
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer
File: 7A642EBA720716DAB552755544A2F1F74B4C87F0.cer (raw, json)
Hash identifier: mtPjrKae1w2VoUM8nI602byrP60jZ6lTVOq8BPOgPmE=
Subject key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0D597FCD5429DF9C5D8BBE1E7C29912DB49F8617
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:16:51 +0000
Certificate not after: Sun 02 May 2027 00:21:51 +0000
Subordinate resources: IP: 103.50.24.0/22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:59:7f:cd:54:29:df:9c:5d:8b:be:1e:7c:29:91:2d:b4:9f:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:16:51 2026 GMT
Not After : May 2 00:21:51 2027 GMT
Subject: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:c3:a9:50:a0:6e:21:13:22:61:1d:c4:87:
da:1c:e2:1b:ec:6a:db:32:81:ad:46:5f:fc:95:f6:
6a:19:ba:54:b8:96:f8:e4:7e:a0:49:59:42:3a:77:
70:ca:c9:47:13:c8:2c:d3:ce:41:b4:dd:64:b2:bb:
6d:fa:1e:3f:88:de:7f:ab:34:8c:ab:18:aa:5a:b3:
a4:3b:18:b4:a7:62:00:ef:43:f5:a3:7d:01:7c:5a:
2f:ba:2e:c6:dd:2e:61:51:d6:91:8b:72:dc:98:7d:
e8:cd:c7:6c:00:2a:a0:5e:d4:8b:9a:7a:67:a9:c2:
86:4f:dd:7d:9f:d4:0a:eb:eb:40:f0:e7:e0:f5:fd:
24:d8:33:3b:82:69:8b:47:6d:24:f8:1a:64:b1:5f:
b5:ea:85:58:e3:8d:12:bb:35:b5:b0:8f:e4:8a:fd:
a0:df:11:a1:8b:a6:63:88:cf:6f:2e:8a:cd:34:91:
80:31:b4:75:9b:f6:1f:cf:25:5c:b5:e6:ae:e0:8a:
ff:6b:1c:5c:c5:75:1a:3d:cd:45:ec:b7:d9:59:0a:
6d:8b:6e:b0:4a:88:45:3d:a9:80:fd:2b:28:15:85:
72:1b:17:16:ad:ac:4e:67:3a:4e:a0:1c:3d:92:60:
0a:5c:fe:69:2c:c7:f1:3d:28:14:e8:3e:ff:d9:f2:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.50.24.0/22
Signature Algorithm: sha256WithRSAEncryption
92:ad:eb:2c:29:dc:4e:a8:9f:a2:7e:0a:b2:65:4d:63:bd:9b:
6f:1a:a2:72:15:dc:20:0e:51:8b:b8:56:d5:69:20:c7:72:14:
e0:e7:29:93:dd:bf:72:68:d9:3d:f8:dd:0b:1f:12:fc:9c:1d:
51:33:99:1a:d2:45:30:d4:52:c8:4e:48:20:d2:0a:62:c7:f6:
f5:59:36:81:c3:3c:69:00:30:a0:31:28:cb:85:53:1b:95:12:
6a:f8:60:79:ff:a6:6a:62:65:57:b7:3a:09:3e:8a:ef:f9:81:
95:b1:35:7b:3e:54:54:a4:9a:19:6b:ce:74:e8:52:fc:78:b6:
c5:bb:96:3e:45:4f:56:09:e0:0b:40:7c:b1:8c:40:d6:87:72:
6c:91:d4:a3:fa:bf:29:74:b9:45:e5:c0:a0:11:65:d5:fa:3c:
92:4c:4a:fd:3c:5e:7c:b3:07:79:3c:00:1a:0f:57:31:34:00:
3d:94:e7:7a:46:24:dd:8f:de:0e:08:96:87:55:8a:dd:47:5e:
02:57:a3:0d:29:b6:7e:68:f4:02:51:e6:c2:2f:7e:22:51:ed:
e4:6c:0a:7f:8f:3d:0a:eb:87:d6:63:8a:d6:d4:7c:17:39:d5:
d5:4c:df:cf:ff:b7:6a:e8:3c:c7:a6:06:a9:32:07:6b:6d:93:
2a:61:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:01 2026 by rpki-client