
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
File: E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer (raw, json)
Hash identifier: 1kjYhYf5WWo6V/lZO/knN80BkHXm4tfBEbN6m68yWZE=
Subject key identifier: E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3977B946CD71D09E215577F890734C3B84300CC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:51:13 +0000
Certificate not after: Sun 02 May 2027 00:56:13 +0000
Subordinate resources: IP: 103.160.212.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:77:b9:46:cd:71:d0:9e:21:55:77:f8:90:73:4c:3b:84:30:0c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:51:13 2026 GMT
Not After : May 2 00:56:13 2027 GMT
Subject: CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:42:03:db:54:fe:1d:fe:b8:ab:3b:9c:3c:
61:40:fc:c1:c2:50:1b:1d:c6:b6:27:73:39:9b:86:
45:1a:1f:5e:71:8f:13:49:8d:f6:91:a0:58:37:2a:
58:a0:0e:ce:0c:72:c1:cb:8e:cf:84:2c:46:b6:6d:
2e:98:2d:f3:c6:fd:95:0f:8d:5b:9a:f8:9c:81:31:
69:ce:5f:bc:ca:70:dc:f1:89:e3:73:e1:ff:3a:f6:
63:a1:56:41:a5:0c:95:4f:55:c0:54:e0:62:95:45:
7b:7d:fe:a8:fb:23:5a:11:f4:3a:9f:b7:89:d7:b3:
e8:19:3c:d3:33:b1:3d:ad:56:b1:93:c4:07:2a:7d:
67:98:e1:f5:71:b7:da:2c:78:68:1d:23:f7:ea:a7:
17:26:5c:1d:9b:51:52:dc:7a:a6:1d:e6:f9:d1:70:
d7:59:2e:9f:84:e9:fb:ca:ce:73:b0:7e:25:6b:fd:
30:00:c2:55:b5:ea:a1:bc:70:bc:35:e7:ae:b4:9f:
ce:1e:a0:34:14:5f:5f:4a:74:4d:54:01:b1:0b:09:
da:b6:2c:ae:09:8d:65:d3:39:d3:6a:eb:27:ae:67:
19:1f:af:b1:d5:09:3f:bc:e0:c7:b8:ac:f7:ae:a6:
d1:b5:ff:18:aa:92:ab:fb:6c:bf:6a:fd:62:83:ba:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.212.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:e7:9d:30:72:fd:a8:b0:57:2f:10:c5:22:e8:3a:3f:ae:c9:
61:d5:a1:6c:0e:02:3b:9c:5f:ff:52:1b:a8:03:2b:b4:38:2d:
14:aa:47:55:ce:79:55:d0:08:55:90:9d:76:fb:ab:8b:21:d7:
da:c8:f4:5d:6c:9d:57:bf:7a:56:9a:b8:2c:63:38:cf:06:f2:
f3:0d:0d:08:9c:64:76:06:43:3d:5b:86:90:0b:cb:1a:c2:d2:
e7:19:b5:62:0a:c7:68:b5:88:f6:1e:53:29:5a:65:4b:74:8a:
b8:b9:a4:cc:a5:ec:c5:64:ac:8d:d5:cb:e7:ee:99:bb:ae:c7:
99:6d:87:c8:e0:ca:e3:c4:63:f6:84:66:90:82:28:c4:8b:05:
4c:eb:e4:7b:0b:58:c0:1b:17:4d:61:d2:af:80:c5:f3:f0:19:
b1:26:79:bc:60:0e:71:87:c9:f4:69:61:d4:7d:a9:11:b8:a5:
5c:68:b9:2f:77:58:48:93:54:3f:24:21:4e:5a:8f:a6:05:fd:
d4:d0:5d:a6:f5:52:b8:3a:64:91:96:54:6b:c3:87:d4:bb:61:
26:b0:82:b4:28:ba:62:62:ac:7b:7d:4a:0a:c2:d1:cf:84:47:
c8:0c:51:c0:5b:60:b5:91:2c:ac:dc:98:ed:d9:dd:a5:32:43:
73:ba:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:58 2026 by rpki-client