
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
File: E03B468CD361142C585663CF9ECF8523C31B59E9.cer (raw, json)
Hash identifier: yQSWbV7JnDqkA+xseFC6tOI8YRz+adndFsuUNM4ojR4=
Subject key identifier: E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 3175813700544FE9B5DE539A64A69CCCAD51D624
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:26:45 +0000
Certificate not after: Sun 02 May 2027 01:31:45 +0000
Subordinate resources: IP: 157.15.44.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:75:81:37:00:54:4f:e9:b5:de:53:9a:64:a6:9c:cc:ad:51:d6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: May 3 01:26:45 2026 GMT
Not After : May 2 01:31:45 2027 GMT
Subject: CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:48:a4:0b:bd:b8:f5:96:98:05:78:2e:89:
f1:c3:63:3d:a2:bb:53:56:f8:2f:c5:72:35:2a:17:
10:69:0a:6e:56:77:d2:ca:9f:2c:08:60:a5:7b:f6:
77:db:05:7e:fe:ea:90:7e:4f:e3:0c:4a:bb:94:da:
9c:da:80:c8:1a:03:8b:40:c6:43:ae:ea:6b:c3:c2:
7d:12:ea:c4:ac:42:4f:12:35:db:77:2c:c6:dc:fd:
8d:61:a3:b4:ce:7b:58:d3:be:e0:2d:e9:b6:f4:11:
e3:98:a3:8e:67:3a:b3:1f:c3:68:91:1d:8d:5d:0f:
b2:0e:1a:53:28:ef:2a:a1:c2:59:dd:c9:9d:b4:7d:
9d:bb:be:f8:62:b6:5e:0e:7d:08:d4:14:19:80:6d:
5d:47:cc:00:03:b5:73:da:da:d1:82:22:d2:1a:2d:
96:dd:d9:bf:8f:2e:4b:7d:e4:13:55:37:70:cf:a6:
97:fa:0b:dc:88:34:11:ce:11:37:5a:3f:27:16:14:
e2:87:a7:81:9a:6c:c9:11:61:e4:3a:a5:f7:1b:d2:
20:6e:f3:0f:df:90:c2:6e:b8:dd:18:f1:ea:c4:50:
0e:56:83:47:af:88:a1:dc:b1:a4:c4:83:6e:0f:ee:
b6:3f:d7:32:7d:ee:74:f8:be:d7:bf:76:66:c4:51:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a2:c7:0b:e7:13:1b:f5:75:d9:09:d2:53:1a:9f:6e:a5:9f:
89:6d:91:cb:d2:fb:da:55:48:36:c9:df:b4:9b:fb:e6:37:49:
86:3b:0d:69:18:1e:a7:b1:fd:f4:62:3e:bd:19:de:f0:32:fa:
2f:af:6b:a1:ca:e1:14:78:68:65:ef:42:cf:7d:f9:25:3b:b9:
a1:68:8e:66:4e:28:de:6c:67:22:92:27:7a:a9:73:1e:ba:2d:
22:b5:24:d4:92:3c:05:e8:a0:5b:42:22:fe:e3:07:11:98:c5:
73:dc:7c:54:34:81:56:f9:95:71:fb:86:8b:04:40:a9:42:c7:
93:78:e6:12:99:69:d4:03:0a:66:d3:9b:05:17:f5:75:fa:0e:
08:67:7e:8b:41:ba:57:1d:50:68:2f:04:ea:0f:0a:45:cf:1b:
90:d4:e6:8f:83:c7:ad:c5:9a:c2:30:dc:a7:b1:c4:ae:a4:e4:
62:1c:ab:62:1a:a3:c2:36:6e:4a:5a:05:e9:9d:a5:db:9e:a1:
ee:68:a3:3d:10:64:42:f1:5d:4b:47:81:b2:b5:fe:7e:87:5b:
47:2b:44:a3:5b:24:b9:95:12:91:7d:40:77:0a:01:3e:e0:48:
a0:92:3b:31:86:02:df:e2:84:67:ba:2d:cc:c1:92:9a:0b:44:
97:c1:55:0e
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUMXWBNwBUT+m13lOaZKaczK1R1iQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0
NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjY0NVoX
DTI3MDUwMjAxMzE0NVowMzExMC8GA1UEAxMoRTAzQjQ2OENEMzYxMTQyQzU4NTY2
M0NGOUVDRjg1MjNDMzFCNTlFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN6ZSKQLvbj1lpgFeC6J8cNjPaK7U1b4L8VyNSoXEGkKblZ30sqfLAhgpXv2
d9sFfv7qkH5P4wxKu5TanNqAyBoDi0DGQ67qa8PCfRLqxKxCTxI123csxtz9jWGj
tM57WNO+4C3ptvQR45ijjmc6sx/DaJEdjV0Psg4aUyjvKqHCWd3JnbR9nbu++GK2
Xg59CNQUGYBtXUfMAAO1c9ra0YIi0hotlt3Zv48uS33kE1U3cM+ml/oL3Ig0Ec4R
N1o/JxYU4oengZpsyRFh5Dql9xvSIG7zD9+Qwm643Rjx6sRQDlaDR6+IodyxpMSD
bg/utj/XMn3udPi+1792ZsRRWWMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOA7RozTYRQsWFZjz57PhSPDG1npMB8GA1UdIwQYMBaAFH30
NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83
REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw
bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzlmZGFmMDZhLWY2MjQtNDJjZi1iYjE5LWI2YmJmOTMxYWFjOC8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZmRhZjA2
YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC9FMDNCNDY4Q0QzNjExNDJD
NTg1NjYzQ0Y5RUNGODUyM0MzMUI1OUU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBnQ8sMA0GCSqGSIb3DQEBCwUAA4IBAQAcoscL5xMb9XXZCdJTGp9upZ+JbZHL
0vvaVUg2yd+0m/vmN0mGOw1pGB6nsf30Yj69Gd7wMvovr2uhyuEUeGhl70LPffkl
O7mhaI5mTijebGcikid6qXMeui0itSTUkjwF6KBbQiL+4wcRmMVz3HxUNIFW+ZVx
+4aLBECpQseTeOYSmWnUAwpm05sFF/V1+g4IZ36LQbpXHVBoLwTqDwpFzxuQ1OaP
g8etxZrCMNynscSupORiHKtiGqPCNm5KWgXpnaXbnqHuaKM9EGRC8V1LR4Gytf5+
h1tHK0SjWyS5lRKRfUB3CgE+4EigkjsxhgLf4oRnui3MwZKaC0SXwVUO
-----END CERTIFICATE-----
Generated at Tue May 12 22:04:08 2026 by rpki-client