Certificate
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer
File: 24B340250EB1D6C83128750AD8B2299EF1300112.cer (raw, json)
Hash identifier: a0mLuRZWyj1dEqf2Zo+9KMAQqQ8Pveif3EAEjjz4mao=
Subject key identifier: 24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 16CF89B2D513EA76E048EECCCE136F093949652C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:45:52 +0000
Certificate not after: Sun 02 May 2027 00:50:52 +0000
Subordinate resources: IP: 27.112.76.0/22
IP: 27.131.248.0/22
IP: 49.0.24.0/22
IP: 103.5.48.0/23
IP: 103.5.215.0/24
IP: 103.6.34.0/24
IP: 103.6.180.0/24
IP: 103.6.200.0/22
IP: 103.7.173.0/24
IP: 103.8.224.0/22
IP: 103.8.244.0/22
IP: 103.12.12.0/22
IP: 103.12.167.0/24
IP: 103.13.37.0 -- 103.13.38.255
IP: 103.13.200.0/22
IP: 103.14.108.0/24
IP: 103.16.48.0/23
IP: 103.16.188.0/22
IP: 103.16.197.0/24
IP: 103.16.232.0/22
IP: 103.17.172.0/22
IP: 103.17.182.0/23
IP: 103.18.16.0/22
IP: 103.18.96.0/22
IP: 103.18.190.0/23
IP: 103.19.76.0/22
IP: 103.19.184.0/22
IP: 103.19.204.0/22
IP: 103.20.21.0/24
IP: 103.20.106.0/23
IP: 103.23.151.0/24
IP: 103.25.165.0/24
IP: 103.27.3.0/24
IP: 103.29.120.0/22
IP: 103.31.36.0/22
IP: 103.31.164.0/22
IP: 103.35.236.0/22
IP: 103.36.40.0/22
IP: 103.37.230.0/23
IP: 103.37.244.0/22
IP: 103.40.68.0/23
IP: 103.52.213.0/24
IP: 103.54.1.0/24
IP: 103.55.56.0/23
IP: 103.58.147.0/24
IP: 103.74.6.0/23
IP: 103.74.12.0/23
IP: 103.76.132.0/22
IP: 103.86.94.0/24
IP: 103.90.8.0/22
IP: 103.93.164.0/23
IP: 103.195.158.0/23
IP: 103.215.68.0/22
IP: 103.224.140.0/23
IP: 103.225.184.0/23
IP: 103.225.242.0/24
IP: 103.226.136.0/22
IP: 103.227.14.0/24
IP: 103.227.220.0/22
IP: 103.228.80.0/23
IP: 103.229.164.0/22
IP: 103.230.83.0/24
IP: 103.231.171.0/24
IP: 103.231.198.0/23
IP: 103.242.208.0/23
IP: 103.243.108.0/23
IP: 103.245.177.0/24
IP: 103.246.76.0/24
IP: 103.246.129.0/24
IP: 103.247.16.0/23
IP: 103.247.32.0/22
IP: 103.247.126.0/23
IP: 103.249.58.0/23
IP: 103.249.210.0/24
IP: 103.252.85.0/24
IP: 103.254.51.0/24
IP: 110.92.72.0/22
IP: 114.30.88.0/21
IP: 116.193.188.0/22
IP: 116.254.96.0/22
IP: 117.103.48.0/20
IP: 119.252.128.0/21
IP: 121.50.32.0/21
IP: 124.66.162.0/23
IP: 180.222.216.0/22
IP: 202.4.185.0/24
IP: 202.37.120.0/24
IP: 202.43.88.0/23
IP: 202.59.192.0/20
IP: 202.59.255.0/24
IP: 202.65.224.0/20
IP: 202.122.160.0/20
IP: 202.150.64.0/19
