
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer
File: 9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer (raw, json)
Hash identifier: /LK2yIX/0pE++txv5K/CApgde2UDs975y+mqj/oF6KU=
Subject key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3DDCAF50E49D1739F434BCAE455ADFE743302B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:04:15 +0000
Certificate not after: Sun 02 May 2027 02:09:15 +0000
Subordinate resources: IP: 103.186.32.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:dc:af:50:e4:9d:17:39:f4:34:bc:ae:45:5a:df:e7:43:30:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:04:15 2026 GMT
Not After : May 2 02:09:15 2027 GMT
Subject: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:7f:2e:24:ff:6f:35:88:64:4e:28:70:5f:
5f:44:ba:ba:20:88:f5:f9:5d:b2:a1:ad:09:ed:da:
bb:4d:eb:ec:81:42:24:b3:9b:18:f8:bd:be:69:92:
a1:ad:82:20:a3:f2:8d:6f:d7:7f:cd:dc:5e:ce:47:
a5:21:8b:8a:04:1d:54:e5:7d:3b:f4:1a:1d:21:3e:
e1:63:3b:60:99:ee:3e:68:64:65:7a:63:cd:e2:74:
26:5f:cc:6e:0b:ea:93:75:b9:41:c2:d9:67:b3:5b:
bc:2d:84:f3:b7:92:0c:55:69:a5:b8:a8:17:8d:1e:
1f:7b:bd:df:af:85:7e:f4:73:93:56:c6:67:cd:0b:
b4:7d:75:30:de:84:fa:87:39:1c:19:ab:5e:17:91:
10:da:32:e0:38:ce:57:ec:39:fe:a5:12:3c:17:40:
6a:8d:32:99:b3:9a:4e:e6:34:02:58:ae:68:0d:84:
a3:b5:d6:58:5a:ae:54:a1:12:51:a3:95:5c:51:69:
ab:4e:a9:9c:67:21:2b:46:75:2e:a4:7f:50:99:50:
2f:9b:4a:be:c4:55:3f:9a:37:3e:37:dc:4a:5c:9b:
73:7b:ff:0b:69:98:13:31:16:52:49:c6:a1:78:e1:
5a:a0:1d:d8:07:8b:7b:b6:b9:6b:8e:7c:0f:52:ce:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.32.0/23
Signature Algorithm: sha256WithRSAEncryption
43:3c:80:c8:59:75:0b:f9:55:1e:7b:32:62:32:b1:36:aa:de:
26:41:64:6a:bc:48:6d:db:90:73:18:b4:79:e4:ad:ca:52:e8:
fa:b0:61:5d:5b:75:72:47:91:8d:63:d9:21:f0:32:85:42:fe:
41:c1:f7:63:79:db:b3:a1:54:e5:ad:9b:0d:f8:b0:50:02:af:
9b:e2:a0:a0:da:62:c2:31:a0:10:21:a7:e7:a7:96:ff:c6:3b:
7f:e5:d8:0a:dd:6e:8d:23:eb:b0:8b:e0:90:01:f3:de:90:d3:
be:e8:47:db:87:9f:b2:70:ab:10:05:8c:28:a1:0e:d6:f9:64:
3e:39:ff:9b:3c:db:3d:b1:c6:81:01:2b:00:66:f4:f1:bc:7e:
19:c6:4e:91:f7:72:47:28:a5:c1:68:38:3d:bc:4f:99:7a:fe:
20:53:af:e4:cb:4f:ae:c1:0c:e2:d3:37:20:aa:17:cf:01:db:
78:95:8b:50:c6:d2:12:7e:de:09:6f:7d:75:f0:4e:cc:0d:d6:
20:cf:ba:c7:44:5f:2c:5c:16:2c:81:67:6c:fa:2f:61:d5:1d:
50:d8:17:ee:76:0a:63:5f:2c:fd:7b:28:58:35:60:4a:72:cd:
10:24:e5:45:e6:ff:f5:ed:7e:bc:41:9b:61:95:94:94:53:fe:
61:48:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:07 2026 by rpki-client