
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer
File: 2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.cer (raw, json)
Hash identifier: 2zCRyhVe/+dbjVRPCQ/4Ua6PD6c8Ubp30fo7whoflxg=
Subject key identifier: 27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 1FE6CD63B8A8641A244AA6CA9FE157CDC7238218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:10:25 +0000
Certificate not after: Sun 02 May 2027 00:15:25 +0000
Subordinate resources: IP: 103.156.234.0/24
IP: 2001:df5:80::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e6:cd:63:b8:a8:64:1a:24:4a:a6:ca:9f:e1:57:cd:c7:23:82:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:10:25 2026 GMT
Not After : May 2 00:15:25 2027 GMT
Subject: CN=2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:24:82:7a:69:65:62:3a:a3:46:1d:65:a1:
56:12:c3:3f:a8:3e:9e:99:b6:eb:02:5f:0a:2f:79:
9c:ad:0a:02:89:69:4e:d9:c8:0a:9e:35:86:35:25:
94:19:06:f1:13:62:de:83:56:5e:69:50:0a:7a:f2:
13:a3:11:7e:bd:89:0e:bc:97:f1:64:9a:11:f0:48:
e4:1b:0a:26:08:a7:b3:9a:fb:a0:2b:22:8f:f2:be:
e1:be:9a:12:14:eb:75:cc:68:b8:c8:0c:0c:f1:c3:
82:b8:f3:3d:80:8a:ab:c0:14:82:d7:d1:21:ca:fc:
37:8a:9e:ea:c6:78:99:ac:bd:e6:7b:db:6a:04:ee:
5b:d0:52:d7:6f:c7:bd:1b:1c:e4:7f:3e:26:3e:9c:
c9:58:e9:3d:1b:2d:bf:b6:f8:dd:38:70:60:1b:66:
ab:46:09:6e:b7:94:b5:a1:63:96:1d:87:20:4c:ef:
a9:99:ca:ce:cd:55:9f:6d:ac:c0:08:fb:71:6e:e1:
05:38:21:6c:17:09:f2:ff:e8:7b:2a:98:f2:32:c1:
33:37:b9:9b:b1:8e:b2:05:62:5c:62:16:b0:49:92:
80:04:fb:e3:dd:ee:f0:15:e7:42:a0:29:91:7f:61:
be:ba:27:ba:db:eb:60:ac:51:66:79:83:36:0a:9c:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
27:69:DC:A3:F8:9F:0B:44:81:12:7F:F4:E7:DB:34:D7:95:7B:9B:9A
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/2769DCA3F89F0B4481127FF4E7DB34D7957B9B9A.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.234.0/24
IPv6:
2001:df5:80::/48
Signature Algorithm: sha256WithRSAEncryption
46:18:a5:2c:c8:20:eb:d2:ba:ec:fb:3a:d0:16:b0:61:a3:d9:
7e:da:75:29:56:72:69:91:6a:9f:24:fa:b7:0c:3c:84:c4:51:
42:ef:da:4a:7a:1c:87:47:7e:ce:8d:7d:67:a9:e5:8a:f4:84:
35:57:2d:ea:71:68:7c:28:ca:42:1e:f8:dc:43:e7:2a:95:b1:
cf:b3:f5:56:17:24:7a:fe:64:d8:5d:b7:b6:a2:c9:96:bc:12:
a6:60:ec:26:74:3e:e6:8d:7f:51:a4:c1:8a:8f:20:00:d4:9d:
f4:f9:eb:93:ef:68:4b:90:4c:f5:a9:8e:03:c5:c0:a4:c3:ec:
68:7c:fe:d5:c6:2e:7f:a4:b9:b8:a0:ba:32:03:77:b7:b6:97:
d1:a0:73:9b:ae:32:0b:a2:44:2c:cb:2a:50:d2:d7:ce:eb:f6:
63:39:19:aa:90:4f:d6:73:74:5e:39:fc:ea:cb:51:d5:1b:e6:
ed:5f:8b:a9:9a:a7:24:03:55:c7:bd:37:14:cc:8e:c4:ed:f5:
c3:df:39:03:6a:16:4c:fb:c2:03:61:33:67:2c:92:ef:2c:da:
3c:5e:1b:04:87:88:96:ec:c0:82:01:e9:0a:eb:ca:17:6f:0d:
b7:7d:e5:0c:cc:57:87:5b:e3:f2:37:af:f8:a9:c9:bb:55:cc:
a7:99:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:03 2026 by rpki-client