
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
File: 7705E223B413A31F5B5C47149EFBCA7585682B42.cer (raw, json)
Hash identifier: MvBJJFaX5/4BH59RsJw1aTWB8MBec4MSYb0NYUfwBCI=
Subject key identifier: 77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6E4C60A5B079EB9B6C34DDEF9F554A30FD458493
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:18:42 +0000
Certificate not after: Sun 02 May 2027 01:23:42 +0000
Subordinate resources: IP: 103.179.13.0/24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4c:60:a5:b0:79:eb:9b:6c:34:dd:ef:9f:55:4a:30:fd:45:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:18:42 2026 GMT
Not After : May 2 01:23:42 2027 GMT
Subject: CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:8d:01:af:95:fc:48:85:71:d1:1c:c9:bf:
dc:60:59:43:b6:a2:53:1a:5f:ed:79:5f:47:a9:bc:
d6:c3:36:ba:05:48:d7:e4:9a:b4:0a:72:f1:01:6d:
68:f2:d1:29:fc:7f:7d:bb:01:b9:5e:0c:6f:9d:33:
87:79:87:32:22:e0:9a:b7:f9:4b:a3:cb:b3:6e:ad:
c5:db:9d:03:9c:03:6d:7f:4e:a4:62:85:cf:d2:9b:
82:0c:31:be:2f:8c:8e:2e:95:40:21:88:8a:71:93:
d8:ff:53:a8:62:35:d2:dc:80:dc:3e:6b:64:9f:6d:
02:9f:8e:07:15:03:32:46:50:ef:f9:be:18:8c:f9:
79:e8:cd:3f:da:5e:fd:75:e4:2b:ea:7b:84:11:d3:
11:d1:78:1f:80:7c:1f:ff:b2:ad:d4:83:35:0c:82:
02:a9:4f:74:c9:9e:12:32:41:1c:a6:09:76:3b:a7:
31:b9:cb:78:75:23:71:be:82:8a:74:ff:1f:2f:6a:
83:97:2d:2a:3a:60:46:7f:35:86:76:26:c5:c3:96:
17:2a:6c:ac:a1:54:e2:83:e0:96:14:f4:6a:db:37:
fe:fc:f9:17:cf:6e:3c:ea:3f:fd:74:31:97:20:d4:
e4:40:61:37:5a:ed:5c:b4:04:57:73:32:a9:0d:b8:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.13.0/24
Signature Algorithm: sha256WithRSAEncryption
44:95:b3:60:40:d7:66:07:47:ea:96:6b:5a:c7:91:e4:30:a2:
83:28:07:8f:10:5c:f4:da:dd:20:18:07:53:a4:72:2b:3c:5f:
f7:3b:00:53:b1:09:3a:84:6d:bc:59:96:80:45:54:64:87:60:
64:1f:41:33:73:c2:96:dc:50:b2:d9:cf:70:40:57:93:98:47:
30:e5:23:cf:75:73:4c:33:b8:95:d2:f0:1b:6b:16:cb:cd:55:
a2:b1:62:f6:60:81:e5:3e:88:ca:bc:c6:73:65:16:59:e8:2f:
82:04:a7:08:a6:81:49:87:42:fd:59:d0:42:8f:75:68:6b:a5:
d2:ad:f2:77:9e:d8:57:14:95:3f:c9:bb:c0:1b:91:13:3e:24:
a2:e3:5e:20:af:39:f5:dc:9f:ae:1e:60:fe:35:7f:38:45:b8:
31:49:af:33:fa:24:14:55:fb:dc:7b:42:6a:f3:ad:36:1b:bd:
10:99:52:4f:55:fa:f3:18:38:50:7e:79:fb:5e:c8:da:71:d2:
6f:a9:6b:8c:4d:24:ef:9d:18:2f:30:67:e0:3b:1c:c5:5a:28:
b2:c6:e8:52:b1:7a:24:9d:04:0d:fb:55:ae:34:f0:93:88:07:
9d:fb:35:2e:9b:7d:0d:2c:03:c0:1f:91:f9:3f:16:8d:74:a9:
54:9d:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:34 2026 by rpki-client