
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer
File: 13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer (raw, json)
Hash identifier: wsABeU5pIj4+QDwzJ1mtyaez866LZduMExn9jH68NFA=
Subject key identifier: 13:16:4A:0B:7B:01:1F:7B:6F:8A:A0:39:06:46:2F:7A:37:2B:AA:47
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4DFE5BD2577A3962AB59C220010F33002E1B2C61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:36:01 +0000
Certificate not after: Sun 02 May 2027 00:41:01 +0000
Subordinate resources: IP: 175.111.96.0/24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fe:5b:d2:57:7a:39:62:ab:59:c2:20:01:0f:33:00:2e:1b:2c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:36:01 2026 GMT
Not After : May 2 00:41:01 2027 GMT
Subject: CN=13164A0B7B011F7B6F8AA03906462F7A372BAA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:04:7d:9c:6f:e5:f1:f6:3d:6a:a5:4f:23:
32:1e:4b:33:9f:e9:6a:f8:71:01:0e:ea:2d:4e:42:
d9:fe:42:79:ef:e3:d7:4a:2c:fc:a2:5f:e7:42:d3:
1d:d8:9f:4a:41:02:44:09:32:0a:5a:db:19:b3:db:
1c:57:b4:bb:0c:ab:d2:64:04:52:4a:55:3d:92:b4:
95:05:02:ab:6f:c8:27:7f:9d:d2:66:85:13:45:10:
b5:55:e9:05:07:cb:9d:8d:42:fc:fe:66:d3:85:a4:
93:13:fd:ae:24:00:15:7f:1c:f8:15:7d:27:25:1f:
b0:ef:b1:63:b3:27:61:8b:08:25:8b:f0:62:c9:2e:
79:7b:21:30:d5:9a:83:3a:90:ba:e6:5b:52:e3:63:
d3:57:89:c2:43:09:e4:37:77:9a:66:39:7b:92:4e:
59:a9:80:78:cd:fe:4a:ed:6b:c2:45:5b:e8:db:5f:
1f:5e:16:eb:84:e0:b3:83:7e:8e:07:b3:29:3f:91:
1c:e7:79:b8:ea:52:35:64:5f:b4:eb:fd:b7:1c:71:
a3:95:a8:95:67:d3:5d:bb:5b:19:c5:19:e9:38:c1:
3d:88:b9:83:c0:96:af:c3:c8:08:73:b3:85:65:a2:
63:79:be:3c:19:1f:7d:7e:ec:22:25:8c:f6:3c:6a:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:16:4A:0B:7B:01:1F:7B:6F:8A:A0:39:06:46:2F:7A:37:2B:AA:47
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.111.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d4:77:70:51:f9:c8:32:20:82:2e:b8:47:a9:ee:ae:c2:dc:
28:52:c5:2b:90:c5:6b:c0:ca:aa:4f:31:7a:c0:2b:3c:8b:65:
2d:a9:e2:a8:b7:4b:fe:21:63:3f:72:ec:7c:4f:58:70:9d:f8:
9c:24:8f:53:f0:ac:ff:eb:5d:d0:ad:3d:a3:a0:20:e7:7c:1c:
86:c9:df:a6:e6:c8:dc:e1:a2:a0:18:8e:94:93:3a:85:34:31:
fe:ed:f0:5b:29:36:16:8c:df:7b:58:0e:9c:64:10:30:00:b3:
61:0f:a6:3c:99:67:4d:9e:bd:01:c5:24:31:bf:ea:8b:0e:1d:
47:54:9e:10:87:c4:ac:f5:e0:73:20:d2:03:e2:0e:85:ab:14:
45:64:b7:7b:f8:3e:08:bf:2f:35:b5:dd:6c:f9:60:df:95:b7:
91:64:cb:f1:37:45:3c:fd:69:84:c0:d8:fc:dd:d8:2e:92:2a:
5f:d6:b6:7b:63:f1:e5:b8:c5:1c:fd:1f:15:fc:cc:0a:4c:6f:
c6:a0:ae:b6:fb:67:f8:3c:89:a4:7d:d2:8a:dc:fc:72:03:7d:
12:f5:47:4f:b5:40:4a:1a:76:9d:d0:a5:16:a1:cc:25:b7:3f:
df:57:a3:37:66:7a:4b:c5:b1:c8:3a:08:64:66:af:1f:6d:69:
74:58:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:17 2026 by rpki-client