
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer
File: 15253A2B5044241610CA488254A5FBDEFCA83946.cer (raw, json)
Hash identifier: MbZUnTprVi8m0fLZKBuqS9OEiegtjQV3U2T21useCjc=
Subject key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4D5647BC8E068526098DDF449D4C3CA566D5F817
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:38:07 +0000
Certificate not after: Sun 02 May 2027 00:43:07 +0000
Subordinate resources: IP: 103.94.132.0/23
IP: 2001:df1:6900::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:56:47:bc:8e:06:85:26:09:8d:df:44:9d:4c:3c:a5:66:d5:f8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:38:07 2026 GMT
Not After : May 2 00:43:07 2027 GMT
Subject: CN=15253A2B5044241610CA488254A5FBDEFCA83946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:cf:54:f8:fc:7a:22:62:b7:0b:79:80:c8:
c9:69:7d:8c:2e:df:c0:72:8c:22:53:64:96:1f:0e:
ad:93:96:e7:da:d1:29:09:b9:17:b1:8d:8d:9d:79:
f6:cb:3e:29:12:45:b9:62:a1:39:3f:1a:4d:97:e7:
11:68:e9:8b:99:cf:f5:25:6f:ca:eb:12:50:35:d7:
27:15:9d:42:c2:a3:91:3d:55:85:dc:72:8b:f9:90:
1f:b7:68:a8:71:c1:5c:15:87:a8:84:1c:52:8c:17:
75:17:0f:ac:fc:c0:dd:19:61:d0:3b:b7:a9:3c:a9:
21:56:ba:8d:0c:b0:9b:b8:9c:bf:1e:9c:48:42:61:
8d:ae:fa:92:17:33:00:5e:de:d4:f8:84:84:59:a2:
cb:07:c2:c7:39:8f:37:fc:54:1a:24:c2:20:6f:26:
09:5a:21:8e:80:d5:ef:fc:3d:6a:9d:c3:b6:02:2f:
35:e5:90:d3:0a:2d:69:88:f7:67:c5:f1:c7:53:ab:
38:ff:ac:26:e4:18:c4:d9:44:16:c5:66:b2:db:23:
68:f3:20:ba:2e:b1:a0:ac:c1:45:80:68:7d:ae:55:
7f:9c:20:b3:ad:4b:d3:91:68:06:3e:f4:0e:be:76:
8b:ee:fe:22:67:54:f6:aa:34:83:10:cc:4c:19:60:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.132.0/23
IPv6:
2001:df1:6900::/48
Signature Algorithm: sha256WithRSAEncryption
2c:bc:7c:c7:d3:f1:9f:ac:f4:ae:2a:8a:e9:82:98:99:7c:05:
de:ec:a8:56:25:3b:6b:31:d6:63:9f:db:7c:ca:c7:c4:ab:95:
26:ff:b7:8c:ab:39:ee:b0:44:ad:aa:9a:c7:80:dc:db:cd:ff:
76:23:0b:0c:fb:ad:73:a1:10:7e:61:45:cc:70:10:5c:36:dd:
88:1a:a9:c4:f6:e7:10:cb:15:36:3d:53:5b:28:17:44:cc:3a:
68:7e:d0:ab:7e:23:2d:2e:a0:af:93:da:be:ca:8a:89:de:52:
ab:e9:cf:25:24:9b:85:d6:6d:c3:c7:c7:09:9c:e8:8c:df:91:
0a:8d:79:7e:18:ce:b2:50:16:b8:13:7a:ed:17:d7:f0:44:7c:
45:81:4c:bb:4a:cd:47:d4:38:00:ab:de:72:2c:42:b3:1b:62:
2e:e5:fe:cc:bb:e6:1c:cb:ce:0e:78:10:50:f2:fc:3e:a4:17:
d0:e4:a0:8d:26:83:f2:c1:21:b1:ae:3b:ef:39:fc:be:d1:db:
c7:5c:4c:41:ed:18:e9:e6:82:dd:8e:b8:fc:b6:60:ee:db:dd:
36:b8:ad:88:bd:e7:43:fa:80:d8:6b:15:97:e7:88:7f:b2:d3:
ad:2f:65:a4:11:e0:91:3f:58:0b:80:b3:8f:db:a7:53:a1:8c:
f8:11:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:32 2026 by rpki-client