
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer
File: 0A0BE818C9E480D5B3C1387F48406FDF75525054.cer (raw, json)
Hash identifier: wFao61CprUrxLugZVZnJWmH6eLXXAhM2H1EQtKNS9JE=
Subject key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5EC24C28B6B45BD0042B55C1E52A1FE7EE60796F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:12:14 +0000
Certificate not after: Sun 02 May 2027 01:17:14 +0000
Subordinate resources: IP: 43.245.188.0/22
IP: 103.29.148.0/22
IP: 202.6.208.0/20
IP: 2403:e600::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c2:4c:28:b6:b4:5b:d0:04:2b:55:c1:e5:2a:1f:e7:ee:60:79:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:12:14 2026 GMT
Not After : May 2 01:17:14 2027 GMT
Subject: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:ca:57:2d:e2:e9:26:90:e8:f7:a6:d7:c4:
d0:72:a3:e7:59:38:e3:78:76:2b:3f:93:f1:14:6d:
1e:d0:f1:20:21:27:17:21:49:07:5f:f0:4c:16:20:
c6:fa:f3:3e:8f:9a:e9:35:a2:db:72:94:5d:5e:21:
c8:f3:4c:50:f6:f0:6d:28:57:93:d7:90:cc:0d:85:
92:3a:90:da:57:12:5e:f1:8e:64:03:15:3c:ca:5a:
d3:8c:bb:e8:10:37:a5:b3:89:14:35:0d:7c:ef:40:
b7:40:17:7c:49:53:3d:5d:25:e8:50:89:cd:e3:27:
d2:e9:7c:78:95:2c:6a:00:1d:bd:5f:b7:bf:27:0a:
ce:ca:3e:38:e4:cd:1d:33:50:20:56:42:18:62:a4:
80:b3:cc:5f:ee:cd:6b:5e:8a:29:02:e6:2c:4f:4f:
46:83:9a:25:bd:cd:79:6c:1c:2c:59:8b:52:c5:da:
e2:c1:93:d0:68:a2:de:10:00:8e:d9:1e:d2:06:64:
f3:0e:3b:61:09:cd:af:ce:89:7e:84:69:0c:6c:1b:
ec:7c:4f:ee:04:ba:b8:a1:ce:21:e6:35:e2:48:fd:
2e:14:3f:80:3a:bc:2e:92:a2:1c:66:12:d7:d4:b2:
59:9c:e6:e9:5a:79:21:99:f6:fd:7a:f4:2e:0b:73:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.188.0/22
103.29.148.0/22
202.6.208.0/20
IPv6:
2403:e600::/32
Signature Algorithm: sha256WithRSAEncryption
32:a6:19:ec:e8:cd:d2:e8:78:7e:b1:cc:63:d3:09:14:9b:fe:
d8:36:be:18:73:e3:43:90:1c:47:c7:ba:2f:d1:c8:48:4b:29:
07:3c:d5:28:39:f1:6d:46:1b:b9:77:af:12:72:6a:df:29:38:
6d:8e:96:a2:c4:f1:5d:aa:83:61:51:f7:40:f5:f9:87:bd:ea:
e6:f5:7a:36:ee:c7:20:4d:70:b7:81:59:57:31:3d:4a:ee:76:
87:47:2c:3c:72:91:4d:74:45:78:f8:81:fb:7d:f9:96:96:f2:
de:e8:5d:e9:a0:eb:96:02:3f:6a:fa:df:92:8e:2c:4c:f9:0d:
43:e8:d9:c9:5b:03:52:75:0b:61:29:03:d6:bd:18:72:af:c9:
17:f7:03:a3:b0:00:06:c1:5d:bf:f9:5c:d1:2c:65:2c:7b:51:
ce:b2:2c:41:e3:05:f6:0b:6f:02:58:df:02:f9:92:33:50:37:
08:bb:de:a1:38:21:2f:1e:d9:b9:cb:a6:6c:71:c6:51:62:80:
f5:33:ac:aa:9f:7f:0a:9f:f9:b3:83:83:76:ba:e9:e2:50:df:
91:f9:60:3c:97:9d:e3:2b:00:6e:f3:20:b9:eb:64:63:c3:c3:
05:29:e3:e7:b3:49:cd:e0:50:a8:2f:33:db:64:82:8e:48:a8:
dc:d8:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:37 2026 by rpki-client