Certificate
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5CB4B0C07702B8252693A6958EABDFD306B34D72.cer
File: 5CB4B0C07702B8252693A6958EABDFD306B34D72.cer (raw, json)
Hash identifier: OR0FH019yjLFp0pVK5Cy/QbcCaucu1lOceO3dVsmCTM=
Subject key identifier: 5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 1B3850456F9A922EAE526DE08FE22B208FBA5A3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:56:16 +0000
Certificate not after: Sun 02 May 2027 01:01:16 +0000
Subordinate resources: IP: 27.124.80.0 -- 27.124.82.255
IP: 27.124.84.0 -- 27.124.95.255
IP: 43.240.224.0/23
IP: 103.3.76.0/22
IP: 103.18.34.0/23
IP: 103.25.109.0 -- 103.25.111.255
IP: 103.26.4.0/22
IP: 103.42.40.0/22
IP: 103.47.228.0/23
IP: 103.55.220.0/22
IP: 103.101.22.0/23
IP: 103.121.238.0/23
IP: 103.206.240.0/22
IP: 103.210.230.0/23
IP: 103.215.178.0/23
IP: 103.248.219.0/24
IP: 103.253.86.0/23
IP: 119.47.91.0/24
IP: 119.252.160.0/20
IP: 121.100.16.0/21
IP: 124.158.160.0/20
IP: 157.119.56.0/22
IP: 163.53.184.0/22
IP: 182.48.160.0/19
IP: 202.57.17.0 -- 202.57.18.255
IP: 202.57.22.0/23
IP: 202.62.8.0/22
IP: 202.146.48.0/20
IP: 202.162.208.0/20
IP: 203.89.146.0/23
IP: 220.247.168.0/21
IP: 2400:4a00::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:38:50:45:6f:9a:92:2e:ae:52:6d:e0:8f:e2:2b:20:8f:ba:5a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:56:16 2026 GMT
Not After : May 2 01:01:16 2027 GMT
Subject: CN=5CB4B0C07702B8252693A6958EABDFD306B34D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:e6:9b:32:34:60:7c:dd:ed:a7:ca:d6:d3:
e3:a9:29:f3:f1:b3:c1:b4:3c:c4:e3:9d:d5:72:6c:
5f:af:52:13:57:2c:bf:db:ea:90:08:08:6a:4a:03:
b6:00:bf:c7:0a:69:6b:64:7c:16:54:5f:16:5b:98:
1a:a7:7a:10:8f:91:b7:f8:44:9b:c1:4c:af:c3:c7:
54:9e:7d:08:05:b8:3b:f5:bf:a9:32:a7:e3:20:45:
53:e1:cc:89:17:76:a7:15:4c:59:ee:85:cf:ae:ff:
ad:d7:14:1b:2b:53:95:45:5c:d9:7f:a2:19:74:7c:
93:3a:3f:19:89:55:fe:e8:ae:0e:ad:49:8f:08:c0:
ad:c0:e7:64:7c:3d:2c:f2:b6:23:2c:62:cb:7b:96:
55:46:b9:b1:8c:c1:63:b6:a5:1b:d1:33:c0:84:d4:
52:b0:b9:16:1e:99:7d:29:6e:e7:09:c9:37:de:c7:
4c:60:af:21:84:93:42:e9:e9:ca:6d:ff:8b:d1:02:
94:a9:04:9a:1a:46:46:6a:96:62:c0:35:23:cb:28:
48:4b:27:79:07:b6:b2:c1:35:1b:bd:98:1a:f6:8c:
43:d9:55:94:8d:97:70:44:60:f0:f4:91:49:69:d6:
ad:ef:e8:59:aa:e9:be:9d:da:1b:26:08:ba:44:a1:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5C:B4:B0:C0:77:02:B8:25:26:93:A6:95:8E:AB:DF:D3:06:B3:4D:72
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/5CB4B0C07702B8252693A6958EABDFD306B34D72.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.80.0-27.124.82.255
27.124.84.0-27.124.95.255
43.240.224.0/23
103.3.76.0/22
103.18.34.0/23
103.25.109.0-103.25.111.255
103.26.4.0/22
103.42.40.0/22
103.47.228.0/23
103.55.220.0/22
103.101.22.0/23
103.121.238.0/23
103.206.240.0/22
103.210.230.0/23
103.215.178.0/23
103.248.219.0/24
103.253.86.0/23
119.47.91.0/24
119.252.160.0/20
121.100.16.0/21
124.158.160.0/20
