
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
File: 1F56B4FADE1163027086547FBCB424EDF45191FD.cer (raw, json)
Hash identifier: dnX3OMe3C0oCHgXjCFvX9k0CYyVUJ5EgayZ40V7CsXA=
Subject key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5013541995B885F1A373C9A53B28E82172C4E47D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 19 Mar 2026 18:24:36 +0000
Certificate not after: Thu 18 Mar 2027 18:29:36 +0000
Subordinate resources: IP: 103.136.4.0/22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 16:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:13:54:19:95:b8:85:f1:a3:73:c9:a5:3b:28:e8:21:72:c4:e4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 19 18:24:36 2026 GMT
Not After : Mar 18 18:29:36 2027 GMT
Subject: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:90:9c:e7:4e:f6:3c:c1:62:33:1f:b5:7b:f2:
4d:78:1e:2c:d8:94:ec:09:b1:67:70:dc:b1:d3:55:
60:b6:5c:19:78:79:ee:ff:2b:fb:41:65:cb:e0:dc:
22:2a:84:3b:86:dc:9a:9e:db:20:a9:81:45:59:b5:
50:4c:7c:8e:8a:7c:1b:e0:b3:67:13:a1:e3:67:77:
39:c5:ea:fd:e6:92:f5:2c:61:93:57:c2:42:29:7a:
9a:a7:62:20:31:ff:96:a2:10:e9:c3:09:25:32:8b:
43:34:79:fb:47:7d:35:98:cf:af:11:e0:d8:fb:d4:
49:10:6d:98:b0:be:ef:5e:2b:42:4e:49:14:55:d5:
19:11:12:4a:13:da:fc:72:21:09:60:0f:f0:05:7a:
99:6b:da:23:4f:63:89:bd:bd:64:21:c2:d6:eb:63:
ab:9e:70:70:ee:75:79:c4:4f:43:27:69:19:c1:3b:
34:b4:6c:96:04:46:0c:61:55:6d:50:b2:39:c6:99:
24:86:6c:d4:db:5c:fd:8d:b3:e5:b6:08:c8:0b:6a:
d3:75:8f:24:25:4c:9e:87:2c:0b:3a:1f:f7:17:a7:
6a:6d:80:9c:2f:69:38:aa:8d:93:ce:9f:ef:99:9b:
62:9e:8e:da:80:c9:67:8d:fc:f8:28:3f:63:4d:c9:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.4.0/22
Signature Algorithm: sha256WithRSAEncryption
38:ab:1a:23:83:f2:d7:a0:87:5b:f9:e8:e1:0a:b8:7e:c0:d1:
0f:0b:96:2d:50:88:49:d2:91:ce:5c:c9:23:44:d9:21:50:cc:
69:77:76:60:d1:5e:86:06:33:d5:a2:38:75:ba:bc:35:23:41:
02:2b:72:83:eb:ed:3d:64:1b:3f:9b:75:8b:f0:61:36:31:7b:
d7:c2:a9:08:12:ea:2e:0f:96:3e:0e:6b:64:db:3c:59:e5:9c:
82:b1:d2:08:27:cf:ca:37:b9:7c:3e:4f:92:27:d1:f8:a8:ec:
14:df:3b:bb:b5:9e:d7:b1:5b:73:c3:bd:11:51:c7:98:44:cd:
90:ae:1e:2e:c7:06:f0:25:c8:ba:1c:d1:31:86:8b:1e:0b:df:
38:35:ed:f9:4a:98:c0:83:86:8d:11:0a:00:d3:31:e2:7a:0a:
f2:33:3b:d3:7d:52:9b:09:22:4c:81:7b:e6:f6:a7:9a:02:84:
e9:95:0d:65:f4:73:9c:34:5f:5f:64:de:a4:cc:7b:8d:7e:bf:
0a:c3:be:e3:b6:c6:d5:55:bb:32:29:17:56:9c:f5:72:87:e5:
bc:af:ac:5d:7a:f2:50:41:2f:c3:f8:f7:f6:19:3c:02:dc:c6:
a1:c5:64:57:88:8f:18:d7:23:77:76:f4:9c:d2:7d:f0:2d:79:
5f:f7:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:21 2026 by rpki-client