
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
File: 62201E20A182AFCB9985132733F2FBD1BB09C210.cer (raw, json)
Hash identifier: /lRqs69dd2OhHzz4d6rQ6hG23v9lsmXc8oCABBsw+hY=
Subject key identifier: 62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6B088E7FA1D8826AD26D29451929EF8BEF76EB19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:44:48 +0000
Certificate not after: Sun 02 May 2027 01:49:48 +0000
Subordinate resources: IP: 103.82.246.0/24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:08:8e:7f:a1:d8:82:6a:d2:6d:29:45:19:29:ef:8b:ef:76:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:44:48 2026 GMT
Not After : May 2 01:49:48 2027 GMT
Subject: CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:5c:69:1d:31:48:5d:17:d8:ee:83:d3:1d:
c8:29:b3:87:66:04:03:82:1d:13:7a:fc:3b:5b:79:
6a:65:b5:c9:33:48:26:61:f8:da:de:4d:c3:1e:e6:
00:b3:bb:e2:c8:72:e0:42:d4:c9:37:29:bf:07:d4:
47:1e:db:c8:4a:7e:32:8c:ca:0b:d9:54:98:db:9c:
92:df:27:83:a9:99:cc:28:d1:84:c9:1c:a5:7c:f4:
b9:e3:fe:7b:d6:4e:b4:c5:c9:b2:b8:f9:2e:85:96:
eb:d2:d4:d9:3f:d0:98:2f:e2:92:92:7d:b3:29:e4:
15:f7:0c:c1:28:d9:18:cd:37:08:26:0f:4f:8e:3a:
50:1d:f7:37:ce:a8:a0:42:6b:2d:1d:bc:95:c6:84:
93:e3:4f:28:3a:df:ec:82:25:06:24:44:c9:e8:91:
7a:8a:a5:e0:05:87:b3:5e:8c:ad:70:a3:be:18:85:
63:f2:c6:2f:85:6d:31:24:0e:0e:62:2c:c5:28:39:
65:f2:4e:2c:bd:43:14:02:a4:5d:93:66:b4:26:02:
4d:29:82:b8:3d:9c:14:1d:5b:c7:26:bb:fa:e6:01:
5a:ed:03:23:a8:bc:b7:f4:31:ef:53:bf:74:8e:be:
8c:13:85:6e:d5:6e:6d:26:84:a7:61:71:84:9e:70:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:26:0d:7f:ce:28:16:8e:dc:63:e6:2c:d0:e8:da:92:87:f3:
e5:ac:cd:65:e4:8e:01:a9:11:3a:2f:94:ab:e4:a5:2f:89:8d:
2f:df:9d:fe:d7:bb:bd:11:04:0b:53:1f:51:e0:a4:42:e2:54:
79:06:6b:b1:73:6c:09:ae:00:4a:31:a8:ac:35:b8:ba:3e:34:
d6:47:74:4e:c9:6d:78:14:6c:bb:c5:5e:6f:6d:b7:cb:aa:d7:
04:5d:a1:ec:67:6e:24:56:b9:b6:1d:14:20:7a:f4:57:29:af:
c6:10:64:c8:fc:f6:93:11:b2:d6:b4:b7:a1:58:db:da:10:9f:
94:02:b9:17:89:bc:0e:44:83:d3:66:32:1b:85:5a:75:00:c9:
55:9c:65:c7:d2:75:b7:1a:8f:37:e1:bc:9f:0d:b9:94:6f:b7:
20:90:86:97:ed:f0:f8:76:51:9f:23:da:5b:fb:f4:d8:99:60:
21:fe:ba:04:e9:2e:cc:54:92:9f:ba:48:66:c5:97:62:6a:d0:
c9:92:fd:7c:af:10:4e:ea:31:63:b1:5c:5f:cc:ec:48:39:33:
5c:ee:81:0b:4f:62:71:55:42:d5:b1:0e:b0:42:4c:6d:0e:d5:
ac:6c:b6:b8:ff:bf:79:98:42:e0:30:7c:c4:98:8f:66:42:51:
04:fa:34:68
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUawiOf6HYgmrSbSlFGSnvi+926xkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDQ0OFoX
DTI3MDUwMjAxNDk0OFowMzExMC8GA1UEAxMoNjIyMDFFMjBBMTgyQUZDQjk5ODUx
MzI3MzNGMkZCRDFCQjA5QzIxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJaVXGkdMUhdF9jug9MdyCmzh2YEA4IdE3r8O1t5amW1yTNIJmH42t5Nwx7m
ALO74shy4ELUyTcpvwfURx7byEp+MozKC9lUmNuckt8ng6mZzCjRhMkcpXz0ueP+
e9ZOtMXJsrj5LoWW69LU2T/QmC/ikpJ9synkFfcMwSjZGM03CCYPT446UB33N86o
oEJrLR28lcaEk+NPKDrf7IIlBiREyeiReoql4AWHs16MrXCjvhiFY/LGL4VtMSQO
DmIsxSg5ZfJOLL1DFAKkXZNmtCYCTSmCuD2cFB1bxya7+uYBWu0DI6i8t/Qx71O/
dI6+jBOFbtVubSaEp2FxhJ5w3YkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGIgHiChgq/LmYUTJzPy+9G7CcIQMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2JjZTBmZTVhLWU0NjgtNDlkOS05MzFiLWFiNGI5MjRhNDVjMi8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iY2UwZmU1
YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC82MjIwMUUyMEExODJBRkNC
OTk4NTEzMjczM0YyRkJEMUJCMDlDMjEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ1L2MA0GCSqGSIb3DQEBCwUAA4IBAQBOJg1/zigWjtxj5izQ6NqSh/PlrM1l
5I4BqRE6L5Sr5KUviY0v353+17u9EQQLUx9R4KRC4lR5Bmuxc2wJrgBKMaisNbi6
PjTWR3ROyW14FGy7xV5vbbfLqtcEXaHsZ24kVrm2HRQgevRXKa/GEGTI/PaTEbLW
tLehWNvaEJ+UArkXibwORIPTZjIbhVp1AMlVnGXH0nW3Go834byfDbmUb7cgkIaX
7fD4dlGfI9pb+/TYmWAh/roE6S7MVJKfukhmxZdiatDJkv18rxBO6jFjsVxfzOxI
OTNc7oELT2JxVULVsQ6wQkxtDtWsbLa4/795mELgMHzEmI9mQlEE+jRo
-----END CERTIFICATE-----
Generated at Tue May 12 22:15:49 2026 by rpki-client