
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
File: 06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer (raw, json)
Hash identifier: 7X8zv5wrLwgURpitwuChVb4bTfBKuxjmw8lL+Krxogk=
Subject key identifier: 06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5FEE48B8537BC337B12D4F950D8BDDD0F4B63904
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:11:07 +0000
Certificate not after: Sun 02 May 2027 02:16:07 +0000
Subordinate resources: IP: 103.113.3.0/24
IP: 103.219.112.0/24
IP: 2001:df2:3a00::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ee:48:b8:53:7b:c3:37:b1:2d:4f:95:0d:8b:dd:d0:f4:b6:39:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:11:07 2026 GMT
Not After : May 2 02:16:07 2027 GMT
Subject: CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:8e:47:30:45:dc:74:dd:fc:4f:a5:f6:57:
31:c4:db:c8:23:9f:4a:3e:b9:37:c2:27:a4:50:f8:
9e:b3:2c:60:51:3d:94:4f:90:50:e3:d8:01:62:4f:
e5:93:db:cd:34:4f:b1:d4:3e:28:75:48:90:8e:83:
c4:de:65:c8:98:a5:e0:aa:5e:df:46:1f:37:71:b8:
23:05:9b:cf:65:56:c3:39:fa:99:59:f8:a6:b6:4b:
65:07:ce:91:49:a9:29:a3:08:cd:2e:20:fb:7e:ff:
ec:c7:d9:21:b7:7a:89:75:9e:d4:e9:8e:31:29:a2:
4a:62:a1:05:0f:5a:10:5e:d2:c4:bd:6f:c8:ed:55:
ec:1f:ea:08:5a:7c:6e:8d:3a:4d:38:58:3e:0a:e1:
c0:b0:b1:69:c8:d3:53:c6:47:68:b5:84:88:f7:7a:
fb:da:47:28:8f:56:e3:30:5f:49:4d:33:e4:97:59:
87:79:85:b7:dc:ba:4f:24:3f:33:b9:b6:f3:57:6a:
ad:3e:dc:b1:49:54:06:14:78:cc:16:ec:ba:93:96:
67:fb:ac:b0:8e:93:92:5e:05:0d:88:c6:2d:60:e2:
fb:2c:4a:b3:b3:39:ef:38:ea:0b:02:31:36:88:1d:
c8:81:7c:f4:7b:40:d0:c8:59:26:2e:d7:3e:04:68:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.113.3.0/24
103.219.112.0/24
IPv6:
2001:df2:3a00::/48
Signature Algorithm: sha256WithRSAEncryption
11:6e:c7:0d:21:b6:c8:a6:01:35:d8:69:84:04:a7:3e:d4:4a:
ab:b6:f9:da:7c:99:ab:ad:22:42:e9:de:da:8e:30:cd:07:71:
4b:e2:9a:4f:99:8b:27:3f:23:28:a4:ea:d8:9d:37:5e:0f:23:
b9:e8:58:05:31:58:18:77:ac:57:44:82:95:4b:9b:6c:a3:1d:
33:1c:d4:f1:ba:75:21:2c:e9:9d:85:65:70:ba:a0:9e:51:aa:
04:25:9c:03:59:05:39:26:c2:8e:ea:65:47:c7:8b:4d:65:28:
a7:7d:64:c2:4f:e2:4a:ea:ff:41:2a:72:72:ed:5c:b9:d8:1f:
39:1b:f1:3d:60:fd:e6:70:43:ed:f2:dd:31:22:bd:39:78:40:
6d:2c:f5:e4:87:dc:d8:0a:8e:4e:ec:80:3d:6b:4a:c1:2d:89:
f0:23:4c:cb:f1:19:6a:45:a8:c9:6b:b7:25:71:55:b9:d4:c7:
d1:61:15:45:f9:ce:8f:25:2c:76:09:e5:de:f2:dc:81:a1:94:
ea:6b:0f:6b:f1:ae:8f:ac:50:fa:fe:d3:79:65:53:f7:31:97:
af:d8:06:17:f0:63:e5:3f:80:91:b6:83:51:43:67:08:fe:12:
cc:94:b3:8a:a6:39:41:4a:62:33:93:c6:97:f8:2e:26:b0:4c:
f4:ca:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:17 2026 by rpki-client