
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
File: 66D0CBFDEF8E18BB796E18551F069110283A9877.cer (raw, json)
Hash identifier: QIDHfkcuRpUOXI4f+zy+M7zh2+6O9Gz3XepiiEIxZ4o=
Subject key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 11B1F09F45928027B2D61C506838D2B8166FEA73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:25:28 +0000
Certificate not after: Sun 02 May 2027 02:30:28 +0000
Subordinate resources: IP: 103.143.70.0/23
IP: 2405:4a40::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b1:f0:9f:45:92:80:27:b2:d6:1c:50:68:38:d2:b8:16:6f:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:25:28 2026 GMT
Not After : May 2 02:30:28 2027 GMT
Subject: CN=66D0CBFDEF8E18BB796E18551F069110283A9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:9a:36:cc:29:e2:98:31:dd:0c:31:42:a0:
28:6a:b1:1e:27:38:9f:c2:6f:86:eb:10:09:cd:2f:
fd:98:30:23:a0:36:d5:cd:f5:14:13:7c:55:f5:30:
60:11:d2:81:29:ca:70:9d:ca:35:67:2c:cf:63:2f:
06:8d:84:f9:d1:e2:4e:1b:45:78:99:32:9b:0e:1e:
5e:d1:9b:bd:04:65:d3:d0:44:1d:4a:04:5d:95:67:
ef:bf:26:4c:f1:b2:06:9d:ea:55:2e:b8:8b:61:76:
79:9d:55:5d:4b:47:2f:31:d0:ea:ad:22:42:d3:b6:
cc:9e:0a:47:0e:1b:3f:d8:4f:74:37:ba:55:59:c4:
99:ea:61:e3:c6:b2:60:3e:f9:71:38:65:d7:7e:fd:
07:05:2c:b7:8b:91:3d:5b:37:0d:5f:8f:cb:0f:d3:
d9:77:3e:22:d0:2c:5e:5f:7e:12:53:ed:24:84:e6:
22:16:33:ed:9f:b8:2b:8a:a9:8f:0e:60:18:22:85:
dd:2e:0e:ee:10:39:3a:a5:db:1f:a3:47:f3:ea:c5:
0f:68:3d:26:06:47:b0:46:d7:3f:f0:d7:f2:cd:8e:
d9:07:52:29:42:32:60:00:fb:e4:0d:60:20:f2:36:
e1:d1:fd:d0:7b:e8:8f:94:d8:c0:0d:28:1e:10:ad:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.70.0/23
IPv6:
2405:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
2b:f6:03:7e:57:89:72:af:41:9e:cf:d3:9c:12:e3:f3:7b:da:
96:03:6b:63:e1:05:e2:cf:2c:31:70:80:dc:93:6a:a7:98:05:
cb:3c:3a:d3:2d:f8:79:8a:6e:2e:bf:97:54:dd:56:ab:8c:c8:
6d:aa:55:be:9e:bf:ab:b5:03:64:b4:3a:f9:24:50:7a:da:28:
1d:3b:5a:24:fe:05:e8:fb:4d:15:2d:75:cb:21:8f:11:3e:91:
4f:46:e7:86:20:ca:71:a5:3a:a9:df:5b:2d:74:e3:be:ae:11:
c9:1d:16:cc:32:6a:08:07:c0:b9:fe:3c:6b:ad:d4:20:f6:5c:
c0:c8:ed:a4:63:c1:f4:58:e7:ad:db:da:e1:a5:33:ba:cb:d3:
f7:ae:1a:77:04:05:71:60:12:e0:c0:d4:0b:41:ae:55:41:65:
99:c9:ef:05:8d:7e:11:fa:ab:9c:61:46:63:ff:9e:5e:3f:b1:
db:3b:92:de:6f:d0:37:c4:55:08:32:54:3a:b1:b9:25:f5:75:
d0:f8:f3:c9:a0:4a:20:bf:50:0e:65:82:ad:32:01:6d:fb:6b:
6b:ec:fd:2b:1e:a9:a6:c6:5d:f1:df:ae:8d:58:b0:4e:ce:3f:
1b:24:6e:da:05:44:11:81:1d:31:28:b0:4b:6b:9a:c5:e1:4f:
8a:e4:1d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:28 2026 by rpki-client