
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/278EA12737C7E8CB5F9EB4ED4968407DA57327BA.cer
File: 278EA12737C7E8CB5F9EB4ED4968407DA57327BA.cer (raw, json)
Hash identifier: CQi2JfDOc8pnsdiVH0DdKoA9CoxM3dLEfHB7YAMmwug=
Subject key identifier: 27:8E:A1:27:37:C7:E8:CB:5F:9E:B4:ED:49:68:40:7D:A5:73:27:BA
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 50F0688DD1CA6529C1F19295CFF39E3F43F0502C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/278EA12737C7E8CB5F9EB4ED4968407DA57327BA.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:06:30 +0000
Certificate not after: Sun 02 May 2027 01:11:30 +0000
Subordinate resources: IP: 103.75.237.0/24
IP: 2001:df5:6200::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f0:68:8d:d1:ca:65:29:c1:f1:92:95:cf:f3:9e:3f:43:f0:50:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:06:30 2026 GMT
Not After : May 2 01:11:30 2027 GMT
Subject: CN=278EA12737C7E8CB5F9EB4ED4968407DA57327BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:63:9d:24:66:8e:94:1d:60:3a:ea:bc:d2:
b7:7e:dc:96:48:a4:13:38:aa:76:2a:2d:c6:85:9c:
e9:00:78:30:36:94:08:a5:34:d5:9a:46:37:8f:c4:
22:7e:06:be:7d:68:42:82:5d:69:a1:b7:13:9f:69:
25:63:6b:51:a4:5b:55:b8:3c:2a:01:dc:a0:c8:01:
9c:d5:ac:76:16:26:cf:0e:6f:71:7e:1d:6e:7a:f5:
93:37:89:6f:52:ec:4f:b1:62:47:e2:3e:f9:2d:1d:
0a:68:02:3a:5f:c4:65:51:a2:dd:05:68:76:b0:25:
60:78:e9:2d:58:14:fc:dd:3e:15:66:ac:20:0e:e2:
cd:59:40:f9:b7:d7:e7:bd:38:90:92:7b:d0:44:19:
c9:94:72:83:12:9a:3f:6f:65:fe:58:c2:b0:d3:25:
ed:43:ed:7c:ed:5f:d0:ca:69:ad:5f:cc:8d:23:8d:
45:c4:c1:ff:30:f0:55:8a:55:db:4a:bb:30:31:30:
11:66:f5:ad:eb:b3:bd:cb:d9:d9:5e:23:fa:3e:b2:
fb:e2:ba:72:34:45:dd:ee:22:22:8e:71:7d:11:09:
c3:b5:f3:a1:41:5b:4a:15:09:70:70:cf:e2:e3:b0:
4c:2e:dc:fc:36:e7:98:c2:4c:93:c2:2c:cf:3a:a6:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
27:8E:A1:27:37:C7:E8:CB:5F:9E:B4:ED:49:68:40:7D:A5:73:27:BA
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/278EA12737C7E8CB5F9EB4ED4968407DA57327BA.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.237.0/24
IPv6:
2001:df5:6200::/48
Signature Algorithm: sha256WithRSAEncryption
73:85:bc:8b:06:1b:36:e1:81:dc:7c:a3:75:6d:17:7e:6d:80:
05:76:3c:21:9b:6c:07:69:c9:e3:79:6f:4e:d0:5a:21:2b:41:
36:e1:21:f9:cc:47:28:6d:d8:ee:49:0a:06:bc:d7:11:f0:0d:
fe:f3:d3:a1:43:86:1b:38:02:f6:bc:5c:86:72:ea:66:77:62:
f3:95:9c:bd:22:b3:26:42:09:77:3f:ee:e4:0f:79:d0:66:6e:
24:7d:3f:7b:d6:48:0f:81:f1:d4:74:a1:b1:4c:92:82:20:76:
24:b8:0f:48:dc:56:6c:b8:51:6f:03:ef:32:ef:51:6a:77:1e:
25:c1:34:e7:06:9f:1b:34:b4:1b:7f:2d:f9:33:80:db:e5:5d:
bb:7d:75:9e:94:13:95:c2:b5:55:1c:69:6f:5d:9c:a0:7b:ac:
80:32:ee:bc:06:96:72:e3:44:b7:ef:57:71:0f:53:af:2e:ff:
e3:48:de:8a:63:01:00:e0:dd:f6:fc:2b:0c:38:2f:8d:8c:f3:
40:79:46:e9:36:b1:33:f5:f3:4c:f1:16:21:25:d8:1b:97:dd:
e5:e3:19:a2:5f:87:00:57:8f:77:47:29:d9:8a:56:f6:3f:6d:
e7:3f:b0:6d:7c:80:a3:f7:00:64:48:1e:0c:bf:bf:86:4c:91:
6b:a0:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:25 2026 by rpki-client