
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
File: 790B62849B574740604A7D3662FBB56A4DB8F510.cer (raw, json)
Hash identifier: 3Yfi8k3sX9BxtReCUjPLEqpLXNe8kZxfhhKtKjvp8BU=
Subject key identifier: 79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 7061833249111673269F02CDC0367C92DBEE64DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:53:52 +0000
Certificate not after: Sun 02 May 2027 01:58:52 +0000
Subordinate resources: IP: 103.38.110.0/23
IP: 2001:df3:2c0::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:61:83:32:49:11:16:73:26:9f:02:cd:c0:36:7c:92:db:ee:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:53:52 2026 GMT
Not After : May 2 01:58:52 2027 GMT
Subject: CN=790B62849B574740604A7D3662FBB56A4DB8F510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:1f:86:67:67:b1:85:34:31:6a:8f:ef:ea:
95:73:92:69:57:d2:16:fe:1f:91:02:99:ef:5b:a7:
48:c3:58:97:dd:37:4e:39:75:6a:62:2a:2d:5d:77:
ed:de:e6:fa:7f:5e:10:7a:d5:5b:81:44:0e:97:b7:
6b:60:1d:a7:37:ce:f1:0a:30:b8:03:3b:38:e3:b1:
fe:86:49:56:47:74:b7:2d:61:e3:51:d6:6d:f0:17:
a9:46:50:f8:55:90:ef:a8:f8:24:6a:56:7f:14:a9:
70:94:bf:75:cf:07:a7:00:00:db:b4:26:95:0a:a4:
a9:91:de:79:5d:48:6e:80:62:bb:fd:6c:f7:50:01:
ab:aa:2e:7a:c3:b2:4c:02:44:95:d3:0b:82:e9:03:
56:6a:52:67:8b:b0:27:e5:f3:77:49:c1:59:7e:91:
94:ec:18:0c:4b:73:52:bf:f6:18:de:6b:3e:78:93:
7b:ea:29:45:63:d3:8e:c7:80:1c:c6:a8:5a:f2:5f:
75:47:17:cd:a5:b5:84:f6:a4:49:33:d9:73:fe:b0:
71:7d:42:36:55:66:a9:3f:36:9e:d6:33:ee:b8:d9:
fe:14:cd:39:40:34:01:d4:f1:4d:40:4c:79:8b:89:
ba:20:15:14:86:25:1e:54:c0:dd:fd:28:f7:05:09:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.110.0/23
IPv6:
2001:df3:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:99:0b:96:c5:e5:a5:d8:04:72:da:23:c5:e4:9f:99:4b:9f:
85:ef:60:ff:25:5c:ba:0c:c9:52:ee:7a:b2:c1:2a:93:a6:c5:
10:fe:d2:6f:d6:84:d0:f8:29:f2:f4:64:e0:4a:e0:b1:53:db:
74:91:fd:f0:2a:cb:e4:28:4e:97:eb:af:c5:0d:0c:a8:5c:fe:
0e:d8:b5:b8:0d:66:47:fd:81:84:5e:e4:3a:51:95:c6:41:e4:
ba:05:3f:c2:5e:f3:90:71:45:c1:81:48:60:60:a1:33:0f:8c:
98:58:3f:7c:ea:fb:67:02:0a:76:69:3a:0d:9a:0b:06:a9:eb:
2d:4b:f8:fd:23:17:bf:00:b6:72:18:43:22:7f:65:f1:26:52:
5b:7d:c4:4a:1e:58:1f:47:61:7e:87:7e:44:55:42:fd:ec:e1:
3e:1e:c4:b3:c0:72:7f:cc:88:aa:82:2d:1c:50:49:06:6a:57:
57:4e:14:75:49:b9:ff:19:ab:eb:6e:81:31:ac:e9:5f:a0:03:
ec:8f:34:30:95:96:45:62:ee:3a:0e:a3:eb:46:95:96:81:e4:
09:44:24:86:1e:93:e3:42:ee:8f:71:d8:a9:bf:6b:8c:08:f7:
19:57:14:08:77:70:8a:24:77:2d:ff:7e:44:63:cd:51:93:e0:
cd:e1:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:11 2026 by rpki-client