Certificate
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
File: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (raw, json)
Hash identifier: mgsJBaAk2tZpnZulkdxLsRTCtHwMQLkWv+FvEkCxqcs=
Subject key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial: 6C302DCB73B566A32A6A653DC594E19A3A6C268D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Manifest: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
caRepository: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/
Notify URL: https://rpki.fiti.net.cn/rrdp/notification.xml
Certificate not before: Thu 14 May 2026 06:56:03 +0000
Certificate not after: Thu 13 May 2027 07:01:03 +0000
Subordinate resources: AS: 4538
AS: 23910
AS: 142067 -- 142106
AS: 142650 -- 146745
IP: 2001:253::/32
IP: 240a:a000::/20
Validation: OK
Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 06:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:30:2d:cb:73:b5:66:a3:2a:6a:65:3d:c5:94:e1:9a:3a:6c:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Validity
Not Before: May 14 06:56:03 2026 GMT
Not After : May 13 07:01:03 2027 GMT
Subject: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:5c:ee:94:c0:df:3d:bf:8e:69:87:4e:4d:
98:06:73:1b:71:29:a1:8b:d2:1e:a8:0d:e5:73:8d:
ea:db:d0:2e:2c:7b:d5:76:17:34:4c:38:82:fe:dc:
9d:88:d8:50:41:e3:e0:2d:9d:a3:78:d5:95:77:05:
98:72:a9:b7:11:e9:db:c4:93:d0:7c:a6:ac:96:26:
42:65:17:18:68:fb:89:39:b1:c4:7d:79:17:ac:92:
63:94:72:33:22:2d:4b:77:9f:0b:43:c3:0d:54:e0:
f4:7b:54:22:37:5b:7b:f2:2b:4a:a4:c4:e6:1d:c6:
16:29:f7:c1:a9:6c:e4:f1:35:35:39:e5:70:ac:47:
f4:f5:a6:02:74:c0:ba:f3:02:b0:30:60:de:0e:4e:
db:8b:30:71:3b:b5:8b:1b:04:dd:f8:3b:a5:34:45:
ec:a2:90:24:84:d4:c1:dc:da:1d:23:33:45:e7:60:
b4:fa:f4:13:75:49:1a:79:41:af:35:34:4c:69:c4:
dc:b7:48:11:5f:33:be:c7:36:b6:70:5f:a2:8d:23:
2d:88:a8:0f:ee:3e:a5:b0:98:58:5b:83:50:e8:00:
a2:31:b4:fd:dc:1b:cd:a1:e6:ad:13:36:dd:7c:0a:
bb:51:05:80:49:fc:03:72:fd:b4:b5:b2:9c:35:bd:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Authority Key Identifier:
keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/
RPKI Manifest - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
RPKI Notify - URI:https://rpki.fiti.net.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253::/32
240a:a000::/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4538
23910
142067-142106
142650-146745
Signature Algorithm: sha256WithRSAEncryption
08:e7:5d:19:a0:93:8e:9e:5e:f6:ce:0e:ea:b5:8e:64:89:45:
ea:5c:aa:32:ff:f2:80:e5:c8:b9:c7:76:81:f0:6d:cb:e4:1f:
4e:59:15:ba:cd:39:7f:77:28:15:22:91:96:88:1d:34:99:16:
76:04:71:6b:41:43:e1:d1:46:7b:87:01:e8:34:0e:6e:c9:5a:
0c:b0:89:a4:53:f5:1b:80:51:f6:06:a2:b4:73:d9:3e:00:6b:
b4:cd:9c:be:f8:6a:71:f0:24:e4:93:4d:ed:ac:1c:1d:c4:60:
fd:29:80:90:ce:05:1d:14:36:d3:8e:00:da:42:53:29:48:22:
2c:08:68:38:26:d3:f2:76:1f:14:df:18:e1:a9:b2:66:90:d1:
f0:17:ec:f8:26:ca:a9:86:3b:fe:e2:5f:e4:6e:78:b7:97:dd:
fd:a3:8d:9c:a7:2a:2e:70:b0:08:04:89:70:25:3e:05:2e:b7:
21:ab:6e:b5:d0:bf:91:ad:80:57:b3:7d:50:58:26:32:de:dd:
09:50:f8:7b:dc:55:ab:89:1d:09:df:06:99:6d:f4:93:47:14:
69:9b:80:c0:c8:a1:ea:02:6b:e5:90:a4:c5:4e:93:c8:b9:f7:
96:ae:9d:9b:2f:e9:84:6b:9b:03:95:d5:ba:79:89:67:e9:d4:
d3:a1:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:53:00 2026 by rpki-client