
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
File: 781BE026701DAFA391758F44794F58BDFF3C7E68.cer (raw, json)
Hash identifier: rHFlzd0E9zkKrVkFlQ/OwSMKNsKvYTcm4mfFuKxit8o=
Subject key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 488D22326A2EBCE4C9690C68E8BF8CDE792767E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:03:55 +0000
Certificate not after: Sun 02 May 2027 00:08:55 +0000
Subordinate resources: IP: 103.90.196.0/22
IP: 175.106.16.0/22
IP: 2400:8b80::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8d:22:32:6a:2e:bc:e4:c9:69:0c:68:e8:bf:8c:de:79:27:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:03:55 2026 GMT
Not After : May 2 00:08:55 2027 GMT
Subject: CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:89:4e:69:a4:03:54:f2:d5:03:b0:61:71:
83:c9:76:13:3b:3d:fa:0b:a9:82:78:f4:c7:f9:ad:
ca:d4:83:a5:ed:86:77:10:48:e6:7a:fb:f9:24:d2:
43:00:3b:03:f2:f1:a6:6f:c2:9b:5c:69:af:40:de:
19:fa:00:c1:aa:48:fd:a2:a9:12:a6:fc:07:cc:31:
2a:b7:22:82:ae:61:07:20:fd:ab:b9:19:0e:49:d2:
6d:fc:ad:2b:07:f8:ea:23:1d:c2:89:70:06:5f:e5:
7a:3e:a6:e9:2a:23:b5:0e:42:9c:98:19:f3:e0:7b:
1d:3a:7c:5f:11:4f:60:96:bc:d0:c6:dc:de:48:72:
90:52:fc:20:7b:b8:87:6c:db:11:af:1b:16:73:ee:
2c:bb:ec:fb:c3:f1:30:93:b6:81:c8:f2:3c:0b:47:
62:62:01:9b:d9:54:83:c6:70:64:d9:a2:48:06:b2:
4f:e0:45:06:bc:ef:d5:44:d7:ba:cc:bd:46:cc:40:
2f:bb:11:d7:cd:6c:60:37:93:08:93:97:22:ec:d9:
62:2a:76:75:a4:73:d0:9b:a9:13:fa:8c:d8:a3:48:
98:71:c1:21:d6:ef:65:26:66:5b:ba:5c:b4:0a:05:
ce:fe:a3:5f:83:2b:8f:6a:8a:04:da:5a:1e:12:69:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.196.0/22
175.106.16.0/22
IPv6:
2400:8b80::/32
Signature Algorithm: sha256WithRSAEncryption
94:37:ff:0c:86:ef:ee:5d:67:b8:e3:52:fa:f5:76:92:27:60:
60:aa:7b:50:07:f6:c1:f1:4c:88:02:06:e8:73:d3:cd:44:12:
de:33:ac:61:cc:39:f1:32:43:ef:69:9a:98:c3:60:af:41:e4:
67:09:69:ca:00:d0:c3:f8:e5:a5:56:ef:22:37:e7:2b:49:2a:
1a:a7:36:7f:c0:a4:7d:e9:75:4f:f6:a0:89:0b:4c:e6:8c:26:
f3:59:ff:fd:bf:69:12:fe:ae:11:04:9c:1e:26:a1:45:69:78:
97:9e:0b:f0:b3:3e:03:c2:32:d2:62:f8:8a:3a:b5:7d:47:a9:
51:a8:c0:e5:48:e9:ec:cf:0b:d9:12:90:79:16:43:b0:d6:ca:
ee:a8:83:42:f0:c0:32:f2:46:81:b1:0d:e4:e9:4c:27:e0:71:
7d:67:48:24:0c:b2:c8:77:ef:14:6f:9d:36:4c:8d:ac:f1:2f:
4e:21:ed:89:97:bb:20:a6:78:c6:2e:7e:e8:8c:f7:73:d3:f0:
f3:49:77:3e:1e:13:fb:79:cf:f6:d2:4f:5b:11:1b:e8:c6:a8:
ee:6c:eb:04:0a:70:ec:ab:07:0f:87:11:36:d2:42:bc:74:ca:
92:37:04:32:67:c7:ce:53:9a:e6:ed:6b:b2:36:a9:2b:39:b6:
e3:28:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:59 2026 by rpki-client