
Certificate
$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
File: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (raw, json)
Hash identifier: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=
Subject key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial: 5F9A2B7FEC2BC7B97730E79D8DC06145C040EF41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Manifest: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
caRepository: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/
Notify URL: https://rpki.fiti.net.cn/rrdp/notification.xml
Certificate not before: Thu 11 Jun 2026 05:47:43 +0000
Certificate not after: Thu 10 Jun 2027 05:52:43 +0000
Subordinate resources: AS: 4538
AS: 9425
AS: 23910
AS: 142067 -- 142106
AS: 142650 -- 146745
AS: 151423 -- 151462
IP: 118.229.40.0/21
IP: 2001:253::/32
IP: 2001:255::/32
IP: 2401:34a0::/31
IP: 240a:a000::/20
Validation: OK
Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9a:2b:7f:ec:2b:c7:b9:77:30:e7:9d:8d:c0:61:45:c0:40:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Validity
Not Before: Jun 11 05:47:43 2026 GMT
Not After : Jun 10 05:52:43 2027 GMT
Subject: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:5c:ee:94:c0:df:3d:bf:8e:69:87:4e:4d:
98:06:73:1b:71:29:a1:8b:d2:1e:a8:0d:e5:73:8d:
ea:db:d0:2e:2c:7b:d5:76:17:34:4c:38:82:fe:dc:
9d:88:d8:50:41:e3:e0:2d:9d:a3:78:d5:95:77:05:
98:72:a9:b7:11:e9:db:c4:93:d0:7c:a6:ac:96:26:
42:65:17:18:68:fb:89:39:b1:c4:7d:79:17:ac:92:
63:94:72:33:22:2d:4b:77:9f:0b:43:c3:0d:54:e0:
f4:7b:54:22:37:5b:7b:f2:2b:4a:a4:c4:e6:1d:c6:
16:29:f7:c1:a9:6c:e4:f1:35:35:39:e5:70:ac:47:
f4:f5:a6:02:74:c0:ba:f3:02:b0:30:60:de:0e:4e:
db:8b:30:71:3b:b5:8b:1b:04:dd:f8:3b:a5:34:45:
ec:a2:90:24:84:d4:c1:dc:da:1d:23:33:45:e7:60:
b4:fa:f4:13:75:49:1a:79:41:af:35:34:4c:69:c4:
dc:b7:48:11:5f:33:be:c7:36:b6:70:5f:a2:8d:23:
2d:88:a8:0f:ee:3e:a5:b0:98:58:5b:83:50:e8:00:
a2:31:b4:fd:dc:1b:cd:a1:e6:ad:13:36:dd:7c:0a:
bb:51:05:80:49:fc:03:72:fd:b4:b5:b2:9c:35:bd:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Authority Key Identifier:
keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/
RPKI Manifest - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft
RPKI Notify - URI:https://rpki.fiti.net.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.229.40.0/21
IPv6:
2001:253::/32
2001:255::/32
2401:34a0::/31
240a:a000::/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4538
9425
23910
142067-142106
142650-146745
151423-151462
Signature Algorithm: sha256WithRSAEncryption
85:dc:03:81:c0:b6:f1:7d:24:f2:71:ba:85:ff:f2:dc:24:69:
40:b8:38:b6:57:2e:8b:cb:fc:73:3f:1d:e0:e1:77:e6:7e:3c:
9c:31:2a:9a:c8:6b:06:74:2e:7e:08:80:71:34:a2:1b:e7:de:
