
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/702706031F0BA961D078CB8442CEE42A524611E0.cer
File: 702706031F0BA961D078CB8442CEE42A524611E0.cer (raw, json)
Hash identifier: /59hUounGFAxfM+B3tFtM0wubu5I2SNRCHbxvu5Qc/g=
Subject key identifier: 70:27:06:03:1F:0B:A9:61:D0:78:CB:84:42:CE:E4:2A:52:46:11:E0
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 2B389DF5837C41B75D42121FC641995B7E201E75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
CRL Distribution Point: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Manifest: rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/702706031F0BA961D078CB8442CEE42A524611E0.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Thu 05 Nov 2026 12:58:25 +0000
Certificate not after: Thu 04 Nov 2027 13:03:25 +0000
Subordinate resources: IP: 160.236.4.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 18:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:38:9d:f5:83:7c:41:b7:5d:42:12:1f:c6:41:99:5b:7e:20:1e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Nov 5 12:58:25 2026 GMT
Not After : Nov 4 13:03:25 2027 GMT
Subject: CN=702706031F0BA961D078CB8442CEE42A524611E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:96:e7:4f:d2:d2:b6:07:94:8a:bb:b2:2c:
6e:54:86:18:68:a9:2a:4a:cb:a0:ba:fa:cb:16:2c:
a6:d1:46:08:94:0b:d0:19:6a:c7:ea:08:14:bc:d1:
bd:03:e0:b5:52:1b:de:dc:73:37:1b:ad:00:a4:7a:
c4:3f:13:87:80:dc:3c:f9:66:9c:12:a5:1f:c9:ba:
89:58:dd:ce:28:73:29:0c:75:f4:61:8a:d4:1c:cd:
0d:61:b9:19:24:ec:ec:e3:45:a1:47:60:36:cd:e4:
6d:ab:c5:c7:f3:ff:e0:a9:ea:74:57:b8:94:f8:4a:
da:15:ab:c5:b8:81:1e:c2:9e:94:5b:6f:aa:05:91:
63:02:54:a1:2d:34:a8:25:56:be:9d:79:08:8b:98:
04:8f:0b:8f:54:cc:60:5d:b1:b0:a8:0d:f9:84:16:
6d:23:07:fd:61:24:1a:b9:fa:a1:b0:c1:50:49:97:
50:8d:b9:ce:a7:1c:a9:5e:4b:3e:9a:0d:14:23:a7:
d9:20:3e:4d:aa:93:63:5a:0a:8d:00:3e:30:92:3e:
f1:ad:b5:ad:04:93:ff:77:69:7f:8d:2c:40:cc:0d:
68:8f:ae:fd:6a:cd:90:47:6c:9f:12:56:ba:c9:47:
1d:61:85:cf:f3:95:97:63:0a:79:4a:47:ec:d4:40:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
70:27:06:03:1F:0B:A9:61:D0:78:CB:84:42:CE:E4:2A:52:46:11:E0
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/702706031F0BA961D078CB8442CEE42A524611E0.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.236.4.0/23
Signature Algorithm: sha256WithRSAEncryption
18:e9:11:64:e6:c0:85:86:78:ea:dd:b9:5d:71:0a:7e:0e:ec:
eb:51:4e:b3:7c:29:84:82:aa:5d:6e:28:cb:00:d5:ca:a4:ca:
a7:bf:2b:7b:10:bb:89:d8:41:e4:72:74:63:39:24:bb:a4:7a:
48:12:fe:3b:2b:4f:06:e0:ee:95:ba:ec:1a:33:e4:ea:e5:a4:
54:e7:99:dd:23:84:01:3a:47:8a:21:8a:95:84:a0:e2:18:b8:
b0:01:88:39:9e:92:5d:7a:1e:9e:4b:f4:00:ac:33:77:40:68:
12:57:da:a1:25:7d:9e:29:c9:0d:ef:3c:40:83:25:67:98:e4:
85:b6:c5:d6:8c:ed:21:af:fa:fb:03:5c:24:d8:c7:65:d6:b9:
bc:c7:bf:81:34:49:18:93:32:5e:71:33:5b:29:eb:08:ac:e1:
f4:46:3d:b7:e5:80:11:a8:4f:a5:1f:1d:dc:af:18:af:02:89:
05:e4:00:31:d1:46:3c:c5:7d:3f:15:3c:7f:d9:84:c3:91:05:
c4:13:c4:c9:1b:82:6a:59:f0:75:17:3f:70:37:4a:63:26:f8:
4e:46:42:76:58:1b:e9:18:ff:4e:de:e5:4c:62:fd:1b:6c:8c:
86:46:df:5a:29:6a:68:60:ab:f8:aa:68:21:2c:03:1f:3b:30:
f8:1e:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:57 2026 by rpki-client