
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.cer
File: E55C0694A6F8FBB7931CD1934E9094E1ED77A801.cer (raw, json)
Hash identifier: dVfmgFOoxe0urgFsSx66VKjLWt2YIpJDc5GhL4kwpY0=
Subject key identifier: E5:5C:06:94:A6:F8:FB:B7:93:1C:D1:93:4E:90:94:E1:ED:77:A8:01
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3726EB555A28C116B15A0075F3D8896EDC2BF1D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 00:54:53 +0000
Certificate not after: Sun 02 May 2027 00:59:53 +0000
Subordinate resources: IP: 103.85.60.0/22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:26:eb:55:5a:28:c1:16:b1:5a:00:75:f3:d8:89:6e:dc:2b:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 00:54:53 2026 GMT
Not After : May 2 00:59:53 2027 GMT
Subject: CN=E55C0694A6F8FBB7931CD1934E9094E1ED77A801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:75:02:ae:2e:bd:84:9b:cf:32:2f:a5:d0:
15:cb:f9:df:86:8f:ea:c3:16:75:ff:97:f5:df:d1:
61:d7:cc:3d:8a:c6:7e:fe:fc:2d:b9:dd:fd:12:a4:
a7:c6:aa:fd:88:7c:d2:b7:5b:65:33:39:da:6e:55:
b0:13:4d:d7:cb:0e:72:89:58:4c:bd:25:89:a5:e8:
b7:4f:2c:35:b2:ef:f5:ca:e2:a0:3e:a1:ae:9c:0a:
1a:d9:dd:93:99:e6:63:47:c1:4e:20:2c:54:59:3f:
78:66:c1:14:db:75:8e:30:9e:be:02:fd:08:01:f5:
ae:4c:97:fb:ad:00:f6:0a:1d:cc:e1:60:00:53:d5:
4b:0d:7c:a6:d9:47:d9:7d:af:fb:2b:b0:4e:5b:1c:
c9:5e:6f:73:9e:97:eb:1e:c8:4b:2f:33:15:9c:17:
11:31:d3:fb:31:15:29:2a:35:4c:73:c7:1b:9f:48:
a6:b3:9a:7b:5e:7b:61:5e:de:84:bf:c8:d1:e4:34:
05:96:82:00:77:61:08:37:d8:df:0d:83:ab:41:33:
a3:c6:57:83:d9:42:1b:4e:4f:c9:f3:38:07:e7:85:
d6:25:2b:dc:5f:50:93:84:b2:a0:cd:a7:61:32:24:
68:62:ed:b6:36:82:41:e2:df:fe:ac:92:95:94:78:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E5:5C:06:94:A6:F8:FB:B7:93:1C:D1:93:4E:90:94:E1:ED:77:A8:01
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/71f134b1-a617-4bab-91ab-13810235401b/0/E55C0694A6F8FBB7931CD1934E9094E1ED77A801.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.85.60.0/22
Signature Algorithm: sha256WithRSAEncryption
12:eb:90:0a:2c:72:2c:23:8f:eb:77:db:c2:e9:3f:96:48:7b:
96:3e:a6:4e:2a:6a:f2:be:a0:0a:a4:53:6d:e1:52:1d:da:08:
27:7c:6d:28:e4:de:b1:bc:17:1d:b5:65:31:3e:98:d6:82:e2:
26:d5:6e:00:de:53:4b:ae:72:1a:bc:c3:cc:0d:43:12:86:42:
6d:3d:73:69:66:a4:15:b8:20:f2:19:b0:e5:fe:47:1d:8b:c7:
56:c4:21:75:b2:38:a6:93:b9:3a:5b:9a:d7:58:b9:d5:46:9a:
a3:e6:e9:d3:53:28:3c:89:81:fa:88:2a:03:d6:d3:82:92:89:
73:73:18:8c:12:5a:85:5d:1d:83:29:aa:61:62:ad:4c:ee:bf:
60:dc:d2:ae:cf:17:85:7f:ef:3a:c0:26:fb:d2:3a:2a:38:37:
c5:36:de:c0:a0:51:21:5a:88:6c:f4:89:69:68:f4:ad:87:fa:
c5:66:04:34:f3:c0:06:45:92:c5:ff:7d:1a:1b:68:f0:93:d9:
80:d8:df:a7:b6:58:2f:81:73:bd:67:19:60:61:81:b3:6a:81:
4f:c9:d9:cd:f9:9d:82:d9:06:f2:a4:38:5e:47:42:2c:dc:e2:
b8:3a:48:32:aa:a6:2f:cf:9a:4b:d0:e6:0d:ed:7d:5f:44:ac:
4f:91:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:53 2026 by rpki-client