dc:71:24:77:93:da:48:c6:ae:ae:42:50:93:0f:bd:e1:b3:d3:
b3:17:3a:fc:a0:a3:31:35:ce:b1:50:be:ab:9d:bf:b8:0a:db:
ab:44:9d:de:de:4a:8c:93:ce:3b:d4:76:67:3c:b8:6d:e4:fe:
aa:b9:58:a4:25:1b:d3:c8:b6:92:75:96:7a:32:c9:3d:d8:fd:
77:fe:af:c0:3a:a3:e9:7c:49:e7:48:04:8c:87:2c:1b:be:b4:
f5:24:47:2e:0c:68:dd:0a:35:ef:f4:86:94:c6:6b:87:82:fa:
aa:d2:ce:86:d3:a3:85:85:23:38:7d:be:a9:f1:88:1b:8b:17:
34:81:16:54:6b:41:16:54:3a:93:b9:c6:b2:ef:15:9e:d5:7c:
22:93:53:6a:3c:96:a6:43:f3:f9:2d:57:cf:5d:79:7a:e5:b8:
50:70:96:cf:f3:d7:dc:29:16:04:9b:a9:93:3c:2b:38:5b:95:
46:40:7f:a5:18:fa:6b:5c:68:57:66:c3:dd:a0:e4:7e:ce:6e:
be:1a:aa:0f
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgIUX5orf+wrx7l3MOedjcBhRcBA70EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMTA1NDc0M1oX
DTI3MDYxMDA1NTI0M1owMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQx
REEzRjE4NThGRDc2NjBBNDk2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4XXO6UwN89v45ph05NmAZzG3EpoYvSHqgN5XON6tvQLix71XYXNEw4gv7c
nYjYUEHj4C2do3jVlXcFmHKptxHp28ST0HymrJYmQmUXGGj7iTmxxH15F6ySY5Ry
MyItS3efC0PDDVTg9HtUIjdbe/IrSqTE5h3GFin3wals5PE1NTnlcKxH9PWmAnTA
uvMCsDBg3g5O24swcTu1ixsE3fg7pTRF7KKQJITUwdzaHSMzRedgtPr0E3VJGnlB
rzU0TGnE3LdIEV8zvsc2tnBfoo0jLYioD+4+pbCYWFuDUOgAojG0/dwbzaHmrRM2
3XwKu1EFgEn8A3L9tLWynDW9DMUCAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFe5c/hyfxFlNo0do/GFj9dmCklgMB8GA1UdIwQYMBaAFMHv
OSxQBZfKPLouHseqHsP1CiiyMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3JzeW5jLmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9DMUVG
MzkyQzUwMDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyLmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi93ZTg1TEZB
Rmw4bzh1aTRleDZvZXdfVUtLTEkuY2VyMIHuBggrBgEFBQcBCwSB4TCB3jA5Bggr
BgEFBQcwBYYtcnN5bmM6Ly9yc3luYy5maXRpLm5ldC5jbi9yZXBvL2ZpdGktc3Vi
MDAyLzAvMGUGCCsGAQUFBzAKhllyc3luYzovL3JzeW5jLmZpdGkubmV0LmNuL3Jl
cG8vZml0aS1zdWIwMDIvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFEQTNGMTg1OEZE
NzY2MEE0OTYwLm1mdDA6BggrBgEFBQcwDYYuaHR0cHM6Ly9ycGtpLmZpdGkubmV0
LmNuL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQDduUoMCEEAgACMBsDBQAg
AQJTAwUAIAECVQMFASQBNKADBAQkCqAwRQYIKwYBBQUHAQgBAf8ENjA0oDIwMAIC
EboCAiTRAgJdZjAKAgMCKvMCAwIrGjAKAgMCLToCAwI9OTAKAgMCT38CAwJPpjAN
BgkqhkiG9w0BAQsFAAOCAQEAhdwDgcC28X0k8nG6hf/y3CRpQLg4tlcui8v8cz8d
4OF35n48nDEqmshrBnQufgiAcTSiG+fe3HEkd5PaSMaurkJQkw+94bPTsxc6/KCj
MTXOsVC+q52/uArbq0Sd3t5KjJPOO9R2Zzy4beT+qrlYpCUb08i2knWWejLJPdj9
d/6vwDqj6XxJ50gEjIcsG7609SRHLgxo3Qo17/SGlMZrh4L6qtLOhtOjhYUjOH2+
qfGIG4sXNIEWVGtBFlQ6k7nGsu8VntV8IpNTajyWpkPz+S1Xz115euW4UHCWz/PX
3CkWBJupkzwrOFuVRkB/pRj6a1xoV2bD3aDkfs5uvhqqDw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:49:20 2026 by rpki-client