
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer
File: 5675AA245CEF919DAFAE165474D97FEABD97EF27.cer (raw, json)
Hash identifier: pa4bO7GaATDpiKJjRoEWhwyJnE79xmsplu5yRsA9CTI=
Subject key identifier: 56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 57395F7A80547C7A006DE113782F21E6789A4B2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:00:46 +0000
Certificate not after: Sun 02 May 2027 02:05:46 +0000
Subordinate resources: IP: 103.18.232.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:39:5f:7a:80:54:7c:7a:00:6d:e1:13:78:2f:21:e6:78:9a:4b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:00:46 2026 GMT
Not After : May 2 02:05:46 2027 GMT
Subject: CN=5675AA245CEF919DAFAE165474D97FEABD97EF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:82:2f:d7:d1:3e:bc:d0:98:d0:cf:fc:a1:
7e:58:83:2c:ae:9e:7f:ec:84:36:20:e4:78:4f:c3:
9b:c1:75:a9:6a:60:88:8f:14:ec:2a:2b:f0:43:b6:
fd:59:42:44:e9:71:9d:74:06:45:77:06:5f:5d:b3:
d8:58:b3:a7:90:63:5f:c9:e5:98:8f:a5:b7:6a:71:
bb:fe:a8:50:46:ce:b0:da:45:6a:0b:c1:e5:2a:47:
b4:12:d9:f1:84:5d:08:f0:e7:2f:b9:eb:b4:87:8a:
14:b3:63:3b:18:8c:72:31:6e:70:06:92:84:86:46:
d0:06:b1:1a:b7:ef:8e:53:16:a0:f5:f8:ac:bc:60:
fd:77:ba:db:43:17:c4:d1:ce:18:57:57:5c:e1:50:
35:21:b9:69:dc:31:15:b4:d5:1b:24:c8:4e:db:9f:
9b:31:de:7d:4f:59:7b:99:69:d6:8e:d9:04:80:6b:
bb:df:ef:c3:76:1c:13:57:5d:93:52:a6:f2:54:6e:
64:81:4a:26:17:d7:bd:c3:32:78:1f:dd:2b:92:8a:
a5:63:36:e3:0d:56:1c:b4:d5:d5:32:2e:96:f3:06:
02:86:26:52:e9:24:c8:c1:43:19:23:ba:a1:59:8e:
71:23:e8:54:64:b2:39:5a:70:5d:a1:2d:18:64:9c:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.232.0/23
Signature Algorithm: sha256WithRSAEncryption
79:3e:10:25:a0:db:8f:82:c6:d9:c2:72:03:f4:22:81:2a:74:
eb:94:76:16:30:ef:03:f0:c2:0f:98:21:fc:f0:b8:2d:ff:ac:
6f:f9:c2:dc:77:40:57:06:4d:43:a0:47:fb:4f:40:7b:15:81:
1a:d4:7f:d4:22:3a:8f:e5:92:2d:a8:d4:df:c3:7d:0b:5a:97:
46:34:e1:07:2d:0d:2a:55:ce:41:04:0c:dc:48:d6:30:bf:37:
a7:e0:30:69:b9:05:df:92:2a:74:6a:16:0b:b7:b8:fa:90:d9:
df:41:23:eb:bf:88:0c:c1:b0:9b:d4:fc:63:4f:c3:e6:3b:ab:
cf:4a:a3:8b:01:da:fd:0a:8a:cb:26:fb:8f:2b:a7:21:ac:6e:
69:ba:7b:79:87:d5:29:b2:64:1e:d4:3b:9a:8e:20:25:62:b6:
90:05:7a:22:4d:9c:3c:58:d5:b6:07:17:18:7b:a4:13:4b:fd:
a1:08:d7:e1:cb:26:66:fa:4e:db:80:59:50:d9:d4:01:f4:d5:
d1:b9:48:42:60:be:14:30:b2:07:20:65:a2:9a:25:7f:3c:b2:
84:99:92:92:97:52:67:25:4d:fd:e8:1e:dd:5d:81:71:38:7b:
ab:ad:20:1a:a1:8b:b9:f3:49:b8:54:55:aa:65:ff:44:2d:73:
ed:6f:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:01 2026 by rpki-client