
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
File: 2263B33A6F6C2144A5A070C3383941C2821ED962.cer (raw, json)
Hash identifier: C1GkjQKpqsFpcCrgP6fRZ65FBDdrJXY/VMRqWvtUtTc=
Subject key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 7D2BBE687ABB2B2791A9B4F6552B26E5A8856832
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:03:06 +0000
Certificate not after: Sun 02 May 2027 02:08:06 +0000
Subordinate resources: IP: 103.96.146.0/23
IP: 2001:df2:e9c0::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2b:be:68:7a:bb:2b:27:91:a9:b4:f6:55:2b:26:e5:a8:85:68:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:03:06 2026 GMT
Not After : May 2 02:08:06 2027 GMT
Subject: CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:ca:3a:d6:a6:9c:d5:a3:40:bf:8b:b0:f0:
c4:69:00:69:d5:cc:16:c0:76:c0:f6:22:50:04:84:
90:b8:10:35:56:b5:0e:25:fe:82:c5:12:a5:e8:cd:
c8:de:1e:b4:e1:c1:52:cd:b8:ac:e4:f8:90:68:50:
01:1b:f2:65:79:de:1c:f0:16:c5:6c:95:31:78:9a:
dd:9c:ba:d5:bc:a6:53:45:cb:d0:ee:11:cd:74:64:
22:ce:a1:6d:f4:de:f3:a2:c1:a3:be:15:4f:d6:2d:
d0:9c:5e:ee:72:8f:22:94:29:cc:3b:34:d3:80:ad:
f5:2e:38:4b:86:ad:53:64:7f:f9:d2:37:a8:ab:70:
7e:39:56:48:b4:bf:ec:e4:85:11:fb:66:4b:87:f3:
8e:74:83:39:3f:fa:e0:aa:7a:db:bc:24:73:34:15:
9a:3e:28:6e:8e:d6:b6:1c:2b:12:ca:01:08:32:78:
02:b4:db:99:49:f8:5d:87:d8:ee:bc:76:67:91:f0:
b1:4f:1b:d8:b9:60:1b:2e:d7:c3:56:69:fb:62:26:
76:39:0b:a2:b0:4f:3a:92:e8:fe:5d:37:97:c2:a4:
8c:e2:23:a7:ef:60:df:4a:5c:57:1b:9d:07:0a:fc:
bb:fc:e1:b5:bd:56:e0:cc:85:71:41:95:9a:fd:c5:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.146.0/23
IPv6:
2001:df2:e9c0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:4b:7c:18:07:1b:0f:87:41:ef:fc:65:a4:1a:05:3d:4e:5b:
c2:41:fa:2a:a7:dd:e3:ed:3d:5e:a3:26:37:5e:8b:4f:08:d3:
7d:09:0d:28:19:bc:02:62:a3:20:21:f3:02:d4:4b:c9:bf:68:
86:5b:00:f9:b8:bc:7f:35:05:8e:20:6d:11:00:fd:8c:36:d5:
25:88:b7:ed:11:1e:cd:58:c3:f7:1f:f8:59:df:5d:43:fa:31:
8c:3b:86:e1:3e:e1:fb:e6:37:67:21:ed:56:e8:4b:b1:06:73:
1b:a2:64:fb:51:18:bd:0d:f1:aa:68:75:78:b5:20:d3:42:10:
37:be:98:a4:7b:4d:cc:70:cc:ce:6d:d3:83:a7:0d:e2:8c:35:
bd:b8:4e:10:61:19:81:75:e8:36:a9:72:d1:93:b6:32:e6:da:
ef:ba:32:49:29:a3:16:3b:66:6e:86:b5:31:6d:b5:ad:9e:fc:
99:7b:8c:9c:89:bc:bd:77:b0:6a:8a:d0:4c:dd:b3:0b:b9:c0:
81:ec:90:0b:1b:9b:b1:fb:4d:75:0e:df:12:b8:a9:1d:9a:b0:
7c:fd:1c:79:f5:52:09:c7:c5:4b:9b:ce:1e:6d:03:c1:ae:64:
f2:05:7a:96:9f:f5:3f:cd:f0:6c:ea:95:c6:fb:c8:8b:33:82:
1d:65:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:39 2026 by rpki-client