
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
File: 92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer (raw, json)
Hash identifier: Scl4QD2AsP3DLIqBldfh9qspFEZStZE0Y+2fgn+DXTM=
Subject key identifier: 92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: B67D322782C2C3B6EEC408EA13FFF12811FE1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:16:39 +0000
Certificate not after: Sun 02 May 2027 01:21:39 +0000
Subordinate resources: IP: 103.4.80.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b6:7d:32:27:82:c2:c3:b6:ee:c4:08:ea:13:ff:f1:28:11:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:16:39 2026 GMT
Not After : May 2 01:21:39 2027 GMT
Subject: CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:7d:d3:36:5b:37:16:6a:5a:80:88:76:7a:
6f:94:2d:0b:6c:0c:bf:50:4e:17:54:40:60:13:7f:
d8:e2:b3:56:e6:19:80:fc:cc:ef:bc:37:aa:02:fb:
8b:15:7e:27:c8:af:a7:e8:d0:1b:84:f4:20:30:97:
51:ab:f9:3e:a7:5c:d1:8c:39:46:83:0a:19:1a:77:
7f:99:c9:9c:0e:7d:b1:a7:59:d0:a1:bb:a9:3f:72:
01:8d:90:dc:fb:88:87:18:47:d8:0c:50:44:d9:22:
00:80:d9:ef:c3:e3:e3:00:2b:b9:0e:8d:5f:cc:ab:
ff:4e:a4:88:43:60:91:28:56:1a:b9:05:b6:fb:47:
d4:64:12:ea:6a:31:35:ef:2f:a7:bd:98:8e:f3:41:
01:bc:ae:4f:82:37:d9:22:62:9d:b5:78:de:ac:dc:
eb:68:ee:c2:e4:c1:47:78:62:40:27:fb:c3:c1:ed:
8d:f3:e9:f3:a3:2f:0c:09:71:14:f2:e0:09:86:6f:
9b:72:91:eb:7d:98:63:d3:2a:77:01:2d:5a:f8:df:
53:d9:db:26:4b:cf:9d:4a:4f:aa:be:5c:d6:18:20:
4b:08:09:16:8f:36:b9:87:d6:85:d7:fe:93:43:34:
61:dc:18:72:ab:b3:11:54:bf:85:e9:d0:5c:e4:90:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.80.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:1c:98:a5:8d:66:8f:f1:f8:29:1b:4f:03:5e:17:93:7d:0b:
5f:9c:73:db:f8:49:dd:d8:16:e9:e0:c9:6f:e9:8d:a4:6a:6c:
50:1d:44:57:1c:ee:b9:ef:b9:d5:da:73:51:14:a8:13:d3:a6:
b6:a9:97:f6:a7:8e:ea:19:48:81:5c:d5:0a:d6:ed:2b:da:80:
8d:22:a8:7f:7c:05:9b:f7:59:d9:d3:e3:84:0b:aa:f4:e7:8b:
f6:f0:40:e6:9a:c9:e5:27:2b:ab:fe:c2:94:39:af:5b:9f:bc:
3a:34:65:e3:a4:6c:7e:6a:45:31:b7:e6:3c:9d:1d:ca:da:6a:
fe:02:26:ab:0b:be:92:2f:d9:cc:cf:a3:b9:b9:07:88:58:ce:
2d:29:df:08:d0:07:2d:8d:ce:a7:ce:6c:c4:86:42:8b:ae:ea:
bc:5f:b2:ba:2d:b2:9c:25:ff:31:87:a8:b3:00:69:cf:70:29:
c8:69:82:0d:a1:ac:ce:6c:e7:7f:d6:50:03:e0:51:84:4d:03:
b4:e4:22:63:86:18:eb:dd:a1:e0:42:cb:c6:e0:a6:f5:ab:51:
a7:a7:d1:06:2b:21:a9:0e:1b:1c:bb:08:d8:14:97:55:d4:7f:
29:cb:7d:6a:c2:5c:06:19:51:12:a5:cb:9e:ba:40:0f:70:e2:
c7:65:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:17 2026 by rpki-client