
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
File: ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer (raw, json)
Hash identifier: HmbNMVlb0mneBvPqsycmAWMWrQmCMxwTVVoE6jTTplU=
Subject key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 723D76E489DC3D554AFD18529E10BCB2BC861BE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:10:58 +0000
Certificate not after: Sun 02 May 2027 00:15:58 +0000
Subordinate resources: IP: 103.178.8.0/23
IP: 119.11.128.0/17
IP: 202.171.0.0/19
IP: 2404:c8::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3d:76:e4:89:dc:3d:55:4a:fd:18:52:9e:10:bc:b2:bc:86:1b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:10:58 2026 GMT
Not After : May 2 00:15:58 2027 GMT
Subject: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:6e:ad:cf:ff:05:ea:4b:5c:02:d3:06:29:
d2:b9:94:df:48:79:ee:4e:af:54:1f:93:d5:ab:f0:
49:98:61:83:7f:dd:a5:ae:75:b9:7c:a0:75:48:57:
91:c6:4d:b8:6f:e7:16:18:df:95:17:5c:9c:87:17:
5c:06:d9:ea:db:62:e7:38:d1:43:4f:9b:dc:ef:b3:
cf:20:44:d7:7d:8a:98:72:d4:8c:52:e9:7a:54:36:
4d:b1:56:23:65:25:2a:ae:de:36:ac:96:38:c9:62:
f1:6a:7e:f5:64:14:91:4f:6b:2e:37:62:ac:d1:90:
e0:b6:77:cf:3e:0e:75:89:46:03:a0:ab:5b:cb:14:
fd:81:14:31:67:f5:0f:4d:f5:8d:bc:79:c5:ed:69:
2e:e2:29:de:07:19:fa:de:4f:23:25:7d:35:1a:3e:
55:1b:a9:6c:12:00:f2:7e:5b:19:93:02:9c:05:4d:
09:97:83:9b:db:ac:8a:e6:ab:27:81:c9:24:8b:31:
29:4a:73:3d:8c:98:a5:ab:9f:81:ae:10:20:2e:84:
d1:9b:5b:03:9d:cb:ee:f3:df:3f:5b:e3:a2:57:c2:
cd:ba:1b:9e:f0:9d:75:ad:e8:1b:01:ce:35:52:c8:
17:f5:34:21:0a:ce:39:b8:01:ab:e8:9f:01:ba:47:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.8.0/23
119.11.128.0/17
202.171.0.0/19
IPv6:
2404:c8::/32
Signature Algorithm: sha256WithRSAEncryption
54:7e:e0:ad:c4:be:03:e3:12:a0:82:37:cc:ab:d7:0b:35:79:
e1:03:a7:33:c6:fd:0a:eb:8a:fe:81:14:97:5c:d3:db:95:3d:
cd:8e:ea:64:99:75:c4:94:06:79:8b:fb:e4:37:30:1b:e6:ef:
0c:62:28:fe:92:70:59:54:13:16:30:77:d7:cf:9c:56:47:34:
24:d9:50:d0:69:ba:4c:05:6c:ad:07:93:67:4f:4d:25:7a:27:
4c:29:3b:2e:c0:44:ca:67:fc:c8:da:61:f5:43:ad:63:13:f4:
23:54:7e:7b:9b:6f:cb:3c:1d:ce:5f:79:02:16:3f:a5:ec:7b:
0d:e7:e7:61:39:d9:78:c5:63:26:53:e5:6e:53:c0:73:18:3a:
a5:4c:0f:06:59:3f:fb:8f:ea:ef:65:1b:ea:06:8f:35:84:1b:
cb:cf:69:07:60:46:7c:d1:e2:67:47:e5:36:72:93:94:12:81:
03:87:f4:37:a2:5a:2f:42:d5:5f:3f:48:b2:d7:b7:58:e3:f0:
e7:d1:92:7d:5f:e6:92:88:71:3c:f9:3e:24:54:26:5d:b6:95:
db:28:b8:5b:2e:eb:4f:e5:eb:b5:0b:7a:cb:c0:ed:2b:d5:2f:
50:ce:98:3e:54:d8:88:62:08:94:cc:04:12:71:8c:e7:67:aa:
cc:ac:8e:b4
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIUcj125IncPVVK/RhSnhC8sryGG+UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTA1OFoX
DTI3MDUwMjAwMTU1OFowMzExMC8GA1UEAxMoQUJGRTZCMzE5NzE0NzMxMkVDMUZB
RTA1QTI1MkEzOTY0RTlCQjIzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLjbq3P/wXqS1wC0wYp0rmU30h57k6vVB+T1avwSZhhg3/dpa51uXygdUhX
kcZNuG/nFhjflRdcnIcXXAbZ6tti5zjRQ0+b3O+zzyBE132KmHLUjFLpelQ2TbFW
I2UlKq7eNqyWOMli8Wp+9WQUkU9rLjdirNGQ4LZ3zz4OdYlGA6CrW8sU/YEUMWf1
D031jbx5xe1pLuIp3gcZ+t5PIyV9NRo+VRupbBIA8n5bGZMCnAVNCZeDm9usiuar
J4HJJIsxKUpzPYyYpaufga4QIC6E0ZtbA53L7vPfP1vjolfCzbobnvCdda3oGwHO
NVLIF/U0IQrOObgBq+ifAbpHXcECAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKv+azGXFHMS7B+uBaJSo5ZOm7I1MB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzJmYjcwODE4LTIzNjYtNDJlMC05ZGJkLTI1NDM4MTA2OWU1Ny8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZmI3MDgx
OC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC9BQkZFNkIzMTk3MTQ3MzEy
RUMxRkFFMDVBMjUyQTM5NjRFOUJCMjM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS
AwQBZ7IIAwQHdwuAAwQFyqsAMA0EAgACMAcDBQAkBADIMA0GCSqGSIb3DQEBCwUA
A4IBAQBUfuCtxL4D4xKggjfMq9cLNXnhA6czxv0K64r+gRSXXNPblT3NjupkmXXE
lAZ5i/vkNzAb5u8MYij+knBZVBMWMHfXz5xWRzQk2VDQabpMBWytB5NnT00leidM
KTsuwETKZ/zI2mH1Q61jE/QjVH57m2/LPB3OX3kCFj+l7HsN5+dhOdl4xWMmU+Vu
U8BzGDqlTA8GWT/7j+rvZRvqBo81hBvLz2kHYEZ80eJnR+U2cpOUEoEDh/Q3olov
QtVfP0iy17dY4/Dn0ZJ9X+aSiHE8+T4kVCZdtpXbKLhbLutP5eu1C3rLwO0r1S9Q
zpg+VNiIYgiUzAQScYznZ6rMrI60
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:41 2026 by rpki-client