
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
File: 55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer (raw, json)
Hash identifier: KqLUomRw9md72a8IwiF3Ex7VlFQHSs8uRgUt7FZvV5I=
Subject key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6E6DA6638FC7498616986F6C8B6E5AAF15C0EEBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
caRepository: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 19 Mar 2026 05:13:52 +0000
Certificate not after: Thu 18 Mar 2027 05:18:52 +0000
Subordinate resources: IP: 103.87.184.0/22
IP: 103.206.186.0/24
IP: 123.176.121.0 -- 123.176.127.255
IP: 2400:d740::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 14:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6d:a6:63:8f:c7:49:86:16:98:6f:6c:8b:6e:5a:af:15:c0:ee:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 19 05:13:52 2026 GMT
Not After : Mar 18 05:18:52 2027 GMT
Subject: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:f8:fe:b9:c3:4c:82:af:12:6d:fc:f4:7d:
1e:3a:a4:4f:35:6e:0b:27:6a:d6:5d:7e:6a:f2:90:
bc:46:f4:95:e3:bd:f2:99:bf:48:f0:ad:b8:a1:c7:
1f:7c:b2:90:d2:32:30:56:30:a9:a3:5c:d8:29:5a:
b3:62:be:ba:c1:ad:cc:68:28:dd:10:50:12:0c:fb:
ff:ce:8e:5a:3b:13:fa:ce:33:a1:3b:52:a6:1c:0e:
30:17:a5:7e:fd:b0:80:ec:26:9c:27:d9:81:2b:4f:
df:fa:53:10:7e:11:53:f1:32:1a:66:20:3c:22:1a:
cc:73:12:30:76:a0:df:46:ae:cd:19:8e:a2:fb:54:
78:5d:e4:ee:57:68:3c:32:d5:60:a8:f3:43:a3:fb:
26:73:23:af:24:0f:64:75:a1:9c:7a:03:8d:ee:ff:
36:be:35:b1:90:4e:1c:8f:e7:e2:02:90:1f:35:c1:
67:c7:7f:99:13:51:dc:3f:f6:88:c6:f8:e5:56:66:
b9:f4:63:49:64:74:11:8c:a6:4d:ac:dd:33:0d:1a:
74:4c:3e:9c:10:7d:7c:c7:97:72:59:46:31:ac:70:
ed:a6:1a:cf:f9:84:22:b5:ba:17:34:c2:54:6f:e1:
02:3e:cf:d2:a2:ac:98:40:8b:4b:89:10:dd:54:bf:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.184.0/22
103.206.186.0/24
123.176.121.0-123.176.127.255
IPv6:
2400:d740::/32
Signature Algorithm: sha256WithRSAEncryption
31:1b:cd:37:2f:5a:c6:08:3e:31:ea:68:6d:5c:e3:5f:94:9f:
0e:65:7b:80:75:f9:04:c8:9b:29:fe:05:3b:b3:0c:40:fe:0a:
5f:36:3c:02:00:0a:4a:f4:a7:09:9f:79:95:3f:84:52:ec:66:
d2:ca:56:e3:b0:56:a3:f6:70:5d:91:e6:65:34:40:51:3f:68:
44:bf:cc:22:b4:db:b5:13:77:d6:99:d6:7c:c3:f5:81:c7:5c:
b4:9e:f5:01:92:65:de:e2:08:ec:e8:a0:34:b3:ba:06:99:4f:
6e:36:2e:84:6e:5f:5b:e5:d4:a2:0e:84:8c:d3:1c:84:c9:9c:
ce:54:b0:19:33:a3:98:7e:cc:38:27:04:ba:2e:cb:d3:53:21:
3c:eb:fe:ec:e8:3f:38:90:54:4a:a4:26:1e:7c:cf:bc:4e:27:
cb:5d:9a:ab:05:37:0d:35:66:6e:a8:d1:8f:77:8b:ce:3d:8a:
64:4d:ea:1d:65:9a:38:3e:21:da:c0:d5:e8:26:e4:e1:e7:2e:
f4:6e:f9:96:14:e0:ab:9a:c3:4a:b4:ff:48:a0:1f:b2:80:02:
7d:5c:17:41:c8:0b:ec:35:f2:58:05:c8:6a:09:bc:63:59:04:
5b:81:ff:fb:7f:90:12:80:f3:67:34:1e:96:39:22:03:f0:8d:
2b:7c:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:56 2026 by rpki-client