
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9F6CD463AF90E46AF9F4F3579338A83988879D90.cer
File: 9F6CD463AF90E46AF9F4F3579338A83988879D90.cer (raw, json)
Hash identifier: a7uglTzO7OR/krSzWACVfVBadT06qKk6iu9h/u9yINw=
Subject key identifier: 9F:6C:D4:63:AF:90:E4:6A:F9:F4:F3:57:93:38:A8:39:88:87:9D:90
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 71706A34D8A7542B180E340FE030433D31CB3C92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:07:12 +0000
Certificate not after: Sun 02 May 2027 01:12:12 +0000
Subordinate resources: IP: 103.71.44.0/23
IP: 2001:df3:e200::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:70:6a:34:d8:a7:54:2b:18:0e:34:0f:e0:30:43:3d:31:cb:3c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:07:12 2026 GMT
Not After : May 2 01:12:12 2027 GMT
Subject: CN=9F6CD463AF90E46AF9F4F3579338A83988879D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:e4:dc:7a:64:23:f1:c2:39:2e:34:b5:f6:
08:47:da:2f:7d:87:0c:6f:ab:39:c1:42:3c:56:a1:
62:ad:06:95:31:f3:9e:57:e1:6d:52:54:f9:33:35:
36:e9:ad:bf:3c:a9:8b:ec:3d:25:96:e2:c3:45:fc:
af:7d:01:a6:f9:4f:f1:be:ac:8a:3d:ab:ee:03:0c:
e0:c9:35:6b:2f:a4:de:43:9a:fd:59:dc:1c:64:0b:
bd:87:c6:3a:e6:b3:82:70:fb:0b:4b:5f:78:3e:d5:
f0:68:2e:39:1e:ee:41:81:47:ad:48:7f:bb:01:e6:
8c:c1:9a:fa:e1:e3:e6:e3:ab:54:3a:4e:22:40:97:
39:8b:94:01:ec:9f:a6:c0:e9:f6:5a:cd:5e:19:84:
9f:8f:d9:8b:e6:c3:33:65:65:50:16:bb:08:1c:b8:
44:3b:0a:e4:9b:bb:4f:12:dc:ac:a0:d3:31:2d:f7:
24:94:50:31:0b:aa:a3:6d:23:54:f3:c0:53:36:46:
eb:d0:09:3e:be:bb:0b:a4:14:32:f7:8d:af:1c:41:
d5:ba:38:b6:36:95:cb:ab:de:6a:87:42:54:c8:2c:
c5:1d:ac:56:cd:9c:64:28:ca:cc:78:3f:da:19:9f:
2f:d0:1f:22:26:12:b1:8a:5a:38:03:39:14:46:21:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9F:6C:D4:63:AF:90:E4:6A:F9:F4:F3:57:93:38:A8:39:88:87:9D:90
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.44.0/23
IPv6:
2001:df3:e200::/48
Signature Algorithm: sha256WithRSAEncryption
85:50:32:f1:5b:14:d5:b9:a7:e9:e0:6d:91:5a:93:30:2a:09:
d7:d9:22:68:54:55:5c:ea:f8:71:fc:b6:86:0e:8a:1f:e6:67:
ba:25:3a:40:ef:98:f5:d8:b1:e9:75:2e:3a:b9:c6:ab:50:07:
12:6a:51:c5:85:64:61:24:7e:8c:9e:e5:6c:20:46:5a:de:24:
ec:40:fd:00:ad:d9:94:3a:bb:46:84:11:27:36:6b:63:f3:0f:
80:54:27:1a:93:4a:a6:9c:73:2e:34:4a:ff:27:97:35:e9:38:
72:10:bb:2b:8a:f4:0f:2d:51:f4:e5:ee:d9:09:23:28:43:c7:
f1:cb:82:f7:e4:da:e8:bc:db:8d:5b:a6:dc:03:ea:b8:bc:b2:
09:95:43:71:c4:61:20:02:a3:3d:bc:98:58:ae:51:8f:5f:5d:
1f:6c:a8:c4:f3:78:39:7b:ed:37:14:45:7c:64:5c:4d:fa:b7:
8f:0d:ad:f0:94:7e:53:f8:4b:4e:87:21:5f:5e:8c:73:87:38:
61:ef:4f:95:79:6c:46:6c:0c:02:22:00:79:9b:2c:a7:b1:e5:
af:f1:93:a6:c8:90:f2:f3:43:2d:24:90:1f:d5:7b:45:24:c9:
36:57:59:2c:b0:16:36:62:0f:9e:32:12:d8:7e:6b:9d:95:e0:
80:5d:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:07 2026 by rpki-client