157.119.56.0/22
163.53.184.0/22
182.48.160.0/19
202.57.17.0-202.57.18.255
202.57.22.0/23
202.62.8.0/22
202.146.48.0/20
202.162.208.0/20
203.89.146.0/23
220.247.168.0/21
IPv6:
2400:4a00::/32
Signature Algorithm: sha256WithRSAEncryption
06:5b:d5:e7:e8:8f:7c:5c:06:f6:ed:54:90:6a:c8:07:11:ab:
0e:94:93:43:b8:c6:eb:2c:46:9c:2f:94:9d:56:f5:d8:d3:2b:
d7:88:b8:e6:94:a8:1d:e3:f8:f9:c1:e3:b5:f3:35:fa:71:0d:
74:bf:0d:b6:ae:ed:cd:bf:82:9d:2a:18:a4:7d:1c:4b:fc:f1:
28:03:39:bb:51:3e:88:cd:52:b9:54:e9:42:40:88:13:07:71:
15:d9:2c:17:3c:b0:ba:77:c0:4f:3b:4b:14:e1:9b:21:a0:fd:
99:17:a2:f7:4a:ef:88:5b:a2:c6:1a:ee:d4:10:19:73:a6:9e:
80:c3:46:d8:eb:9e:59:5b:45:d7:ce:0b:60:f6:c1:f8:5e:4d:
68:db:2d:ad:55:a3:41:9e:6e:e0:eb:f5:1c:f1:20:e0:f3:56:
9c:3b:cc:9b:58:da:11:19:17:3b:1c:87:d7:dc:e1:96:fd:1b:
bf:76:18:d0:71:52:3a:ab:f4:39:50:01:c1:21:ce:95:29:66:
74:b1:ea:50:92:0e:89:06:a5:9b:e2:fd:37:95:6c:c1:49:88:
c4:ff:21:0d:29:67:53:53:2e:54:06:48:66:22:a8:74:ab:7b:
82:80:29:af:f1:b0:b9:ad:34:6f:3f:c5:3b:fe:af:e8:ca:9f:
c9:ae:58:04
-----BEGIN CERTIFICATE-----
MIIGrzCCBZegAwIBAgIUGzhQRW+aki6uUm3gj+IrII+6Wj8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTYxNloX
DTI3MDUwMjAxMDExNlowMzExMC8GA1UEAxMoNUNCNEIwQzA3NzAyQjgyNTI2OTNB
Njk1OEVBQkRGRDMwNkIzNEQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALyS5psyNGB83e2nytbT46kp8/GzwbQ8xOOd1XJsX69SE1csv9vqkAgIakoD
tgC/xwppa2R8FlRfFluYGqd6EI+Rt/hEm8FMr8PHVJ59CAW4O/W/qTKn4yBFU+HM
iRd2pxVMWe6Fz67/rdcUGytTlUVc2X+iGXR8kzo/GYlV/uiuDq1JjwjArcDnZHw9
LPK2Iyxiy3uWVUa5sYzBY7alG9EzwITUUrC5Fh6ZfSlu5wnJN97HTGCvIYSTQunp
ym3/i9EClKkEmhpGRmqWYsA1I8soSEsneQe2ssE1G72YGvaMQ9lVlI2XcERg8PSR
SWnWre/oWarpvp3aGyYIukSh1zUCAwEAAaOCA6IwggOeMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFy0sMB3ArglJpOmlY6r39MGs01yMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzczYmRjYmFlLTJlOWQtNGYzZi04YWI5LTM0MjRlNDQ4NDg0ZS8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83M2JkY2Jh
ZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC81Q0I0QjBDMDc3MDJCODI1
MjY5M0E2OTU4RUFCREZEMzA2QjM0RDcyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBBgYIKwYBBQUHAQcBAf8EgfYwgfMwgeEE
AgABMIHaMAwDBAQbfFADBAAbfFIwDAMEAht8VAMEBRt8QAMEASvw4AMEAmcDTAME
AWcSIjAMAwQAZxltAwQEZxlgAwQCZxoEAwQCZyooAwQBZy/kAwQCZzfcAwQBZ2UW
AwQBZ3nuAwQCZ87wAwQBZ9LmAwQBZ9eyAwQAZ/jbAwQBZ/1WAwQAdy9bAwQEd/yg
AwQDeWQQAwQEfJ6gAwQCnXc4AwQCozW4AwQFtjCgMAwDBADKOREDBADKORIDBAHK
ORYDBALKPggDBATKkjADBATKotADBAHLWZIDBAPc96gwDQQCAAIwBwMFACQASgAw
DQYJKoZIhvcNAQELBQADggEBAAZb1efoj3xcBvbtVJBqyAcRqw6Uk0O4xussRpwv
lJ1W9djTK9eIuOaUqB3j+PnB47XzNfpxDXS/Dbau7c2/gp0qGKR9HEv88SgDObtR
PojNUrlU6UJAiBMHcRXZLBc8sLp3wE87SxThmyGg/ZkXovdK74hbosYa7tQQGXOm
noDDRtjrnllbRdfOC2D2wfheTWjbLa1Vo0GebuDr9RzxIODzVpw7zJtY2hEZFzsc
h9fc4Zb9G792GNBxUjqr9DlQAcEhzpUpZnSx6lCSDokGpZvi/TeVbMFJiMT/IQ0p
Z1NTLlQGSGYiqHSre4KAKa/xsLmtNG8/xTv+r+jKn8muWAQ=
-----END CERTIFICATE-----
Generated at Tue May 12 22:03:35 2026 by rpki-client