
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer
File: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer (raw, json)
Hash identifier: zH13DavC2fY+kx4Bbyvy9/mXtNKPucnWP9+CzI7Gmtg=
Subject key identifier: 6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 29A5984AD4DE219C0E6487118137123ABD93B3DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:15:05 +0000
Certificate not after: Sun 02 May 2027 02:20:05 +0000
Subordinate resources: IP: 103.160.147.0/24
IP: 2001:df5:a680::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a5:98:4a:d4:de:21:9c:0e:64:87:11:81:37:12:3a:bd:93:b3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:15:05 2026 GMT
Not After : May 2 02:20:05 2027 GMT
Subject: CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:84:e9:e2:fd:bb:9c:20:f0:d5:67:93:54:
de:b7:cc:bf:fb:77:d1:ea:3e:a8:3c:28:1a:8e:80:
00:0a:9b:ae:a7:36:66:3e:40:fa:55:ce:37:a9:3d:
0c:00:b8:a3:75:fd:d9:dd:ac:01:b7:68:f5:d6:f1:
d8:a3:81:8c:da:6a:32:f4:44:c3:4c:d8:a3:12:7e:
b4:93:99:b8:a0:dc:01:c4:60:17:6d:0b:05:f1:76:
ef:ef:29:18:16:2a:de:85:71:4e:bf:e6:cd:6e:b7:
fd:d3:0b:8f:0f:8e:a4:65:b2:a3:6f:86:3c:dc:ef:
df:63:2c:60:56:8c:ad:75:e3:80:a1:3a:a1:ce:a3:
65:12:ea:d6:17:70:e7:51:38:ce:d1:e4:f4:80:25:
97:b4:ad:7f:3c:a6:b1:ed:48:b7:a7:da:4a:ec:63:
8d:9a:7f:bd:84:8a:3b:9f:20:75:21:76:d0:b7:2b:
c2:1a:a5:bf:ea:08:ae:0c:0e:6f:7b:03:2e:32:72:
26:72:5a:0c:c2:4d:b5:17:71:58:bb:26:9d:53:2f:
15:67:4f:34:91:5e:ef:39:60:30:98:27:14:b7:82:
34:38:28:f1:e4:0c:86:2d:35:06:f4:3f:4b:09:4b:
ef:d5:94:20:e8:bd:19:8d:46:13:16:fc:a1:ba:9d:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.147.0/24
IPv6:
2001:df5:a680::/48
Signature Algorithm: sha256WithRSAEncryption
7a:50:33:70:4c:ce:0c:b2:32:8d:16:74:48:b2:92:88:4a:d4:
da:89:13:5c:12:af:34:fd:ff:d0:a6:c7:79:83:e5:31:e4:79:
5a:80:00:ba:fa:85:24:03:08:0f:f3:00:1f:c5:9d:be:ec:5e:
17:07:3c:22:fb:e5:6e:3c:7c:08:c5:7c:71:b7:2e:64:1a:f3:
c8:10:e5:50:05:9f:65:bc:48:57:fb:40:0b:3e:03:5a:2d:38:
f0:a8:24:21:f7:60:c4:09:85:75:57:18:50:1d:a7:01:ba:60:
12:07:06:7a:67:d9:5d:43:f7:31:73:48:39:1d:a8:fd:dd:6f:
05:b0:f1:a3:aa:d3:5d:8c:cc:42:84:6a:ca:33:3f:e2:e2:f9:
88:f6:37:39:6b:11:0b:1b:7b:a7:fe:ad:17:9c:88:14:e2:dc:
a0:04:85:ca:c2:1f:2a:c0:b9:ab:3b:fe:4e:12:28:fd:64:4a:
a2:94:97:b1:a1:cc:3b:8d:5a:c8:e3:8d:79:24:2c:a9:a7:68:
a7:91:2e:ec:fd:a7:bb:8d:05:a3:5a:2a:30:9e:c2:8f:34:e2:
3b:5f:f8:b5:d5:27:f5:78:63:65:6f:d5:2d:54:ed:e0:f2:96:
ce:fa:ee:87:d0:7c:85:16:dd:a8:11:17:4c:8b:49:f2:62:15:
16:06:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:26 2026 by rpki-client