IP: 202.158.252.0/24
IP: 202.171.237.0/24
IP: 203.1.25.0/24
IP: 203.19.4.0/24
IP: 203.79.26.0/23
IP: 203.83.24.0/21
IP: 203.119.52.0/22
IP: 203.161.190.0/23
IP: 203.171.216.0/22
IP: 203.217.134.0/23
IP: 203.223.90.0/23
IP: 210.23.64.0/20
IP: 2001:dc6::/32
IP: 2001:de8:2::/48
IP: 2001:df0:263::/48
IP: 2001:df0:268::/48
IP: 2001:df0:2e6::/48
IP: 2001:df0:409::/48
IP: 2001:df1:4700::/48
IP: 2001:df5:ec00::/48
IP: 2404:400::/32
IP: 2404:e300::/32
IP: 2404:f500::/32
IP: 2406:5400::/32
IP: 2406:6b00::/32
IP: 2407:6b80::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cf:89:b2:d5:13:ea:76:e0:48:ee:cc:ce:13:6f:09:39:49:65:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:45:52 2026 GMT
Not After : May 2 00:50:52 2027 GMT
Subject: CN=24B340250EB1D6C83128750AD8B2299EF1300112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:3e:57:5e:ef:03:d9:7c:31:73:21:0a:e1:
7e:dd:95:d7:f8:09:a9:25:29:83:08:b7:34:1b:11:
8c:8f:b7:ab:86:6d:d6:52:b4:02:1f:87:c9:1a:49:
aa:56:6b:ca:66:dd:55:b3:4a:c4:86:cc:bd:db:69:
ee:49:8c:10:31:26:82:6c:1f:9a:b8:d4:0c:0a:73:
f9:32:f6:24:22:9b:95:03:a9:e8:23:fa:f2:d5:e7:
4b:bb:66:0d:f3:8b:a4:e3:11:f3:94:cd:24:39:cd:
f0:e8:59:ab:e4:62:33:39:aa:5b:96:19:84:a2:02:
91:54:c3:d9:51:fd:3a:cf:a0:e6:d0:cc:7c:76:37:
c6:49:d2:1d:0b:e0:5d:4e:55:d6:38:7e:e6:87:31:
7f:9e:19:12:53:85:a1:55:9c:cb:20:11:90:5c:f5:
7d:96:c4:d4:a5:be:12:b9:e3:f3:ca:6c:30:e8:b6:
32:a4:cd:1d:12:f0:d0:df:e6:31:76:3f:86:2a:0a:
b4:6e:da:29:b8:45:75:12:e2:3b:4a:fc:78:61:a1:
5d:2b:b0:05:ac:2a:79:b3:9a:d3:ec:ba:cb:e8:36:
bd:de:3f:c8:1c:74:e8:a3:b5:02:47:29:09:22:cc:
c8:bc:ce:6a:2f:18:3a:95:3c:7b:fd:0c:88:74:28:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.76.0/22
27.131.248.0/22
49.0.24.0/22
103.5.48.0/23
103.5.215.0/24
103.6.34.0/24
103.6.180.0/24
103.6.200.0/22
103.7.173.0/24
103.8.224.0/22
103.8.244.0/22
103.12.12.0/22
103.12.167.0/24
103.13.37.0-103.13.38.255
103.13.200.0/22
103.14.108.0/24
103.16.48.0/23
103.16.188.0/22
103.16.197.0/24
103.16.232.0/22
103.17.172.0/22
103.17.182.0/23
103.18.16.0/22
103.18.96.0/22
103.18.190.0/23
103.19.76.0/22
103.19.184.0/22
103.19.204.0/22
103.20.21.0/24
103.20.106.0/23
103.23.151.0/24
103.25.165.0/24
103.27.3.0/24
103.29.120.0/22
103.31.36.0/22
103.31.164.0/22
103.35.236.0/22
103.36.40.0/22
103.37.230.0/23
103.37.244.0/22
103.40.68.0/23
103.52.213.0/24
103.54.1.0/24
