
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer
File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer (raw, json)
Hash identifier: A/2AdqpDnEd29BTJXQrtKe+bq97hF0plWl9WqTbBa4k=
Subject key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7FCAFB18ED57421DD504C600E6810A4BD243A43A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft
caRepository: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 03 Mar 2026 02:04:08 +0000
Certificate not after: Tue 02 Mar 2027 02:09:08 +0000
Subordinate resources: IP: 103.172.144.0/24
IP: 103.178.125.0/24
IP: 2001:df2:81c0::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 06:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ca:fb:18:ed:57:42:1d:d5:04:c6:00:e6:81:0a:4b:d2:43:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 3 02:04:08 2026 GMT
Not After : Mar 2 02:09:08 2027 GMT
Subject: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:88:96:78:79:57:38:18:2a:c9:72:d2:53:
92:4d:6e:b3:04:7e:f2:9f:0e:6d:54:f8:01:99:85:
c1:c7:b0:e4:ec:1a:b7:ea:75:33:aa:3e:59:ca:fb:
29:1c:f2:15:b5:1d:9f:bb:ae:cf:2a:a4:c2:42:78:
f2:3c:49:40:a7:36:a5:3a:c5:8f:6b:17:cb:03:a3:
0c:30:66:16:a7:48:d5:f8:32:6f:1a:25:2c:82:6c:
77:21:f0:de:7e:51:d5:5c:53:ea:a7:be:17:c4:32:
7a:a6:4a:c5:2f:d7:0f:e6:07:b6:d8:77:d2:8f:ca:
3f:d8:ad:d2:01:17:77:d2:5f:58:d6:31:b2:8a:3b:
42:89:24:a7:8d:6d:96:0d:8d:5e:21:9e:22:cb:85:
0d:19:f9:6d:c1:3a:f9:df:12:3b:ad:b8:13:00:c6:
2c:f9:ee:4e:f8:22:eb:b1:99:dc:4e:8d:65:81:c1:
39:c4:1f:47:2b:98:f0:cb:ff:7f:18:96:fa:04:a7:
1e:da:4a:be:c2:b3:ff:ec:17:5c:30:61:c4:56:a3:
d3:54:df:dd:71:29:28:d2:c0:34:53:4e:1f:ab:4e:
83:f8:e6:d5:3b:64:28:ce:03:04:b9:25:3f:7b:a0:
cb:4c:61:00:51:ba:82:d1:a5:c9:39:d5:43:07:24:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.144.0/24
103.178.125.0/24
IPv6:
2001:df2:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
8b:3d:6b:9d:5a:dc:e9:b2:da:c6:aa:54:34:7a:d7:1f:0f:90:
50:cb:0b:16:a3:79:bf:61:f5:11:71:eb:08:f5:ec:6a:85:89:
da:1f:c0:06:c2:06:79:30:db:90:e4:25:86:15:ef:6f:0d:fd:
c8:0e:04:ae:4f:cb:08:34:79:29:d1:b4:f6:f1:a7:5a:73:7c:
f2:db:f8:aa:44:52:4f:54:83:ff:f3:a5:6c:d8:20:b5:4f:14:
21:53:45:12:41:b0:09:6d:af:f6:c5:09:55:1d:f8:79:bb:03:
41:fa:f1:be:3c:e5:9c:de:22:81:96:40:1a:21:74:87:3b:49:
e0:c4:f8:a9:04:f3:69:b4:68:dc:ec:b7:c5:28:13:af:13:b6:
82:ae:a2:6d:4a:51:80:15:e7:01:86:3c:67:5a:71:06:77:85:
ca:5e:65:5d:5a:43:c5:94:3f:fd:fd:50:8e:8c:78:e5:f5:4d:
03:18:6a:b3:cb:b1:48:b2:4b:7c:6e:cc:7b:22:bc:38:59:37:
1a:28:64:38:4f:df:a9:42:19:42:9d:89:9f:12:45:4f:fd:2a:
bc:7a:12:dc:76:5a:c9:1b:0e:fb:58:25:8e:cf:31:d1:23:3e:
96:28:85:f8:80:c2:e0:82:3a:81:70:02:c2:df:5c:5f:e3:82:
ea:3c:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:28 2026 by rpki-client