
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6D4C6C2565E05B8B2B1A06BC5793873D43870505.cer
File: 6D4C6C2565E05B8B2B1A06BC5793873D43870505.cer (raw, json)
Hash identifier: cDoFVkFseION/KZ2+wdWJtF1HfXVWpQMsrHn4VIvnv4=
Subject key identifier: 6D:4C:6C:25:65:E0:5B:8B:2B:1A:06:BC:57:93:87:3D:43:87:05:05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5E23764B2852B778E9C7AA68E359E5A79B6072FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/6D4C6C2565E05B8B2B1A06BC5793873D43870505.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:39:27 +0000
Certificate not after: Sun 02 May 2027 02:44:27 +0000
Subordinate resources: IP: 103.51.44.0/22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:23:76:4b:28:52:b7:78:e9:c7:aa:68:e3:59:e5:a7:9b:60:72:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:39:27 2026 GMT
Not After : May 2 02:44:27 2027 GMT
Subject: CN=6D4C6C2565E05B8B2B1A06BC5793873D43870505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:c5:89:b7:e9:b3:e1:bd:fb:84:10:19:ed:
c8:67:3e:19:3c:f8:ea:a2:e0:5c:0e:81:42:04:b7:
43:7c:f0:3f:96:a4:7e:5b:8d:74:8b:9f:f3:ee:dd:
f3:a3:35:65:61:30:4c:2b:41:2c:f9:b6:b6:b9:d5:
5b:ac:cc:14:e9:fd:50:2d:c5:11:7a:85:f8:66:c4:
8f:34:38:94:4e:04:5b:ac:e4:31:31:a3:71:65:89:
9d:ba:49:ae:76:fe:5a:de:22:af:36:ac:ad:19:2a:
8a:cb:2d:c1:33:e3:24:37:70:b5:a6:19:58:eb:2b:
e9:06:f0:6e:90:34:80:d0:f6:21:f9:ab:f5:d0:32:
e8:ca:ab:74:84:8b:b3:99:35:c7:68:7c:18:43:d6:
bc:f8:b9:b6:72:1f:05:b4:eb:7d:98:3a:c9:12:0c:
68:6d:bd:42:1a:fd:13:ee:04:27:cf:08:49:54:55:
13:db:7d:02:df:84:e8:83:80:84:cf:8b:b9:dd:b2:
a3:da:12:07:9b:cd:78:5b:04:09:89:a6:ba:ca:d0:
3b:6f:84:ee:83:c2:66:9a:ce:bc:a1:1b:28:99:4f:
ed:1b:81:8c:48:33:e8:dc:d1:d0:17:ba:1b:0e:30:
5c:7a:3d:22:e7:66:28:36:23:7a:cd:35:5b:31:db:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6D:4C:6C:25:65:E0:5B:8B:2B:1A:06:BC:57:93:87:3D:43:87:05:05
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/6D4C6C2565E05B8B2B1A06BC5793873D43870505.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:5f:6a:d6:b6:21:67:65:5f:57:1b:6a:3b:49:22:78:bb:64:
82:57:c9:bb:89:68:e4:c2:06:6d:00:41:2b:51:97:34:6d:bd:
48:df:29:69:cc:b1:ab:a5:f1:3f:54:14:c3:73:af:63:00:21:
fa:ac:b3:3a:bd:a6:92:7d:78:be:e6:5a:3f:ca:77:43:69:75:
2d:f7:69:73:08:7a:8c:39:14:5e:7e:e5:00:58:37:1c:e6:82:
b6:0d:f6:56:ab:9a:ed:41:50:e8:a3:7a:7d:58:15:49:d5:15:
67:03:40:aa:17:a8:68:b8:62:81:28:d8:5d:60:5d:6f:a3:b0:
ca:5b:cc:00:64:35:cc:1f:6d:72:46:10:4c:15:65:42:d3:2a:
6c:d6:7e:9d:2d:db:c5:1f:ca:00:eb:59:86:95:ba:2a:27:56:
a7:17:81:ec:07:e6:08:33:e6:85:3e:77:c4:2c:96:94:2b:d2:
20:80:57:89:6e:4e:88:ea:98:30:d1:4f:cf:b3:37:6e:cf:ca:
63:68:37:12:43:19:42:ca:93:55:f1:5e:86:0e:74:91:10:72:
4d:0f:b1:2f:fc:54:fa:51:c2:55:3f:5c:72:f4:a5:0b:2d:38:
91:9a:a7:72:bb:a4:3e:95:3c:1a:4a:9b:79:71:9b:ca:80:7d:
8e:88:f8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:25 2026 by rpki-client