
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.cer
File: E6A33016E53869343D9E092CAE6DFB2D91CCD27C.cer (raw, json)
Hash identifier: UAZE7RkPZY9C4y09pKVuYlZ8MIEh16sENpRc9v8lcAE=
Subject key identifier: E6:A3:30:16:E5:38:69:34:3D:9E:09:2C:AE:6D:FB:2D:91:CC:D2:7C
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3F337CD47953E549DD11914DFFC616E87FFD7451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:22:53 +0000
Certificate not after: Sun 02 May 2027 01:27:53 +0000
Subordinate resources: IP: 103.184.48.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:33:7c:d4:79:53:e5:49:dd:11:91:4d:ff:c6:16:e8:7f:fd:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:22:53 2026 GMT
Not After : May 2 01:27:53 2027 GMT
Subject: CN=E6A33016E53869343D9E092CAE6DFB2D91CCD27C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:ca:3c:23:45:14:ec:d8:3d:9d:7a:59:64:
5c:f0:18:a1:6c:c0:05:ea:60:df:16:d6:c1:7f:66:
96:94:85:50:58:1f:f8:5a:e6:ea:8e:56:ac:cb:99:
83:27:54:30:6b:aa:db:cd:02:fb:cd:24:6b:0e:ec:
a2:ac:78:8d:46:6f:41:fb:de:b9:93:26:d0:45:e2:
b9:67:03:ab:ca:2f:29:f1:8a:a0:3e:5a:3f:b2:b9:
12:8b:5f:5a:58:ef:77:3e:6b:4a:3b:b5:42:6b:53:
ee:f9:7c:7c:cc:db:3f:aa:85:19:ab:70:f6:1a:74:
4f:5f:e6:4d:96:d8:8e:c3:31:d9:a0:4b:7c:ab:c7:
fd:d5:67:e5:7e:3b:64:87:e4:63:24:b3:5e:ad:8a:
a7:56:29:60:bc:2f:72:83:ea:95:76:88:4a:f8:d6:
4b:dc:bb:a5:bd:08:49:09:2a:17:0e:a7:e1:05:b5:
b7:8f:b1:be:f4:29:81:ba:3c:ed:8f:2c:f0:83:e5:
c5:17:14:2e:43:29:9c:7d:55:9e:e3:53:9e:aa:eb:
6f:7d:3b:66:82:23:ed:f3:2a:0f:df:5f:78:13:4c:
60:7d:1a:f3:1f:b7:c6:d8:7a:3c:95:6a:33:51:e7:
d9:ba:d1:80:d1:9d:9a:4a:fe:fc:f9:37:03:6c:e5:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E6:A3:30:16:E5:38:69:34:3D:9E:09:2C:AE:6D:FB:2D:91:CC:D2:7C
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E6A33016E53869343D9E092CAE6DFB2D91CCD27C.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.48.0/23
Signature Algorithm: sha256WithRSAEncryption
32:ba:93:76:e8:28:cf:79:ef:81:ed:b7:11:54:4c:f1:61:4d:
83:36:e0:60:05:58:75:0b:de:1f:b9:ed:02:69:00:0a:ee:04:
92:04:f2:7c:01:18:09:e8:7c:ff:2d:1d:88:72:11:8c:74:ff:
fd:f3:a2:ab:4d:f7:ec:e2:0d:ec:ed:45:3d:81:94:d2:c5:3b:
07:ad:01:0a:e1:a9:ee:22:e4:2b:8b:2d:b3:6c:79:76:f5:bb:
c9:79:e4:f6:a0:ac:a6:aa:9b:be:a9:92:ea:fe:ca:ad:42:02:
14:7b:c8:dc:bc:a0:c4:50:ca:c3:cb:1d:a7:a8:a9:d8:86:f7:
c0:35:3c:e4:fd:e1:05:15:46:d3:98:01:07:12:9e:bc:20:f0:
2c:70:ab:4d:72:63:e9:be:0f:04:76:4b:92:19:ce:75:47:5b:
6a:ee:57:f2:ef:96:29:c3:7b:a5:4d:bc:31:07:dc:ad:dc:42:
e8:91:8e:26:37:22:ef:0e:ae:8b:7e:7e:f9:2c:2d:06:ed:2b:
a6:15:02:f4:2f:62:1a:1d:6a:ec:2e:28:02:70:39:1f:dc:0b:
c8:19:d7:2a:5e:95:1f:91:58:59:10:d1:7a:55:77:8d:dc:e7:
73:73:a2:d4:13:df:16:54:51:8c:42:a2:67:e1:84:98:53:02:
ae:3b:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:45 2026 by rpki-client