
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
File: A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer (raw, json)
Hash identifier: 62NAkirQ6q0FCO1KZUGbDJuENUj/sOsSV4l06l84I8o=
Subject key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 74B895F7698B077A15EB60D51B581D72FCC7315B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:57:20 +0000
Certificate not after: Sun 02 May 2027 02:02:20 +0000
Subordinate resources: AS: 137363
IP: 103.116.172.0/22
IP: 202.10.32.0/23
IP: 202.10.48.0/21
IP: 202.10.62.0/24
IP: 2402:fdc0::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b8:95:f7:69:8b:07:7a:15:eb:60:d5:1b:58:1d:72:fc:c7:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:57:20 2026 GMT
Not After : May 2 02:02:20 2027 GMT
Subject: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:53:36:9a:58:40:4e:dc:ad:ad:96:52:e0:
ee:92:82:69:bd:05:76:38:a3:94:49:d8:bc:61:39:
27:d1:d8:6e:c4:49:22:14:cc:ff:6b:2c:e5:ae:41:
37:c8:49:00:c7:79:e3:fd:5a:81:f7:70:a2:d3:1b:
b1:96:ed:6c:01:f7:af:0e:b4:27:30:e1:a4:89:f2:
8b:48:9b:55:28:09:25:86:84:e5:3f:f8:ae:4f:03:
d6:e8:d9:4a:0f:55:8c:c2:44:6f:25:d8:da:36:f6:
b4:8d:79:8c:bf:ad:39:58:b4:44:81:10:15:e5:30:
92:ca:9e:f9:73:c4:c4:de:2f:ae:ac:12:dd:5b:a3:
42:e4:f6:45:6e:32:f7:52:d1:8d:25:33:ce:a6:2f:
7d:f1:32:55:82:35:bd:35:3f:0a:77:3b:d1:81:13:
f3:d6:91:b3:a7:6c:63:95:fc:17:18:0b:48:f8:08:
13:cf:df:df:a7:c5:20:a5:c4:52:37:d9:11:37:88:
93:78:d0:48:5b:8a:b1:e9:5e:05:e1:8a:f3:1c:39:
5c:fc:30:c3:ba:2d:42:ea:5c:d0:0b:2a:97:d5:db:
ad:1f:78:68:e4:5b:49:1a:83:ee:b0:22:6a:46:75:
e1:01:a8:3a:92:37:e1:c6:c6:e9:39:62:e0:3e:72:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.172.0/22
202.10.32.0/23
202.10.48.0/21
202.10.62.0/24
IPv6:
2402:fdc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137363
Signature Algorithm: sha256WithRSAEncryption
80:c5:ba:ef:a4:1f:63:3f:a4:c8:0b:11:65:c8:2d:7d:08:97:
f2:a9:0c:14:a7:66:84:b9:7f:99:5d:2d:ae:4e:5f:c7:1b:65:
6a:6c:ff:32:03:08:a2:7c:5c:0e:cf:7c:cb:66:e5:e5:68:14:
5e:1b:7f:8c:22:ae:29:df:cf:ab:92:1f:e5:fa:31:6d:67:ed:
13:5f:31:9f:ed:ac:c0:08:c3:17:d5:e1:44:c4:e4:f7:65:41:
a4:92:36:88:2a:45:87:60:36:5a:81:5f:46:17:fd:19:dc:15:
17:dd:0e:0a:8d:89:a4:ec:2d:a0:25:ab:2b:a4:ce:12:b0:e9:
fa:2c:01:f4:dc:67:41:9f:a7:74:9f:d3:23:80:cd:58:7f:dd:
28:6e:5e:9b:fd:2c:99:5b:4a:3d:ae:53:aa:9e:04:9d:5f:bd:
4f:17:25:35:cb:d4:39:60:df:4e:f3:b6:0f:96:44:3d:b0:18:
7b:9e:df:7b:11:f3:e8:00:a4:4c:9c:4d:6f:02:46:c7:48:6d:
c1:3f:db:ab:7c:ed:ff:ad:ec:d0:e1:a1:73:66:57:bb:97:a4:
b2:34:31:8f:7c:9c:c9:7c:a7:59:2b:d4:53:d5:c1:62:8e:b2:
e3:95:f2:df:2d:61:9e:82:9f:6f:df:11:fd:2b:c8:cf:4a:aa:
d6:9c:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:01 2026 by rpki-client