
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
File: A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer (raw, json)
Hash identifier: HIH1Gwdi9344mh/iFleBah22eG0apmrpWb39BSC6ZFo=
Subject key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4D872CDA9C9EBFF348ECEF9862802F890EF1C846
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:15:00 +0000
Certificate not after: Sun 02 May 2027 02:20:00 +0000
Subordinate resources: IP: 103.161.164.0/23
IP: 2001:df0:f540::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:87:2c:da:9c:9e:bf:f3:48:ec:ef:98:62:80:2f:89:0e:f1:c8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:15:00 2026 GMT
Not After : May 2 02:20:00 2027 GMT
Subject: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:7e:fc:36:b2:fb:b6:da:32:ae:0b:0f:49:
70:be:a6:19:87:84:80:71:22:bc:d7:e8:8e:5d:78:
b1:b4:02:fd:47:47:9f:54:ec:46:6b:4f:3f:be:93:
05:70:9b:97:e7:2a:c2:3d:ce:88:67:e8:1d:16:7e:
dd:74:d0:13:6f:5d:40:b1:dd:46:d8:4c:0e:dd:bb:
5f:c7:ee:86:50:f2:91:61:a3:58:ee:ba:7b:4c:f7:
b7:9f:3a:9c:0c:30:dd:fc:44:93:36:f5:ec:af:8f:
ec:63:f8:c7:a7:3f:7e:e6:8d:e0:1f:d7:1c:07:f7:
fa:7b:f6:81:dd:92:68:ce:21:cc:df:ce:2c:65:70:
68:a6:c8:7e:a2:3e:b4:e0:05:55:a1:17:c9:e8:70:
0b:d2:5c:cc:e5:b9:7c:84:8c:3d:f7:84:92:a4:c5:
4b:c6:25:75:02:f1:7f:be:4f:76:0a:f4:3c:29:e2:
73:02:59:34:22:cc:34:f5:d0:75:39:1b:2f:d8:66:
d6:c0:34:cc:9c:be:90:05:60:ac:13:6d:0e:4c:59:
56:f2:51:11:ed:4f:58:24:87:e2:74:f1:82:83:b8:
bc:4b:44:99:07:d2:75:de:e8:1e:3f:ab:57:3d:1f:
86:a7:e5:21:f1:57:00:95:42:71:4a:6f:28:1d:e6:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.164.0/23
IPv6:
2001:df0:f540::/48
Signature Algorithm: sha256WithRSAEncryption
0d:1e:dc:fc:ac:20:11:f4:e6:06:9b:32:33:eb:6f:df:3c:a3:
87:b7:d1:66:19:8d:85:77:ed:7a:1e:46:9e:21:ec:d9:cc:84:
b5:82:2c:77:5c:da:43:0d:c4:4a:4e:8b:f3:07:1a:f7:34:ad:
fc:29:bb:b9:85:23:5f:f0:67:85:bb:fe:3b:ac:5c:5a:95:cb:
28:c7:26:6d:54:7a:cf:26:51:01:06:63:f6:8d:93:41:22:48:
f4:62:88:61:71:31:3d:ea:fd:26:88:0d:5d:21:47:41:ce:d9:
0c:ce:d3:1c:da:22:72:87:ee:17:b0:c3:99:34:ff:d4:cb:60:
91:92:87:f1:1f:53:9c:19:b8:03:0b:0c:91:6a:84:a2:cd:ab:
1d:24:40:2a:16:26:6e:b5:cc:6f:36:28:36:88:3a:74:42:57:
80:79:99:46:54:20:8b:8a:f2:89:3d:7c:5a:1d:1a:4b:8b:df:
f4:81:b4:8f:b9:3a:52:90:8f:82:c0:8a:20:e4:a1:71:74:40:
8d:7f:08:1e:32:7e:45:cd:72:57:36:11:bf:65:3d:b1:5b:95:
9b:df:a6:ec:46:a4:d3:63:12:79:ae:ee:68:4f:2e:9d:ed:5b:
d4:f1:05:22:7d:2d:c6:ee:90:68:6a:a6:46:bd:e5:1a:59:36:
44:e4:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:55 2026 by rpki-client