
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
File: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer (raw, json)
Hash identifier: W/sGeJdgCUwuF+mD4G6fSMOIUlA78WzG8YkVzXHUhQk=
Subject key identifier: 63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 642067F493E2590D6BDCEA92EEBDCA2F5E798CB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:07:58 +0000
Certificate not after: Sun 02 May 2027 02:12:58 +0000
Subordinate resources: IP: 103.96.54.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:20:67:f4:93:e2:59:0d:6b:dc:ea:92:ee:bd:ca:2f:5e:79:8c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:07:58 2026 GMT
Not After : May 2 02:12:58 2027 GMT
Subject: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:c8:d6:9a:aa:46:c2:e4:df:fc:99:a2:a9:
a5:7a:f6:b0:71:a6:8b:cb:26:39:04:94:c1:18:c8:
90:06:fe:b4:29:8f:6c:01:6e:76:94:0f:22:1a:f6:
b5:56:4c:c6:b3:c4:e8:52:79:98:5b:d3:be:ae:e7:
b8:8b:1a:35:98:89:c2:3a:00:66:8f:5b:05:3a:1f:
0c:0a:e0:5c:48:34:d1:60:c1:de:a3:7e:92:e5:ce:
79:7c:6c:2a:6e:ec:dc:1c:a8:d7:76:68:32:d2:f4:
8a:84:c0:81:d2:d7:a3:7c:a2:4d:fb:26:f4:db:7e:
75:91:1b:32:81:fb:49:63:94:d2:36:31:d1:3a:a7:
ed:26:17:26:8e:a5:0c:b4:00:88:62:c0:b4:9c:bb:
7b:f3:a6:e6:86:b9:50:36:ed:3d:7b:47:a9:3b:08:
02:6e:18:12:b4:14:ed:b9:2b:0d:a1:1f:a8:42:c5:
a9:2b:b4:56:9b:ea:05:9e:3e:c8:32:21:e3:e0:f5:
6b:16:69:fe:a3:e0:37:2c:09:e0:a9:f0:33:77:49:
4e:5b:cf:3e:6d:7f:85:85:e1:e1:2e:8b:ac:90:60:
3e:82:b5:82:47:89:62:63:d5:22:a1:0e:16:0e:b0:
ad:32:a6:ec:02:1c:3e:77:10:69:b2:92:fa:12:3c:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.54.0/23
Signature Algorithm: sha256WithRSAEncryption
28:2e:7f:38:9d:3f:57:0b:c6:42:a4:72:1c:e7:99:45:61:08:
ac:ca:5f:0e:56:0d:ef:4a:8e:f4:66:e6:07:41:c8:73:f4:56:
98:4b:f1:dd:b5:23:66:dc:78:06:7b:07:58:be:eb:41:a9:d8:
3c:03:17:24:8f:7f:e8:c8:a0:e4:c0:41:31:be:9e:f5:13:2a:
95:9c:ee:ef:df:a8:8d:df:cc:7f:7d:60:4f:a2:d9:ec:15:24:
c7:61:55:b7:10:b0:c1:46:df:79:30:c4:0c:65:fb:dd:30:df:
44:46:0a:66:9c:c9:1f:8c:55:2c:57:f9:51:cc:5d:b7:4c:49:
ae:a5:c3:d9:1f:72:e7:0a:83:b4:5e:61:16:b5:0f:47:ed:24:
bd:30:e1:56:87:03:48:77:f7:44:ef:63:29:ae:a0:a0:17:af:
0c:d6:09:b4:b8:8c:62:cd:6a:16:53:3e:ad:c8:2e:cc:1a:58:
ab:d1:8a:d9:9e:1b:bc:b1:57:4c:2a:51:68:ea:75:01:3b:50:
cc:2b:32:23:55:91:5c:64:51:5c:8c:fa:51:cb:86:ad:b4:9c:
97:cc:dc:a6:8a:81:b1:b2:26:6e:01:21:38:e2:ac:57:ea:f9:
29:b7:fc:82:d6:ec:f7:55:ff:4b:9e:e7:2f:c0:99:7f:8e:e4:
15:d8:19:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:40 2026 by rpki-client