
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0E274BF6680396133EAD61666AD7FF960EAD50D2.cer
File: 0E274BF6680396133EAD61666AD7FF960EAD50D2.cer (raw, json)
Hash identifier: CDHwNiiRRuDlZvu3ynWtgwm82PjUkturyKGsyDTqn0w=
Subject key identifier: 0E:27:4B:F6:68:03:96:13:3E:AD:61:66:6A:D7:FF:96:0E:AD:50:D2
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6A02B5853FD6CB01A6581ED374BFDDEB4C803C5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:19:54 +0000
Certificate not after: Sun 02 May 2027 02:24:54 +0000
Subordinate resources: IP: 103.187.90.0/24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:02:b5:85:3f:d6:cb:01:a6:58:1e:d3:74:bf:dd:eb:4c:80:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:19:54 2026 GMT
Not After : May 2 02:24:54 2027 GMT
Subject: CN=0E274BF6680396133EAD61666AD7FF960EAD50D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:09:6b:93:3a:30:5d:35:ee:89:04:fe:a8:
84:86:ec:07:1f:98:8f:fb:8f:62:8c:cb:7a:28:c4:
fa:61:61:2d:56:b6:74:22:b7:be:d0:0c:d3:d6:16:
21:ae:15:f3:8c:33:60:ae:b2:1d:d9:ec:91:72:96:
ef:6e:98:30:b9:5a:ce:37:ab:15:d6:b0:a5:e4:3b:
af:f3:6a:f8:2e:0d:2d:5c:af:3e:96:7d:28:ac:64:
bc:ad:87:9b:9f:b3:71:a8:ed:04:75:26:64:1e:96:
03:64:5b:b7:2a:51:0b:6c:36:0f:27:da:ba:b9:89:
8a:9a:6a:8f:30:7e:f8:66:3c:13:52:00:ee:0a:a7:
9b:02:e0:ad:90:b9:dc:c8:30:df:45:c4:de:4a:a9:
1e:ba:94:17:de:4d:6b:05:18:ab:b7:db:67:f3:51:
c5:4f:60:96:b2:88:b9:eb:0f:bd:34:29:05:c5:e5:
3b:c9:28:e1:b3:b5:04:04:c3:4d:c2:4a:de:ef:e5:
c1:77:5a:39:ad:15:a4:8c:1d:06:29:f2:f3:28:6c:
f9:11:22:d3:45:4e:e7:6e:ca:a5:ad:11:ea:ad:1e:
73:50:6a:7e:4b:63:8a:ea:f2:48:a6:5c:df:93:62:
a9:f8:7a:12:b4:a1:f7:d8:b0:04:3e:da:5b:32:a3:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0E:27:4B:F6:68:03:96:13:3E:AD:61:66:6A:D7:FF:96:0E:AD:50:D2
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.90.0/24
Signature Algorithm: sha256WithRSAEncryption
72:37:5e:4d:85:05:ad:7c:fd:fd:19:51:1a:c0:fc:49:b4:f5:
57:e3:6c:67:dd:80:58:3c:7b:cc:37:dd:86:04:28:a1:f0:8b:
61:a5:18:75:7c:af:dd:6e:64:7d:b6:08:22:52:07:0c:62:a6:
45:42:c9:cd:d6:27:84:59:7e:5b:4b:43:63:04:ce:a2:94:30:
20:cc:12:3e:f4:42:3e:4e:11:44:e9:dd:7b:69:35:73:d2:de:
f5:cb:36:d0:5f:10:2d:89:0c:13:8a:78:6d:e6:53:25:f2:65:
8f:c6:2d:cf:aa:7d:8f:1a:d4:62:de:a7:4e:d6:e9:ca:30:7d:
dd:2b:2f:b0:f7:ed:55:f3:ee:b2:ae:84:07:cc:dc:0f:da:ad:
65:ea:26:5e:78:46:05:b1:10:44:2c:4e:bf:5d:86:38:a8:77:
ae:52:d4:be:13:e0:ed:2a:84:6a:55:8d:f0:9e:d6:e7:88:40:
79:1b:19:23:ab:4b:3d:8e:10:77:9d:42:37:28:b4:5c:0f:39:
4a:8a:0b:4b:a8:57:44:73:4f:ce:16:e5:98:5c:ae:0f:4e:89:
8e:bc:92:83:07:2f:2e:5c:74:8c:52:cf:07:e6:8e:d2:fe:b1:
c1:bd:48:4a:38:f5:67:86:c9:7c:a0:c2:26:e4:0e:59:84:12:
2f:83:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:44 2026 by rpki-client