
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
File: A479BE8A2AB736997799C5EDD19DCC1E14080951.cer (raw, json)
Hash identifier: aphV0WPRaSjV7TGnyY692DvA9sdhjlFvYt27lI5nzR8=
Subject key identifier: A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0DA17AD37734C31E9A09D3134700E3DB7871B494
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:45:55 +0000
Certificate not after: Sun 02 May 2027 00:50:55 +0000
Subordinate resources: IP: 103.147.156.0/23
IP: 2001:df2:9780::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a1:7a:d3:77:34:c3:1e:9a:09:d3:13:47:00:e3:db:78:71:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:45:55 2026 GMT
Not After : May 2 00:50:55 2027 GMT
Subject: CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:c8:36:8a:ca:83:3c:89:85:b6:76:19:c4:
54:71:8f:2b:d4:18:ce:bd:a9:f1:65:39:d3:ee:17:
a9:15:f3:ea:a0:95:f6:4b:67:8a:a5:a8:31:92:86:
c4:ac:df:e1:5a:42:96:4f:2b:f0:b6:51:8a:7e:f6:
30:11:75:b0:b2:3c:5d:93:89:21:ef:c9:90:b1:53:
a8:6b:30:f9:51:17:35:79:c7:56:cf:34:94:88:6e:
fb:e3:c4:19:bb:e4:30:8f:ba:a8:40:8e:f6:75:d2:
8f:5e:8b:36:dc:3e:44:15:87:c4:ee:53:76:1d:fa:
6f:ef:9f:78:0a:f7:ec:d4:e9:32:2c:a7:2a:93:50:
73:fa:39:74:3e:5a:d7:15:c2:fe:3e:85:e4:f7:bb:
59:f5:ac:d3:be:22:4e:3b:10:a3:05:78:f1:4f:97:
53:cf:c6:08:53:da:db:94:f1:e8:f4:57:b7:bd:ad:
5b:93:6a:d0:af:0b:88:f0:a6:58:75:82:36:b7:54:
dc:e8:cf:a6:9e:b6:b4:90:66:fb:6e:54:9d:16:3a:
7a:f9:dc:a3:8b:21:74:fe:ce:98:d9:1c:e9:31:16:
3f:40:15:1c:38:c1:34:90:ec:1e:6e:62:57:ce:fb:
aa:7f:2a:97:bc:a7:8b:d4:48:65:f8:36:4b:17:55:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.156.0/23
IPv6:
2001:df2:9780::/48
Signature Algorithm: sha256WithRSAEncryption
17:26:bc:98:23:61:b6:0a:c6:cb:aa:62:66:56:80:0a:e7:2f:
69:77:05:92:f6:f9:eb:71:84:60:04:94:d1:31:31:00:fe:42:
10:37:f6:a2:1f:09:bb:ad:a4:50:4f:67:ef:f5:56:44:19:80:
2e:15:58:f5:a4:4e:a0:8c:9a:e5:87:b3:c3:26:0d:32:ea:9d:
57:a7:1e:79:48:a5:30:e3:b5:ee:38:5b:6c:9c:47:dc:d3:cd:
6f:80:74:c7:22:cf:29:d0:d2:4b:36:b3:60:c9:50:62:42:74:
fd:aa:76:ca:b8:fb:73:60:2b:87:52:1f:81:5d:5a:c1:51:fe:
7b:90:65:bf:62:8b:ea:6c:73:f4:97:5a:08:43:70:61:1a:90:
1d:41:6a:56:5d:fc:b4:fb:d5:ee:bc:62:39:d6:4a:88:a1:59:
2f:46:f8:d0:5d:41:b4:52:b9:27:92:87:b4:80:2c:cf:8e:0e:
80:33:14:40:74:26:0a:31:64:5a:08:8b:d2:19:86:4a:6e:38:
85:1c:7f:52:1d:f5:12:53:bf:14:20:a0:f0:fa:b3:4e:30:0b:
f4:86:86:47:1c:0f:e9:bf:16:ce:61:73:ba:cc:9a:79:41:27:
5f:bf:08:ae:04:4b:93:a3:09:7d:1f:12:71:ea:7e:ed:b7:5b:
4c:72:93:6a
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUDaF603c0wx6aCdMTRwDj23hxtJQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDU1NVoX
DTI3MDUwMjAwNTA1NVowMzExMC8GA1UEAxMoQTQ3OUJFOEEyQUI3MzY5OTc3OTlD
NUVERDE5RENDMUUxNDA4MDk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK33yDaKyoM8iYW2dhnEVHGPK9QYzr2p8WU50+4XqRXz6qCV9ktniqWoMZKG
xKzf4VpClk8r8LZRin72MBF1sLI8XZOJIe/JkLFTqGsw+VEXNXnHVs80lIhu++PE
GbvkMI+6qECO9nXSj16LNtw+RBWHxO5Tdh36b++feAr37NTpMiynKpNQc/o5dD5a
1xXC/j6F5Pe7WfWs074iTjsQowV48U+XU8/GCFPa25Tx6PRXt72tW5Nq0K8LiPCm
WHWCNrdU3OjPpp62tJBm+25UnRY6evnco4shdP7OmNkc6TEWP0AVHDjBNJDsHm5i
V877qn8ql7yni9RIZfg2SxdVrhsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKR5vooqtzaZd5nF7dGdzB4UCAlRMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzYyZGFhOTVmLTJmNTktNDM5YS04MzRmLWE3MjFjMzcyYTc0Yy8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MmRhYTk1
Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC9BNDc5QkU4QTJBQjczNjk5
Nzc5OUM1RUREMTlEQ0MxRTE0MDgwOTUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG
AwQBZ5OcMA8EAgACMAkDBwAgAQ3yl4AwDQYJKoZIhvcNAQELBQADggEBABcmvJgj
YbYKxsuqYmZWgArnL2l3BZL2+etxhGAElNExMQD+QhA39qIfCbutpFBPZ+/1VkQZ
gC4VWPWkTqCMmuWHs8MmDTLqnVenHnlIpTDjte44W2ycR9zTzW+AdMcizynQ0ks2
s2DJUGJCdP2qdsq4+3NgK4dSH4FdWsFR/nuQZb9ii+psc/SXWghDcGEakB1BalZd
/LT71e68YjnWSoihWS9G+NBdQbRSuSeSh7SALM+ODoAzFEB0JgoxZFoIi9IZhkpu
OIUcf1Id9RJTvxQgoPD6s04wC/SGhkccD+m/Fs5hc7rMmnlBJ1+/CK4ES5OjCX0f
EnHqfu23W0xyk2o=
-----END CERTIFICATE-----
Generated at Tue May 12 22:52:57 2026 by rpki-client