
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
File: AF6B7BCDACF90BA83205EA298327379BAB489418.cer (raw, json)
Hash identifier: tgRMOkITbCqKxLOluDNn+BR5FeXyK+ybvdt+W/irT9Y=
Subject key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 273239F2EFA1E6B40244AD4F2DC09BB4380D3CCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:39:53 +0000
Certificate not after: Sun 02 May 2027 00:44:53 +0000
Subordinate resources: IP: 103.55.139.0/24
IP: 103.95.6.0/23
IP: 103.220.113.0/24
IP: 2404:a640::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:32:39:f2:ef:a1:e6:b4:02:44:ad:4f:2d:c0:9b:b4:38:0d:3c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:39:53 2026 GMT
Not After : May 2 00:44:53 2027 GMT
Subject: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:d7:90:d3:31:15:c5:37:50:34:99:5e:0d:
45:01:db:33:33:74:a5:eb:79:55:50:68:42:9b:44:
b0:f4:fb:2e:7c:bb:95:93:9c:a3:3d:f0:81:8a:c1:
07:c3:32:6e:dd:d9:97:0a:26:d9:71:82:98:b3:b5:
cc:80:56:a0:de:9d:29:66:63:53:90:dd:5a:73:0c:
c7:8c:33:46:99:c0:df:f2:06:f3:53:0c:0b:bf:fc:
b1:28:d5:ac:3b:d9:33:d8:d5:8d:d9:9d:3d:c8:70:
36:2d:0b:6f:64:cd:eb:a6:75:31:f6:34:5d:99:90:
bd:85:fc:09:5a:41:df:c4:49:35:0d:df:ee:83:6f:
d4:4e:28:81:13:37:e0:15:a3:0b:1f:bb:dd:8f:1f:
5f:ab:7e:3b:c4:6a:38:bb:b7:88:7f:d9:5c:2a:d9:
e9:ee:f0:07:d5:bd:3f:66:86:09:31:fe:6d:b2:f7:
ea:0e:8f:ea:01:1e:d2:45:11:6c:4b:fd:71:31:79:
3d:8e:9b:dc:22:1a:09:40:fe:f2:47:2d:62:0d:2d:
f8:ec:e2:80:05:f5:2e:de:ca:ec:ac:0d:27:46:6d:
81:14:ed:bd:16:b0:72:7d:7f:2f:ab:0e:65:5a:28:
ba:2b:81:1f:5a:73:82:31:ea:93:66:8f:d3:ee:40:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.139.0/24
103.95.6.0/23
103.220.113.0/24
IPv6:
2404:a640::/32
Signature Algorithm: sha256WithRSAEncryption
0c:36:f4:65:31:ef:d9:ac:87:5d:ea:b7:9a:d7:77:80:a3:c8:
a4:ad:af:0f:8f:4d:07:7c:95:94:82:1e:c4:13:72:f8:90:79:
61:bc:80:bd:80:f4:fc:d4:08:03:dc:52:8b:ff:8f:48:16:43:
09:29:33:e4:f9:0d:f0:b4:ff:94:f4:d7:00:43:ac:02:09:51:
a9:43:89:ed:32:7c:3c:73:df:f3:ce:fc:95:9f:7d:34:f3:27:
ed:ea:2f:68:74:6e:cf:05:2b:cb:76:65:a6:6b:1e:07:e9:cd:
50:99:82:16:97:11:8e:52:f5:8c:38:fa:bb:e7:da:50:ff:b8:
f0:d6:3c:0e:5c:79:da:15:0d:4b:23:08:b8:21:47:bb:fc:55:
be:90:38:61:3c:51:c2:f5:97:21:da:43:7d:34:de:aa:f0:4a:
29:bb:12:25:63:60:5e:a3:82:c5:11:9a:00:41:54:28:d0:b9:
53:77:41:7f:71:1e:ee:a7:ce:30:48:4e:92:21:3e:85:f9:eb:
55:2c:25:d7:6a:fd:06:f5:15:f0:3a:f9:67:46:25:3c:e1:27:
b0:e3:15:8f:37:d2:d5:e8:48:0c:cc:d2:a5:38:6a:8d:ea:0f:
e2:1b:2f:8c:08:71:e6:4d:fc:1f:36:5d:c8:ee:89:93:d7:e8:
89:71:5d:c4
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIUJzI58u+h5rQCRK1PLcCbtDgNPM4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzk1M1oX
DTI3MDUwMjAwNDQ1M1owMzExMC8GA1UEAxMoQUY2QjdCQ0RBQ0Y5MEJBODMyMDVF
QTI5ODMyNzM3OUJBQjQ4OTQxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKcv15DTMRXFN1A0mV4NRQHbMzN0pet5VVBoQptEsPT7Lny7lZOcoz3wgYrB
B8Mybt3Zlwom2XGCmLO1zIBWoN6dKWZjU5DdWnMMx4wzRpnA3/IG81MMC7/8sSjV
rDvZM9jVjdmdPchwNi0Lb2TN66Z1MfY0XZmQvYX8CVpB38RJNQ3f7oNv1E4ogRM3
4BWjCx+73Y8fX6t+O8RqOLu3iH/ZXCrZ6e7wB9W9P2aGCTH+bbL36g6P6gEe0kUR
bEv9cTF5PY6b3CIaCUD+8kctYg0t+OzigAX1Lt7K7KwNJ0ZtgRTtvRawcn1/L6sO
ZVoouiuBH1pzgjHqk2aP0+5AocUCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFK9re82s+QuoMgXqKYMnN5urSJQYMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzVhOTkwMTI1LTYwOWEtNDhjOC1hYzg2LTFjM2JjMzE1YmFkNi8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YTk5MDEy
NS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC9BRjZCN0JDREFDRjkwQkE4
MzIwNUVBMjk4MzI3Mzc5QkFCNDg5NDE4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS
AwQAZzeLAwQBZ18GAwQAZ9xxMA0EAgACMAcDBQAkBKZAMA0GCSqGSIb3DQEBCwUA
A4IBAQAMNvRlMe/ZrIdd6rea13eAo8ikra8Pj00HfJWUgh7EE3L4kHlhvIC9gPT8
1AgD3FKL/49IFkMJKTPk+Q3wtP+U9NcAQ6wCCVGpQ4ntMnw8c9/zzvyVn3008yft
6i9odG7PBSvLdmWmax4H6c1QmYIWlxGOUvWMOPq759pQ/7jw1jwOXHnaFQ1LIwi4
IUe7/FW+kDhhPFHC9Zch2kN9NN6q8EopuxIlY2Beo4LFEZoAQVQo0LlTd0F/cR7u
p84wSE6SIT6F+etVLCXXav0G9RXwOvlnRiU84Sew4xWPN9LV6EgMzNKlOGqN6g/i
Gy+MCHHmTfwfNl3I7omT1+iJcV3E
-----END CERTIFICATE-----
Generated at Tue May 12 22:47:49 2026 by rpki-client