
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C9C56B3341FC31139F57F78A815CF9851E91375E.cer
File: C9C56B3341FC31139F57F78A815CF9851E91375E.cer (raw, json)
Hash identifier: 7WVaBcCC2yLlInjRBmjah/SepixI47TmGHBZHgK/5lc=
Subject key identifier: C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 61E1AB3ACCAD069632AECD2C11272FD6FEC55556
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:24:13 +0000
Certificate not after: Sun 02 May 2027 01:29:13 +0000
Subordinate resources: IP: 36.50.56.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e1:ab:3a:cc:ad:06:96:32:ae:cd:2c:11:27:2f:d6:fe:c5:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:24:13 2026 GMT
Not After : May 2 01:29:13 2027 GMT
Subject: CN=C9C56B3341FC31139F57F78A815CF9851E91375E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:1d:b6:db:4a:aa:29:e8:6c:cd:5d:e4:34:
27:90:cd:ed:cc:d0:a1:35:2e:cb:98:f5:16:5b:83:
01:7d:4e:6d:09:19:f0:4f:d5:80:e9:4f:8b:8f:8f:
52:13:75:58:14:b3:da:bc:dd:15:39:10:bd:f9:b2:
55:2e:b8:5e:b7:5b:41:5e:61:4c:4e:95:4d:af:a7:
90:cd:ab:77:f6:76:25:32:34:27:3e:dd:5c:f5:7b:
ec:39:f9:42:1d:73:f1:91:ef:ff:41:e4:1d:72:3d:
92:5d:6a:e0:17:60:de:ff:8b:7f:ad:3f:a5:ee:df:
a2:29:84:56:ed:5c:e2:aa:a5:96:3b:83:f9:8e:00:
3d:25:f5:b1:f6:bf:be:90:61:0e:8f:fa:3e:64:4c:
2f:4b:66:13:cd:cc:aa:ad:2e:e5:99:4c:cb:ca:5f:
a6:34:c4:f1:a2:94:44:e5:92:b5:db:b6:0b:f7:86:
33:ff:6e:4a:72:b1:51:6d:a9:c8:1a:a9:bd:ba:14:
e0:75:75:ba:92:df:73:a7:75:b5:0b:13:8b:f2:ef:
92:7f:52:cc:e9:8b:c2:05:ce:8f:c1:79:cd:6c:4f:
86:7f:66:ab:33:03:2b:6a:80:19:f2:36:68:d5:55:
e7:f4:5c:62:dc:49:17:e1:11:07:2b:82:dc:8a:1e:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C9:C5:6B:33:41:FC:31:13:9F:57:F7:8A:81:5C:F9:85:1E:91:37:5E
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/C9C56B3341FC31139F57F78A815CF9851E91375E.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.56.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:dc:de:73:ca:ce:b5:e6:a0:1c:a2:ff:e1:c3:10:41:34:b3:
54:ff:47:bd:5a:08:1f:bc:45:de:9b:dc:68:f2:2f:b6:9a:81:
66:62:9f:d6:55:8d:dd:c2:97:ff:6b:8f:9f:7a:b1:c8:e4:48:
da:bc:89:1f:f5:c2:2f:8e:79:66:e4:61:a4:50:fc:30:78:d1:
b3:7c:67:9f:a9:7c:43:0c:2e:3f:2d:ab:c8:f8:92:16:30:16:
60:b8:79:90:35:46:5d:08:4f:5f:e8:39:db:0e:17:a3:9f:a2:
ff:5c:bb:f5:e4:9d:36:32:2a:6c:73:d6:2a:d7:2d:8e:16:c9:
87:03:90:cb:f2:17:95:84:80:6e:03:b4:c0:a6:7e:b2:e2:9e:
c0:58:61:5d:9c:12:ff:51:ee:b7:ba:63:21:fc:30:0d:15:c0:
36:2b:74:a0:ac:ea:3a:b0:cf:a1:6c:79:15:cd:7b:34:39:68:
73:05:fe:00:c0:87:e3:f6:60:b8:28:4c:dc:35:f4:b6:03:a0:
ff:22:54:76:2b:48:97:07:59:12:1f:1c:43:9f:47:55:45:7e:
b2:77:28:cd:16:f9:3c:c2:0c:dd:00:f8:b3:6f:52:71:4e:a0:
cc:67:33:93:bb:ee:d3:29:c4:93:f5:e2:0c:73:e2:bc:de:50:
10:22:db:8c
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUYeGrOsytBpYyrs0sEScv1v7FVVYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjQxM1oX
DTI3MDUwMjAxMjkxM1owMzExMC8GA1UEAxMoQzlDNTZCMzM0MUZDMzExMzlGNTdG
NzhBODE1Q0Y5ODUxRTkxMzc1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIYbHbbbSqop6GzNXeQ0J5DN7czQoTUuy5j1FluDAX1ObQkZ8E/VgOlPi4+P
UhN1WBSz2rzdFTkQvfmyVS64XrdbQV5hTE6VTa+nkM2rd/Z2JTI0Jz7dXPV77Dn5
Qh1z8ZHv/0HkHXI9kl1q4Bdg3v+Lf60/pe7foimEVu1c4qqlljuD+Y4APSX1sfa/
vpBhDo/6PmRML0tmE83Mqq0u5ZlMy8pfpjTE8aKUROWStdu2C/eGM/9uSnKxUW2p
yBqpvboU4HV1upLfc6d1tQsTi/Lvkn9SzOmLwgXOj8F5zWxPhn9mqzMDK2qAGfI2
aNVV5/RcYtxJF+ERByuC3Ioeh7ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFMnFazNB/DETn1f3ioFc+YUekTdeMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
LzliOGE3ZmE1LWZkYTMtNGEzZS05MmY3LWZhYmZlZDA1YTk1Yy8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YjhhN2Zh
NS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC9DOUM1NkIzMzQxRkMzMTEz
OUY1N0Y3OEE4MTVDRjk4NTFFOTEzNzVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBJDI4MA0GCSqGSIb3DQEBCwUAA4IBAQAM3N5zys615qAcov/hwxBBNLNU/0e9
WggfvEXem9xo8i+2moFmYp/WVY3dwpf/a4+ferHI5EjavIkf9cIvjnlm5GGkUPww
eNGzfGefqXxDDC4/LavI+JIWMBZguHmQNUZdCE9f6DnbDhejn6L/XLv15J02Mips
c9Yq1y2OFsmHA5DL8heVhIBuA7TApn6y4p7AWGFdnBL/Ue63umMh/DANFcA2K3Sg
rOo6sM+hbHkVzXs0OWhzBf4AwIfj9mC4KEzcNfS2A6D/IlR2K0iXB1kSHxxDn0dV
RX6ydyjNFvk8wgzdAPizb1JxTqDMZzOTu+7TKcST9eIMc+K83lAQItuM
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:48 2026 by rpki-client