzu4TRQ51 4w/dD/k64MxkUdDF12ie0WYUyIgcSW2xm+UmQvT53baa9/7fbAqbZPSbcf91mkCv XTkTdNsQayz16zSiMqSYPRpqF7S3dq53wDtivFskGJq1j2VjRzcBWHAQ4RJNbMBx aP0TAI3UdWWY3Yy3wEr/Eu4X4CLhW7MJae2U+kGyq5WhY9mqgCnjRBXMcuDddyrt DjI0TL1dIEAF6v8+v50faZNO2ruu1WOyb8DppdRq+Cw5CidXKuEBfBfUPR5uZV73 f0lUoldaY+qLuKYZ6dberc9CXIv/eROvjnUcu+K3p1qY -----END CERTIFICATE-----Generated at Wed May 13 01:12:02 2026 by rpki-client