
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
File: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer (raw, json)
Hash identifier: 0hbX59d9vUXifmPOLuJstAGD7PRt/AC0UnLFAJ2wjdM=
Subject key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 552B032F162C3ED79538B84BF043937E8E8A29C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:49:39 +0000
Certificate not after: Sun 02 May 2027 01:54:39 +0000
Subordinate resources: IP: 103.106.76.0/22
IP: 2001:df3:9f00::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:2b:03:2f:16:2c:3e:d7:95:38:b8:4b:f0:43:93:7e:8e:8a:29:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:49:39 2026 GMT
Not After : May 2 01:54:39 2027 GMT
Subject: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:f1:03:40:cd:42:d9:61:ee:9d:c0:cb:f3:
4b:33:db:b4:1b:65:56:51:78:33:25:80:56:15:77:
c8:50:43:ec:0a:4f:21:71:47:ff:91:85:00:e3:dc:
c3:77:d6:ea:d6:ff:89:af:68:35:e3:72:61:5b:d7:
4d:fc:be:5c:c0:dc:2e:62:1a:d6:28:92:18:4e:9d:
70:8b:36:27:53:1b:03:c7:37:ee:73:77:ae:72:91:
48:23:ae:ee:82:31:a6:65:49:68:78:74:72:70:7e:
80:a9:1e:70:45:b4:24:e9:f3:08:68:ef:d2:b9:b9:
c2:49:47:a7:5e:16:a4:41:b3:46:5e:b9:b3:fc:79:
a3:85:82:aa:fb:14:41:e6:ae:09:ed:bf:ef:f5:62:
d0:ff:0d:0e:c1:f5:43:ac:2a:63:2e:2c:49:4c:33:
12:47:67:37:ee:92:16:60:da:94:4c:9a:d9:f4:3e:
91:d5:ad:8f:26:de:4a:7e:80:8b:46:48:ca:79:0e:
59:07:33:cf:b0:f9:6a:34:8c:2f:13:14:18:a2:e8:
c6:cb:7a:3e:94:76:cc:ba:d0:82:c0:a3:51:2a:a4:
d5:50:8e:b7:59:1c:be:6d:30:dd:51:53:ca:e4:3d:
85:ee:ee:a5:49:b3:fd:70:79:dd:12:67:99:1d:ab:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.106.76.0/22
IPv6:
2001:df3:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
15:f3:64:d5:62:74:51:94:b3:48:d3:77:1e:72:73:57:b5:66:
17:f8:ec:0c:96:f7:05:30:bc:d1:3b:c2:41:f4:e1:18:fc:5f:
d9:39:27:e2:f1:db:f2:38:42:77:56:13:cb:62:19:34:88:2e:
46:73:6b:dc:48:b3:b7:bc:6c:2c:71:53:a7:21:82:b0:ee:d4:
ea:d3:b8:6f:5f:96:3d:9c:dd:79:7a:5a:b9:9b:86:12:11:34:
15:1b:24:f1:4b:3a:49:84:f1:55:53:f2:2d:ec:66:d9:89:43:
43:3d:98:bf:7a:ac:57:30:25:9f:a0:8e:c0:b9:eb:bb:8c:2d:
f3:d4:20:b3:2b:7d:d8:76:e4:f6:e0:67:6e:8c:83:c7:30:d3:
79:db:1c:ff:6a:15:8e:db:34:5f:8a:74:84:1d:ad:cb:7c:c3:
a8:6d:79:86:8d:9d:75:9e:71:08:30:75:e7:c3:7c:c4:8d:d3:
c8:5f:58:da:39:0d:43:a7:53:f0:c2:90:5c:28:fd:0d:03:49:
c0:62:9d:84:85:9d:6b:bd:e2:ac:38:9a:1d:71:54:9e:f5:e0:
28:ab:6b:b0:ab:a2:fb:41:71:b0:d3:7d:86:34:c4:a5:40:a0:
a6:1f:2f:20:9b:61:b7:90:91:01:79:06:22:ae:e4:dd:d2:a2:
04:30:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:32 2026 by rpki-client