
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0364E5E1741E1D920A287362374F4F8FC981377D.cer
File: 0364E5E1741E1D920A287362374F4F8FC981377D.cer (raw, json)
Hash identifier: WWSkZBgWePBPejhoDtQEijxS3W79IY0aWqUt3Q5SnWE=
Subject key identifier: 03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 537EE71AB85D4D919A72B085BD2F723B0F2AA4D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:11:59 +0000
Certificate not after: Sun 02 May 2027 01:16:59 +0000
Subordinate resources: IP: 103.139.82.0/23
IP: 202.22.31.0/24
IP: 2001:df0:7080::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7e:e7:1a:b8:5d:4d:91:9a:72:b0:85:bd:2f:72:3b:0f:2a:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:11:59 2026 GMT
Not After : May 2 01:16:59 2027 GMT
Subject: CN=0364E5E1741E1D920A287362374F4F8FC981377D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:58:5a:36:4b:64:d3:d3:1b:28:bd:17:d6:
76:21:22:04:b5:40:7a:7a:03:fc:e8:c3:d0:f9:1e:
20:82:de:0d:b8:2a:d6:e7:e6:cc:79:c7:61:32:12:
25:51:5e:66:1a:48:2f:88:2a:39:89:1e:4c:95:c2:
05:59:74:c8:4a:0b:0d:fd:52:0d:2e:f3:fa:54:03:
cb:13:35:5d:c0:60:3e:c5:77:66:66:a8:2b:ae:32:
f7:b3:76:fd:fc:20:bd:35:ef:c4:91:68:2d:01:cf:
ee:85:6e:3e:f4:86:78:8b:4a:bd:da:65:c8:72:e0:
b0:3a:d0:59:bb:ba:df:dc:54:65:ce:42:0a:7b:93:
c9:ec:64:98:1f:56:9c:27:69:b3:90:9b:16:b1:b2:
4e:73:cd:dd:f1:06:1a:72:f3:4b:af:09:66:94:97:
58:a5:c3:34:2c:f5:78:f0:ea:df:f6:0b:71:e9:99:
e2:a7:11:8f:25:b0:3f:44:9c:00:38:f5:fb:64:ef:
ca:c9:88:d7:50:9c:2e:3d:50:0c:17:59:68:54:da:
bc:2c:86:68:b0:63:93:c9:eb:1f:9b:70:87:89:7c:
be:97:db:ac:73:65:7d:84:1d:b7:77:70:e5:2e:e2:
26:3f:94:a1:4d:a3:c4:8d:36:7f:02:c5:95:42:16:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
03:64:E5:E1:74:1E:1D:92:0A:28:73:62:37:4F:4F:8F:C9:81:37:7D
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/0364E5E1741E1D920A287362374F4F8FC981377D.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.82.0/23
202.22.31.0/24
IPv6:
2001:df0:7080::/48
Signature Algorithm: sha256WithRSAEncryption
9d:60:3c:69:43:5c:d6:50:6f:1d:2c:6e:fe:2d:60:b8:e4:83:
ad:3b:12:0b:9f:92:64:57:d8:0e:9f:89:13:0e:ac:58:76:14:
bf:0d:64:5e:34:7f:9d:bf:27:f7:a5:31:8c:5c:b3:9b:7d:ab:
13:c7:2c:40:ad:5c:a1:86:98:d8:0e:82:d8:b0:20:26:99:71:
12:16:7d:06:03:df:d2:b6:40:a5:e0:95:0d:86:a4:ad:a2:8e:
e2:2b:60:25:c7:b1:b0:75:f1:10:19:69:2c:33:03:2b:81:68:
9d:49:79:a0:53:5e:20:2c:c5:69:d0:6a:ee:d5:3d:41:d5:dd:
90:ca:a1:3c:b2:8c:72:a9:75:c1:0b:fc:a0:91:cc:db:a8:d0:
fa:f1:74:dd:52:0d:16:ae:99:bf:1d:35:f8:ee:91:e7:4b:a3:
0e:0b:00:bd:2f:0f:38:06:d8:6c:89:81:57:50:f4:ce:cb:6f:
71:34:f8:c1:7b:3e:9a:22:0a:3a:57:13:93:ae:6b:72:55:39:
18:c6:14:78:03:3a:78:67:c2:1a:17:04:19:2e:0f:8b:01:88:
f0:b5:a1:f0:bc:c9:05:ea:8e:70:b7:1a:9d:79:43:c4:cc:ea:
84:c9:9d:42:81:ec:af:0b:e4:73:53:fa:55:69:c7:2c:c0:26:
84:76:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:56 2026 by rpki-client