103.55.56.0/23
103.58.147.0/24
103.74.6.0/23
103.74.12.0/23
103.76.132.0/22
103.86.94.0/24
103.90.8.0/22
103.93.164.0/23
103.195.158.0/23
103.215.68.0/22
103.224.140.0/23
103.225.184.0/23
103.225.242.0/24
103.226.136.0/22
103.227.14.0/24
103.227.220.0/22
103.228.80.0/23
103.229.164.0/22
103.230.83.0/24
103.231.171.0/24
103.231.198.0/23
103.242.208.0/23
103.243.108.0/23
103.245.177.0/24
103.246.76.0/24
103.246.129.0/24
103.247.16.0/23
103.247.32.0/22
103.247.126.0/23
103.249.58.0/23
103.249.210.0/24
103.252.85.0/24
103.254.51.0/24
110.92.72.0/22
114.30.88.0/21
116.193.188.0/22
116.254.96.0/22
117.103.48.0/20
119.252.128.0/21
121.50.32.0/21
124.66.162.0/23
180.222.216.0/22
202.4.185.0/24
202.37.120.0/24
202.43.88.0/23
202.59.192.0/20
202.59.255.0/24
202.65.224.0/20
202.122.160.0/20
202.150.64.0/19
202.158.252.0/24
202.171.237.0/24
203.1.25.0/24
203.19.4.0/24
203.79.26.0/23
203.83.24.0/21
203.119.52.0/22
203.161.190.0/23
203.171.216.0/22
203.217.134.0/23
203.223.90.0/23
210.23.64.0/20
IPv6:
2001:dc6::/32
2001:de8:2::/48
2001:df0:263::/48
2001:df0:268::/48
2001:df0:2e6::/48
2001:df0:409::/48
2001:df1:4700::/48
2001:df5:ec00::/48
2404:400::/32
2404:e300::/32
2404:f500::/32
2406:5400::/32
2406:6b00::/32
2407:6b80::/32
Signature Algorithm: sha256WithRSAEncryption
90:a9:9f:79:5c:c2:da:1a:d2:31:8f:67:cc:85:db:79:b4:23:
b8:d6:50:9b:8e:7e:88:a2:08:cf:43:ce:92:b7:26:77:99:e4:
8d:a1:6e:aa:cf:83:b0:8d:5c:83:c3:ad:00:d7:23:0b:4d:90:
c1:f4:96:56:8f:81:e1:91:d9:f3:83:55:6f:a5:51:cd:60:68:
75:6e:3a:29:87:e5:b9:4c:51:a7:b4:51:ba:82:ea:05:95:b3:
cd:6f:23:d3:85:48:fa:2b:a6:74:e3:78:d4:08:47:88:69:74:
e9:8a:61:e4:b6:e0:0c:b1:1a:fa:e9:cd:be:98:a9:64:30:9b:
0e:41:4d:a7:64:83:a6:32:33:08:d4:db:39:47:87:5f:62:1d:
78:f3:de:80:c5:20:84:f1:d1:f1:2c:00:6f:28:d0:1f:3f:d2:
04:fa:21:71:12:8f:6b:ce:77:55:d4:d6:29:b5:0a:0f:00:f1:
ee:85:a0:51:ed:a9:54:77:b3:3b:c3:00:6b:fa:43:88:9e:f5:
b1:92:46:2f:5e:81:2d:ce:e4:63:06:d7:7a:59:4a:53:4d:1b:
81:3e:06:51:ef:05:25:1a:dd:db:72:bc:02:d5:a7:f6:0f:6a:
0a:75:13:9d:d5:63:aa:02:67:40:cc:1b:e3:40:5e:e4:62:51:
73:a3:9d:55
-----BEGIN CERTIFICATE-----
MIIIwDCCB6igAwIBAgIUFs+JstUT6nbgSO7MzhNvCTlJZSwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDU1MloX
DTI3MDUwMjAwNTA1MlowMzExMC8GA1UEAxMoMjRCMzQwMjUwRUIxRDZDODMxMjg3
