
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
File: 46932859C0D86F27F517A125185AE45763AEA7D7.cer (raw, json)
Hash identifier: WgtIjExhTQ1PhEvPkKTRD21zLuxoqF12HRcDRbwLf5U=
Subject key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0E8B0CC5D3DD9917FA6635D511E101D3999B7DAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:31:23 +0000
Certificate not after: Sun 02 May 2027 00:36:23 +0000
Subordinate resources: IP: 103.132.230.0/23
IP: 2001:df7:8b00::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8b:0c:c5:d3:dd:99:17:fa:66:35:d5:11:e1:01:d3:99:9b:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:31:23 2026 GMT
Not After : May 2 00:36:23 2027 GMT
Subject: CN=46932859C0D86F27F517A125185AE45763AEA7D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:56:23:4c:01:90:c8:1f:b9:6c:ec:a9:2d:
3d:bb:09:dc:7e:93:a3:d3:d1:c3:aa:6f:09:67:a7:
19:60:a0:ec:ae:71:4f:51:95:2e:15:18:5b:47:5a:
cf:9f:b8:bf:a5:ec:1d:11:6b:6f:78:db:df:7e:93:
d5:aa:8c:07:eb:bd:1d:3a:7e:71:53:b0:b9:9e:fb:
3b:73:f9:d6:c8:87:3c:54:e7:d2:18:23:1b:ff:10:
d3:03:12:cf:40:29:97:c0:d6:d7:ca:f0:85:d2:6c:
3b:7a:a2:3f:56:4f:90:c4:e6:ef:f9:c9:7d:64:4a:
a3:31:d4:c9:f5:c7:a0:5e:fd:88:bd:0b:f5:62:e2:
2a:91:ee:e4:31:25:ad:55:47:78:84:d8:5f:e6:00:
d9:0d:c4:c1:ef:a9:fe:a1:81:9b:f6:5b:bd:68:4c:
b4:dd:42:30:07:03:26:e4:f0:8a:d0:89:9c:27:37:
1c:b4:ab:09:08:7d:c3:ce:b6:2d:e4:51:ac:37:9e:
c5:48:32:ab:d3:2d:71:af:5f:a3:a9:60:ed:7b:6e:
be:f6:61:ae:9b:37:61:2b:95:5f:07:2a:cc:ce:ce:
ce:91:b9:ce:8b:04:d2:6c:f1:1c:64:19:bf:fe:b9:
3e:90:37:1a:1c:7c:63:a4:ad:a9:3c:c2:fb:1a:0d:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.230.0/23
IPv6:
2001:df7:8b00::/48
Signature Algorithm: sha256WithRSAEncryption
66:a8:f5:70:db:da:f3:b9:d6:db:3f:ac:14:93:3a:6c:a5:60:
6c:d9:7a:82:25:99:64:ce:d9:57:14:25:bd:a1:ec:7a:0b:66:
8e:88:a0:90:e9:d4:c7:d9:09:e4:9c:a8:46:93:de:bb:38:97:
e1:8b:e1:bb:8c:c4:10:fd:e9:f9:53:a3:b0:d4:0d:bd:bb:45:
2e:77:67:b0:27:cf:60:28:44:77:2f:9e:b6:0b:7b:80:57:24:
ba:d2:89:d6:f7:ac:b9:76:d0:91:c7:ad:d1:50:4e:c9:1c:a9:
e3:1f:4d:3f:2e:4f:01:f5:51:ef:d6:9f:1f:18:65:91:d8:12:
b9:b9:56:47:fd:3e:df:1f:db:dd:7a:1c:d5:b2:1e:a0:8d:eb:
9a:98:6f:c7:6a:8b:61:40:d1:d0:c2:be:78:0c:77:8b:14:a4:
ec:da:d3:78:a4:13:b7:3d:3c:f4:e8:4e:e7:45:42:f7:2b:9f:
07:1f:04:cd:82:8e:62:2b:3d:db:45:34:c1:98:6f:04:b8:2d:
8d:9d:d1:2f:89:a8:f4:ea:bf:da:4e:4c:94:44:62:85:67:ba:
f4:06:71:27:50:d7:0f:5a:3d:81:47:83:9a:1a:84:a7:07:9c:
d8:65:81:e3:40:42:86:43:1f:80:cb:9e:87:48:68:97:da:6d:
17:8d:6a:c1
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUDosMxdPdmRf6ZjXVEeEB05mbfa0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzEyM1oX
DTI3MDUwMjAwMzYyM1owMzExMC8GA1UEAxMoNDY5MzI4NTlDMEQ4NkYyN0Y1MTdB
MTI1MTg1QUU0NTc2M0FFQTdENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMISViNMAZDIH7ls7KktPbsJ3H6To9PRw6pvCWenGWCg7K5xT1GVLhUYW0da
z5+4v6XsHRFrb3jb336T1aqMB+u9HTp+cVOwuZ77O3P51siHPFTn0hgjG/8Q0wMS
z0Apl8DW18rwhdJsO3qiP1ZPkMTm7/nJfWRKozHUyfXHoF79iL0L9WLiKpHu5DEl
rVVHeITYX+YA2Q3Ewe+p/qGBm/ZbvWhMtN1CMAcDJuTwitCJnCc3HLSrCQh9w862
LeRRrDeexUgyq9Mtca9fo6lg7XtuvvZhrps3YSuVXwcqzM7OzpG5zosE0mzxHGQZ
v/65PpA3Ghx8Y6StqTzC+xoNomkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFEaTKFnA2G8n9RehJRha5FdjrqfXMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzRlZGM5ZTRmLTgxODAtNDFkNi1iMDhkLThlZTVhOGE3MGEwNS8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZWRjOWU0
Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC80NjkzMjg1OUMwRDg2RjI3
RjUxN0ExMjUxODVBRTQ1NzYzQUVBN0Q3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG
AwQBZ4TmMA8EAgACMAkDBwAgAQ33iwAwDQYJKoZIhvcNAQELBQADggEBAGao9XDb
2vO51ts/rBSTOmylYGzZeoIlmWTO2VcUJb2h7HoLZo6IoJDp1MfZCeScqEaT3rs4
l+GL4buMxBD96flTo7DUDb27RS53Z7Anz2AoRHcvnrYLe4BXJLrSidb3rLl20JHH
rdFQTskcqeMfTT8uTwH1Ue/Wnx8YZZHYErm5Vkf9Pt8f2916HNWyHqCN65qYb8dq
i2FA0dDCvngMd4sUpOza03ikE7c9PPToTudFQvcrnwcfBM2CjmIrPdtFNMGYbwS4
LY2d0S+JqPTqv9pOTJREYoVnuvQGcSdQ1w9aPYFHg5oahKcHnNhlgeNAQoZDH4DL
nodIaJfabReNasE=
-----END CERTIFICATE-----
Generated at Wed May 13 02:20:32 2026 by rpki-client