
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4FE0444622A2C111B372D11A38DAFE7648673D36.cer
File: 4FE0444622A2C111B372D11A38DAFE7648673D36.cer (raw, json)
Hash identifier: vp2lA/MT79AnnLyUtg1fncR85Apg7F+UZDbMcD91ym4=
Subject key identifier: 4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 23F0CB6D7169A26E20593EE76A4F0C24292B0542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:11:51 +0000
Certificate not after: Sun 02 May 2027 02:16:51 +0000
Subordinate resources: IP: 103.210.116.0/22
IP: 2404:6b80::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f0:cb:6d:71:69:a2:6e:20:59:3e:e7:6a:4f:0c:24:29:2b:05:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:11:51 2026 GMT
Not After : May 2 02:16:51 2027 GMT
Subject: CN=4FE0444622A2C111B372D11A38DAFE7648673D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:f6:d8:7d:db:54:1f:72:5d:3c:80:3c:3e:
04:0c:55:cd:07:d4:0a:be:85:79:d0:fe:6a:81:73:
2c:a7:e6:99:7a:55:4c:8e:d8:22:0d:65:a1:40:1d:
23:73:2b:e8:d1:42:18:77:d6:ce:6a:74:ad:b1:b4:
93:d5:4c:86:4d:42:a6:ad:5c:6f:7e:1b:66:aa:c2:
39:cf:51:73:99:f7:21:c4:a4:8d:4f:17:55:c1:80:
ea:3f:2d:7f:d5:eb:c1:e2:f6:53:cf:a9:52:e1:c1:
ad:65:7c:22:ee:9c:4b:02:70:bc:95:82:fb:06:49:
c8:58:d1:bc:41:e5:e1:a3:78:54:e7:9c:3a:72:52:
af:ce:94:fb:bf:5d:c0:0b:13:2a:20:c7:2e:b7:04:
79:34:b6:b7:32:58:20:73:a1:54:b2:70:cb:11:8a:
84:0a:f7:74:33:05:ec:58:70:fb:4b:84:2a:49:c4:
00:82:b5:ce:3e:a8:8b:79:4d:f4:4f:14:29:6e:4b:
19:df:8d:cf:12:ab:69:14:79:fa:12:1e:05:76:a7:
c5:56:47:17:ca:e1:e6:2c:f8:ed:af:d7:1e:59:5f:
cd:b9:94:75:a8:2b:dd:79:b1:80:e4:0c:6c:c1:6d:
2e:7d:5f:f3:ef:c4:00:1f:74:71:8d:0b:2c:f8:7d:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4F:E0:44:46:22:A2:C1:11:B3:72:D1:1A:38:DA:FE:76:48:67:3D:36
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/4FE0444622A2C111B372D11A38DAFE7648673D36.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.116.0/22
IPv6:
2404:6b80::/32
Signature Algorithm: sha256WithRSAEncryption
99:39:e5:d6:02:83:57:47:3e:d3:9a:03:09:ca:4d:a9:7a:2c:
bb:f3:48:43:60:25:c6:a5:f2:01:b8:5f:93:d5:24:ff:c2:18:
d3:38:fe:20:8c:e8:df:26:b8:e7:4a:df:0c:41:a1:b0:be:2a:
8e:38:85:82:44:61:14:13:bc:e1:32:b3:e9:e5:7a:7b:3d:17:
1f:4d:60:33:96:7e:60:b8:b9:ca:ac:68:6f:01:2f:63:2e:97:
4a:df:ad:20:9f:36:ce:f6:c6:a9:6c:1b:f9:be:f7:df:04:23:
04:3c:37:5a:f2:9c:c9:86:10:b6:52:9c:5c:98:0d:e7:67:d1:
90:26:00:5f:9d:db:6c:aa:65:1f:84:ff:2d:ce:f0:82:31:75:
a4:fc:70:67:d8:7c:59:5c:2d:e3:af:ff:54:32:4a:0b:e7:ba:
eb:c2:2a:a2:48:6a:42:95:3e:77:11:2f:51:e4:16:eb:35:37:
ca:28:a2:ea:ac:5c:06:a2:5a:9c:f7:72:94:f0:ba:3b:5d:bc:
34:ba:b7:03:87:7e:0f:a1:93:e3:2e:25:a4:b0:d5:09:47:b8:
81:9e:f8:b8:d2:16:67:f0:67:cc:00:21:97:dd:05:76:c3:05:
eb:13:69:2c:e0:a4:87:57:37:71:b2:03:a4:ed:6f:b1:5e:4a:
87:64:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:52:30 2026 by rpki-client