Certificate

$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
File:                     57B973F8727F1165368D1DA3F1858FD7660A4960.cer (raw, json)
Hash identifier:          A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=
Subject key identifier:   57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       5F9A2B7FEC2BC7B97730E79D8DC06145C040EF41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Manifest:                 rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
caRepository:             rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/
Notify URL:               https://rpki.fiti.net.cn/rrdp/notification.xml
Certificate not before:   Thu 11 Jun 2026 05:47:43 +0000
Certificate not after:    Thu 10 Jun 2027 05:52:43 +0000
Subordinate resources:    AS: 4538
                          AS: 9425
                          AS: 23910
                          AS: 142067 -- 142106
                          AS: 142650 -- 146745
                          AS: 151423 -- 151462
                          IP: 118.229.40.0/21
                          IP: 2001:253::/32
                          IP: 2001:255::/32
                          IP: 2401:34a0::/31
                          IP: 240a:a000::/20
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9a:2b:7f:ec:2b:c7:b9:77:30:e7:9d:8d:c0:61:45:c0:40:ef:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Jun 11 05:47:43 2026 GMT
            Not After : Jun 10 05:52:43 2027 GMT
        Subject: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:5c:ee:94:c0:df:3d:bf:8e:69:87:4e:4d:
                    98:06:73:1b:71:29:a1:8b:d2:1e:a8:0d:e5:73:8d:
                    ea:db:d0:2e:2c:7b:d5:76:17:34:4c:38:82:fe:dc:
                    9d:88:d8:50:41:e3:e0:2d:9d:a3:78:d5:95:77:05:
                    98:72:a9:b7:11:e9:db:c4:93:d0:7c:a6:ac:96:26:
                    42:65:17:18:68:fb:89:39:b1:c4:7d:79:17:ac:92:
                    63:94:72:33:22:2d:4b:77:9f:0b:43:c3:0d:54:e0:
                    f4:7b:54:22:37:5b:7b:f2:2b:4a:a4:c4:e6:1d:c6:
                    16:29:f7:c1:a9:6c:e4:f1:35:35:39:e5:70:ac:47:
                    f4:f5:a6:02:74:c0:ba:f3:02:b0:30:60:de:0e:4e:
                    db:8b:30:71:3b:b5:8b:1b:04:dd:f8:3b:a5:34:45:
                    ec:a2:90:24:84:d4:c1:dc:da:1d:23:33:45:e7:60:
                    b4:fa:f4:13:75:49:1a:79:41:af:35:34:4c:69:c4:
                    dc:b7:48:11:5f:33:be:c7:36:b6:70:5f:a2:8d:23:
                    2d:88:a8:0f:ee:3e:a5:b0:98:58:5b:83:50:e8:00:
                    a2:31:b4:fd:dc:1b:cd:a1:e6:ad:13:36:dd:7c:0a:
                    bb:51:05:80:49:fc:03:72:fd:b4:b5:b2:9c:35:bd:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/
                RPKI Manifest - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
                RPKI Notify - URI:https://rpki.fiti.net.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.229.40.0/21
                IPv6:
                  2001:253::/32
                  2001:255::/32
                  2401:34a0::/31
                  240a:a000::/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4538
                  9425
                  23910
                  142067-142106
                  142650-146745
                  151423-151462

    Signature Algorithm: sha256WithRSAEncryption
         85:dc:03:81:c0:b6:f1:7d:24:f2:71:ba:85:ff:f2:dc:24:69:
         40:b8:38:b6:57:2e:8b:cb:fc:73:3f:1d:e0:e1:77:e6:7e:3c:
         9c:31:2a:9a:c8:6b:06:74:2e:7e:08:80:71:34:a2:1b:e7:de:
         dc:71:24:77:93:da:48:c6:ae:ae:42:50:93:0f:bd:e1:b3:d3:
         b3:17:3a:fc:a0:a3:31:35:ce:b1:50:be:ab:9d:bf:b8:0a:db:
         ab:44:9d:de:de:4a:8c:93:ce:3b:d4:76:67:3c:b8:6d:e4:fe:
         aa:b9:58:a4:25:1b:d3:c8:b6:92:75:96:7a:32:c9:3d:d8:fd:
         77:fe:af:c0:3a:a3:e9:7c:49:e7:48:04:8c:87:2c:1b:be:b4:
         f5:24:47:2e:0c:68:dd:0a:35:ef:f4:86:94:c6:6b:87:82:fa:
         aa:d2:ce:86:d3:a3:85:85:23:38:7d:be:a9:f1:88:1b:8b:17:
         34:81:16:54:6b:41:16:54:3a:93:b9:c6:b2:ef:15:9e:d5:7c:
         22:93:53:6a:3c:96:a6:43:f3:f9:2d:57:cf:5d:79:7a:e5:b8:
         50:70:96:cf:f3:d7:dc:29:16:04:9b:a9:93:3c:2b:38:5b:95:
         46:40:7f:a5:18:fa:6b:5c:68:57:66:c3:dd:a0:e4:7e:ce:6e:
         be:1a:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:20 2026 by rpki-client