
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer
File: 50C47B6ED0A942A77EA7312A62C42E6BEDE03230.cer (raw, json)
Hash identifier: XXOm0X7G/x14gB5s7CBN/nri+206d6AmnmUqRdta+t8=
Subject key identifier: 50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 75EF8810F5EA0BEEC2EBEA1A46C4BB8F0EF47FD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sat 02 May 2026 23:51:30 +0000
Certificate not after: Sat 01 May 2027 23:56:30 +0000
Subordinate resources: IP: 202.55.160.0/20
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ef:88:10:f5:ea:0b:ee:c2:eb:ea:1a:46:c4:bb:8f:0e:f4:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 23:51:30 2026 GMT
Not After : May 1 23:56:30 2027 GMT
Subject: CN=50C47B6ED0A942A77EA7312A62C42E6BEDE03230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:bb:b5:8a:ee:78:74:ef:46:03:07:a4:c3:
46:06:56:0d:8d:d1:14:c6:e4:a3:d1:85:d9:b1:83:
de:c7:50:9c:0d:ca:83:1b:db:35:91:b0:15:1f:0f:
5a:43:c3:20:f1:72:6e:d2:ac:dd:dc:97:e5:99:6d:
a7:be:3f:04:dc:1f:51:f8:5a:a0:4b:2d:ec:11:96:
5b:57:23:ea:c3:68:21:b5:66:71:0d:02:e1:bc:4d:
4a:8c:a2:90:fd:49:07:62:1e:e2:ca:e0:28:49:50:
35:2c:9f:03:7f:12:08:9c:be:e6:ca:1a:c3:1a:b8:
15:77:a8:1d:22:31:19:7c:1f:58:a7:5a:05:5a:b8:
15:43:e7:20:76:2a:86:eb:02:88:69:db:ca:8b:b7:
7b:75:03:bf:14:6a:fb:d9:98:f3:f1:f0:80:23:22:
15:8a:71:7b:9a:85:54:0a:e3:94:43:73:52:cd:83:
d6:36:54:c7:1d:ed:e0:61:da:f8:d2:c0:ff:bc:b6:
40:3b:08:09:89:c7:fe:f0:23:2f:42:54:3b:a6:87:
63:e1:72:fd:38:6e:d7:b9:21:86:4a:16:6c:19:7b:
f4:26:22:ae:cf:76:63:1d:e7:1d:29:a8:96:57:67:
88:bb:52:7c:6e:29:0a:fc:94:c9:ee:2c:f8:47:a7:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
50:C4:7B:6E:D0:A9:42:A7:7E:A7:31:2A:62:C4:2E:6B:ED:E0:32:30
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/50C47B6ED0A942A77EA7312A62C42E6BEDE03230.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.55.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:3a:f5:46:0d:91:65:c2:18:82:05:4e:d1:e2:c9:29:3c:8a:
e4:c5:48:3d:10:2a:b4:a0:7e:d8:7e:e8:20:1f:6d:88:99:a5:
b1:96:b5:6c:fc:f9:e2:19:9a:fd:56:de:fe:2d:79:49:4a:25:
75:96:0e:87:b2:2a:8e:15:63:bc:1b:39:ea:fa:ca:15:21:35:
f4:e1:b4:47:c0:81:4a:19:b0:66:3a:5e:5b:bc:f4:95:fe:24:
32:ca:fc:8c:1c:82:1b:c7:0b:cb:4d:e4:1b:94:0a:7c:20:98:
42:62:5d:4b:14:e3:af:08:a3:cc:c6:ed:d1:20:c3:74:9d:44:
1c:3a:34:e3:8b:b7:06:de:ba:af:b8:2f:af:c0:c5:23:7e:2e:
4e:a7:f3:4a:50:29:33:c6:a7:ce:16:bd:c6:d9:e8:1b:3e:cc:
d0:11:87:b6:2b:d6:11:0c:a8:dc:2f:a3:ae:04:b3:60:c3:57:
25:6e:bb:11:80:bb:1e:df:a2:06:9c:5a:3b:a9:99:a2:d8:e7:
2d:eb:b7:ec:78:98:5a:94:e4:b8:ea:21:b8:07:9c:f6:7b:ab:
84:42:89:51:74:0b:eb:67:e4:05:aa:00:e1:a7:63:3b:42:16:
7f:43:fd:f8:4b:df:41:7a:0a:0a:3d:9a:d4:fe:88:02:f6:3d:
98:19:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:48 2026 by rpki-client