NTBBRDhCMjI5OUVGMTMwMDExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCZPlde7wPZfDFzIQrhft2V1/gJqSUpgwi3NBsRjI+3q4Zt1lK0Ah+HyRpJ
qlZrymbdVbNKxIbMvdtp7kmMEDEmgmwfmrjUDApz+TL2JCKblQOp6CP68tXnS7tm
DfOLpOMR85TNJDnN8OhZq+RiMzmqW5YZhKICkVTD2VH9Os+g5tDMfHY3xknSHQvg
XU5V1jh+5ocxf54ZElOFoVWcyyARkFz1fZbE1KW+Ernj88psMOi2MqTNHRLw0N/m
MXY/hioKtG7aKbhFdRLiO0r8eGGhXSuwBawqebOa0+y6y+g2vd4/yBx06KO1Akcp
CSLMyLzOai8YOpU8e/0MiHQoshcCAwEAAaOCBbMwggWvMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFCSzQCUOsdbIMSh1CtiyKZ7xMAESMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzYyYmNmMWVjLTkyMmQtNGNkNy04Y2E2LTcyNzI0ZjY2ZTVmYi8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MmJjZjFl
Yy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC8yNEIzNDAyNTBFQjFENkM4
MzEyODc1MEFEOEIyMjk5RUYxMzAwMTEyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDFwYIKwYBBQUHAQcBAf8EggMGMIIDAjCC
AoYEAgABMIICfgMEAhtwTAMEAhuD+AMEAjEAGAMEAWcFMAMEAGcF1wMEAGcGIgME
AGcGtAMEAmcGyAMEAGcHrQMEAmcI4AMEAmcI9AMEAmcMDAMEAGcMpzAMAwQAZw0l
AwQAZw0mAwQCZw3IAwQAZw5sAwQBZxAwAwQCZxC8AwQAZxDFAwQCZxDoAwQCZxGs
AwQBZxG2AwQCZxIQAwQCZxJgAwQBZxK+AwQCZxNMAwQCZxO4AwQCZxPMAwQAZxQV
AwQBZxRqAwQAZxeXAwQAZxmlAwQAZxsDAwQCZx14AwQCZx8kAwQCZx+kAwQCZyPs
AwQCZyQoAwQBZyXmAwQCZyX0AwQBZyhEAwQAZzTVAwQAZzYBAwQBZzc4AwQAZzqT
AwQBZ0oGAwQBZ0oMAwQCZ0yEAwQAZ1ZeAwQCZ1oIAwQBZ12kAwQBZ8OeAwQCZ9dE
AwQBZ+CMAwQBZ+G4AwQAZ+HyAwQCZ+KIAwQAZ+MOAwQCZ+PcAwQBZ+RQAwQCZ+Wk
AwQAZ+ZTAwQAZ+erAwQBZ+fGAwQBZ/LQAwQBZ/NsAwQAZ/WxAwQAZ/ZMAwQAZ/aB
AwQBZ/cQAwQCZ/cgAwQBZ/d+AwQBZ/k6AwQAZ/nSAwQAZ/xVAwQAZ/4zAwQCblxI
AwQDch5YAwQCdMG8AwQCdP5gAwQEdWcwAwQDd/yAAwQDeTIgAwQBfEKiAwQCtN7Y
AwQAygS5AwQAyiV4AwQByitYAwQEyjvAAwQAyjv/AwQEykHgAwQEynqgAwQFypZA
AwQAyp78AwQAyqvtAwQAywEZAwQAyxMEAwQBy08aAwQDy1MYAwQCy3c0AwQBy6G+
AwQCy6vYAwQBy9mGAwQBy99aAwQE0hdAMHYEAgACMHADBQAgAQ3GAwcAIAEN6AAC
AwcAIAEN8AJjAwcAIAEN8AJoAwcAIAEN8ALmAwcAIAEN8AQJAwcAIAEN8UcAAwcA
IAEN9ewAAwUAJAQEAAMFACQE4wADBQAkBPUAAwUAJAZUAAMFACQGawADBQAkB2uA
MA0GCSqGSIb3DQEBCwUAA4IBAQCQqZ95XMLaGtIxj2fMhdt5tCO41lCbjn6IogjP
Q86StyZ3meSNoW6qz4OwjVyDw60A1yMLTZDB9JZWj4Hhkdnzg1VvpVHNYGh1bjop
h+W5TFGntFG6guoFlbPNbyPThUj6K6Z043jUCEeIaXTpimHktuAMsRr66c2+mKlk
MJsOQU2nZIOmMjMI1Ns5R4dfYh14896AxSCE8dHxLABvKNAfP9IE+iFxEo9rzndV
1NYptQoPAPHuhaBR7alUd7M7wwBr+kOInvWxkkYvXoEtzuRjBtd6WUpTTRuBPgZR
7wUlGt3bcrwC1af2D2oKdROd1WOqAmdAzBvjQF7kYlFzo51V
-----END CERTIFICATE-----
Generated at Wed May 13 02:20:26 2026 by rpki-client