
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
File: EB314E0C129A5CAF077447531422664A0DBA21EB.cer (raw, json)
Hash identifier: gYKmpOm6C69fJVctfwp7nscSwjt7d/Lf5b+C+42C23U=
Subject key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 697EE17D1A8AC5FB9BB0E09DC5AD94003BD79E4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:58:35 +0000
Certificate not after: Sun 02 May 2027 02:03:35 +0000
Subordinate resources: IP: 103.49.228.0/22
IP: 2402:580::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7e:e1:7d:1a:8a:c5:fb:9b:b0:e0:9d:c5:ad:94:00:3b:d7:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:58:35 2026 GMT
Not After : May 2 02:03:35 2027 GMT
Subject: CN=EB314E0C129A5CAF077447531422664A0DBA21EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:d9:c0:80:94:e4:c1:4a:08:5f:57:3b:01:
ab:ec:df:87:89:c1:d5:ee:94:18:00:10:88:41:71:
4c:62:f2:f9:44:94:e4:6d:2e:ee:a8:56:c4:5e:41:
4b:54:f3:41:4e:02:f2:d1:a6:86:03:fc:47:ec:cd:
11:11:a5:39:0d:9b:d5:cc:25:76:63:fc:6c:bf:e0:
43:ac:e5:77:1e:59:55:f6:90:73:11:0f:6a:09:e7:
62:e9:c9:82:fd:ea:c2:1c:bd:ef:70:fa:69:18:8f:
41:8f:eb:36:36:67:ad:59:3a:10:3c:b6:28:9a:2c:
5d:58:10:5a:5d:8f:2e:b6:a9:1b:a9:b8:23:54:34:
eb:d4:2f:07:57:b5:f2:0b:18:57:90:2e:bc:e6:88:
68:12:ad:07:25:9e:e3:8f:43:99:d4:e2:2b:96:a8:
a7:e7:f1:34:77:a9:72:9c:9e:d8:af:f6:4c:f9:dd:
35:1b:53:17:21:c4:95:d7:cb:f5:08:bc:5f:65:7c:
1f:38:7d:f8:c0:d5:e5:a2:20:05:fd:e8:7f:8d:fc:
7f:35:08:a2:6e:e4:e5:55:c0:22:dc:d9:82:f4:6c:
e4:44:f3:7c:bb:f4:58:47:65:73:2f:77:85:8c:aa:
8c:52:1e:3b:06:5c:eb:6c:b9:f7:57:c8:54:68:da:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.228.0/22
IPv6:
2402:580::/32
Signature Algorithm: sha256WithRSAEncryption
47:b5:4e:fa:21:8b:e0:3f:1a:40:d1:ad:41:38:02:de:ff:ff:
a8:04:29:e3:1b:99:18:c4:07:4e:e7:64:55:de:5f:2b:ca:8d:
6c:42:8e:09:31:92:f1:95:86:76:34:69:19:97:19:c0:05:a2:
a6:f8:e8:fe:32:dd:6e:ae:81:ad:23:68:5e:d7:f4:c1:29:d1:
ae:92:39:ed:84:3f:b4:f1:67:5d:5e:44:5c:2c:f5:b2:f3:03:
b0:5b:40:c2:9e:99:e5:e8:63:27:87:c0:a6:f2:54:7e:a4:3c:
b3:f9:b9:c5:33:df:34:15:9d:be:c3:d9:51:48:fc:51:ea:80:
38:09:3f:b4:56:17:50:9f:6e:82:5d:a6:61:8c:bf:38:8f:b6:
bf:d3:e3:08:8a:00:37:4a:a1:97:d4:09:64:05:e2:af:49:92:
3b:05:8c:96:aa:a9:c7:26:c9:b2:10:93:d3:e0:c2:12:99:e9:
e5:8d:79:ba:03:cc:d6:7a:79:85:a4:cb:07:37:36:26:9f:4f:
e1:76:27:8e:40:4a:b1:ac:c2:c5:23:3a:7d:51:cf:15:19:fe:
de:b8:7e:2d:e9:be:21:44:11:f5:cf:1f:b4:ea:7b:92:9e:6b:
65:a8:e7:cf:3e:d8:c1:2d:64:e1:7f:ec:83:09:0f:1b:bb:f5:
13:25:04:7d
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIUaX7hfRqKxfubsOCdxa2UADvXnkwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgzNVoX
DTI3MDUwMjAyMDMzNVowMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0
NzUzMTQyMjY2NEEwREJBMjFFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANko2cCAlOTBSghfVzsBq+zfh4nB1e6UGAAQiEFxTGLy+USU5G0u7qhWxF5B
S1TzQU4C8tGmhgP8R+zNERGlOQ2b1cwldmP8bL/gQ6zldx5ZVfaQcxEPagnnYunJ
gv3qwhy973D6aRiPQY/rNjZnrVk6EDy2KJosXVgQWl2PLrapG6m4I1Q069QvB1e1
8gsYV5AuvOaIaBKtByWe449DmdTiK5aop+fxNHepcpye2K/2TPndNRtTFyHEldfL
9Qi8X2V8Hzh9+MDV5aIgBf3of438fzUIom7k5VXAItzZgvRs5ETzfLv0WEdlcy93
hYyqjFIeOwZc62y591fIVGja9GkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOsxTgwSmlyvB3RHUxQiZkoNuiHrMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2QzNzE5MjlkLWMzZDAtNGRhYS1iNWZkLWEyNDk1NjBkNWQwNC8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMzcxOTI5
ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9FQjMxNEUwQzEyOUE1Q0FG
MDc3NDQ3NTMxNDIyNjY0QTBEQkEyMUVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG
AwQCZzHkMA0EAgACMAcDBQAkAgWAMA0GCSqGSIb3DQEBCwUAA4IBAQBHtU76IYvg
PxpA0a1BOALe//+oBCnjG5kYxAdO52RV3l8ryo1sQo4JMZLxlYZ2NGkZlxnABaKm
+Oj+Mt1uroGtI2he1/TBKdGukjnthD+08WddXkRcLPWy8wOwW0DCnpnl6GMnh8Cm
8lR+pDyz+bnFM980FZ2+w9lRSPxR6oA4CT+0VhdQn26CXaZhjL84j7a/0+MIigA3
SqGX1AlkBeKvSZI7BYyWqqnHJsmyEJPT4MISmenljXm6A8zWenmFpMsHNzYmn0/h
dieOQEqxrMLFIzp9Uc8VGf7euH4t6b4hRBH1zx+06nuSnmtlqOfPPtjBLWThf+yD
CQ8bu/UTJQR9
-----END CERTIFICATE-----
Generated at Wed May 13 01:07:03 2026 by rpki-client