
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
File: C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer (raw, json)
Hash identifier: eOwt5eCdcHqDbW9Njtb7sr5z2OBijv4usdC3B8a6V9I=
Subject key identifier: C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4D6093E0B7632E84AB6259F8B84E487F48C636B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:16:32 +0000
Certificate not after: Sun 02 May 2027 01:21:32 +0000
Subordinate resources: IP: 103.140.76.0/23
IP: 2404:fa40::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:60:93:e0:b7:63:2e:84:ab:62:59:f8:b8:4e:48:7f:48:c6:36:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:16:32 2026 GMT
Not After : May 2 01:21:32 2027 GMT
Subject: CN=C92E90B711F341989DF94E2CE7301FDCDCDB3843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:bc:48:1c:f8:c8:4d:d8:de:94:e1:32:ec:
6a:2c:b6:17:98:1b:72:23:52:f5:d6:3d:43:25:ce:
ab:cc:b8:c5:71:01:2a:b3:24:24:24:07:34:9b:07:
a8:ee:c5:11:f5:cc:9c:96:cc:b3:6d:cf:13:78:ea:
59:45:c4:2b:21:60:4e:44:04:1f:b0:64:27:0c:bc:
0d:24:51:ca:fb:4f:33:e4:c3:43:02:9d:a6:ab:26:
33:f0:19:6d:63:6a:89:be:d7:2f:b4:09:72:cf:64:
8a:09:b4:3e:4b:e7:17:c0:d1:b3:b6:90:66:a4:f6:
e8:62:6d:8c:50:c4:a8:af:d2:f6:54:2b:e0:7f:b3:
dd:73:98:19:c1:24:05:2c:00:d8:12:15:1c:44:50:
93:7c:d9:f6:7d:3b:af:5d:e2:95:ce:41:38:ab:42:
8b:35:48:d7:00:b3:c2:e6:12:1d:78:65:0a:5b:8c:
dd:6b:bc:03:6c:94:76:bb:b9:31:44:d9:4d:fe:d9:
25:28:01:25:47:1a:dc:9c:d8:18:ba:17:a2:c6:cc:
d5:8f:ee:5f:10:60:25:9e:47:e2:b4:16:8a:75:7a:
34:b5:b7:41:d9:f6:55:7a:c4:59:1f:b3:45:de:9a:
dc:6b:65:51:7e:d4:32:03:19:c6:e7:19:db:d3:5e:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.76.0/23
IPv6:
2404:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
70:f8:2f:4e:70:d2:50:54:a2:a8:d0:db:1f:8a:82:3c:39:f8:
7b:ed:ef:b5:a2:44:92:e8:fe:57:da:5a:7b:2b:7f:69:92:e1:
b1:da:30:e0:4f:9c:29:60:b2:16:08:d7:e7:a0:16:2d:36:d4:
eb:80:ec:37:36:6b:87:5f:f2:77:89:a3:0b:ba:3e:93:1b:5f:
48:a3:e4:64:79:8c:03:3e:14:ba:3f:46:83:b9:27:18:3a:f5:
89:06:a9:39:ca:dc:65:d0:4b:96:42:81:bc:f9:37:3e:e8:06:
f2:44:ab:c6:24:48:bd:af:f8:72:b5:7a:85:01:b9:a3:24:08:
1c:0f:10:d8:e4:f8:09:e9:98:be:51:49:f0:9a:75:bc:29:18:
3f:0d:d5:59:71:1a:79:b4:0b:97:1e:61:3c:e5:64:dd:cb:6b:
2e:6c:98:16:27:15:62:76:7b:18:98:93:24:f5:a5:8f:da:d6:
f2:52:5b:ea:27:48:ac:3a:9b:16:85:c6:45:cc:ac:2b:50:81:
4b:23:80:c1:f0:bf:a0:f1:89:46:a2:46:fc:99:8b:ba:42:e1:
09:52:f1:cb:df:f2:d2:9e:d2:8c:85:9a:dd:d6:b2:6c:8a:54:
53:13:b3:0a:bb:9e:44:40:64:c6:6a:7d:19:f3:2c:01:ba:33:
20:1c:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:37 2026 by rpki-client