
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer
File: C2B50C176FE80567FC831542D1C8AC57BD65209A.cer (raw, json)
Hash identifier: 1YmPPMyCJKtHr9yp5hnk3TEI7GiQs11DUK/P2QT7O/k=
Subject key identifier: C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 16A4221C3B82C4EC90A50DF1BCC79266E63B0735
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:15:04 +0000
Certificate not after: Sun 02 May 2027 00:20:04 +0000
Subordinate resources: IP: 163.128.10.0/24
IP: 2001:df6:c840::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a4:22:1c:3b:82:c4:ec:90:a5:0d:f1:bc:c7:92:66:e6:3b:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:15:04 2026 GMT
Not After : May 2 00:20:04 2027 GMT
Subject: CN=C2B50C176FE80567FC831542D1C8AC57BD65209A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:58:11:68:af:aa:d1:c5:15:b3:2f:0c:56:
19:f6:6a:ba:ee:84:5f:51:b0:30:b5:83:3e:15:36:
1e:e1:a5:08:8d:8c:54:a7:25:a8:d2:41:bb:eb:3d:
b6:c3:cd:bb:bb:65:c5:df:4d:b7:58:60:a3:31:11:
6a:11:ab:3b:48:bb:13:9e:51:cd:27:3a:b7:7a:c6:
ff:35:cf:1b:eb:0e:c8:c0:cc:77:39:60:d6:07:47:
42:a1:53:2d:a9:89:99:c5:c4:f5:02:8b:c9:81:fa:
59:63:f5:78:62:a5:26:2c:fb:a5:5b:77:39:6c:a4:
ed:7b:05:c2:00:3d:14:54:a9:35:40:15:a2:53:2e:
e2:73:fd:6d:c3:a0:ed:c2:69:bf:c6:34:df:5d:78:
cb:e3:d9:b5:d1:85:27:ea:74:5a:d0:08:51:be:07:
3e:ad:27:42:4d:85:67:06:48:ac:64:99:a0:cb:79:
10:9d:26:f0:9a:a9:9a:e9:5b:c1:e5:82:ca:7b:4b:
dc:69:00:48:6a:e9:91:55:5f:19:14:f9:45:14:99:
fb:44:bb:68:a9:18:fc:63:2f:60:9f:a7:29:13:39:
a9:35:6c:66:9e:45:25:23:f1:dc:73:a8:9a:e2:d5:
62:9f:4d:3e:3e:0d:8c:14:42:85:7f:23:5a:08:22:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.10.0/24
IPv6:
2001:df6:c840::/48
Signature Algorithm: sha256WithRSAEncryption
28:ac:33:6a:5b:a9:a3:e9:bb:e2:83:f9:7d:6a:14:af:e9:55:
0f:81:cb:bb:05:4d:ee:5b:40:fd:6d:13:6c:d8:b5:a2:3d:70:
67:a2:b1:6d:de:e0:e1:01:6b:92:7d:ec:29:c2:8f:39:00:f3:
26:38:11:ee:22:e3:b7:89:f1:4c:03:4a:80:75:60:c1:93:aa:
47:24:8f:9f:d6:bb:34:e0:4a:fc:a1:54:0e:df:6a:e4:51:41:
68:da:75:e9:c9:81:4e:60:ed:6c:2e:5d:62:84:84:1a:21:04:
bb:9c:ba:a7:4d:5e:06:d6:5b:e2:5d:1e:ed:e6:ed:43:b5:16:
cf:dc:87:a2:7d:3b:7c:7a:19:c2:a1:d5:89:eb:47:45:d9:9e:
1f:85:35:8e:7b:e6:f6:c6:bd:a3:ce:ff:41:f0:e0:c5:16:f8:
20:b2:32:f9:7c:ca:95:f4:c2:d1:e1:59:68:22:9c:9d:c8:15:
e2:65:23:40:df:12:b6:58:14:af:72:08:70:aa:d9:70:98:c4:
b1:70:8f:b3:66:45:3a:f2:dc:4c:87:b2:94:2c:eb:a2:f7:03:
66:2b:2e:b6:1d:43:dc:c5:06:a4:e4:07:75:bd:a4:e3:de:43:
1b:64:63:98:53:94:f0:13:c6:5e:5a:b9:eb:fd:2c:c6:78:fb:
46:c4:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:22 2026 by rpki-client