
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer
File: F5C77B8E76386E06F7C5963580F72FFDB6260833.cer (raw, json)
Hash identifier: 32BmK5Yd4BuExO9WH98QeZv972Ii2p8vSqqGg6r0HDM=
Subject key identifier: F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 11E36106350F6E68DC624CAF29C5C422191396B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:07:56 +0000
Certificate not after: Sun 02 May 2027 02:12:56 +0000
Subordinate resources: IP: 103.210.2.0/23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e3:61:06:35:0f:6e:68:dc:62:4c:af:29:c5:c4:22:19:13:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:07:56 2026 GMT
Not After : May 2 02:12:56 2027 GMT
Subject: CN=F5C77B8E76386E06F7C5963580F72FFDB6260833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:22:02:47:84:d4:4e:24:8f:da:84:61:c2:
8f:f6:1d:a3:0e:0c:79:05:d2:59:e7:3e:1d:c3:63:
11:ce:87:36:5c:e5:21:db:10:59:1e:27:4f:20:b8:
d0:6e:48:56:5f:91:84:66:49:e3:a2:a8:03:19:c5:
79:ec:40:8c:af:f9:31:6d:54:18:54:6a:41:de:e1:
9b:2c:d9:20:5f:cc:32:b5:04:9e:4c:7b:d1:ec:2a:
4b:d4:6b:5b:8d:22:ef:50:70:59:2a:1d:6a:f5:f4:
27:2b:58:fb:77:ac:80:40:39:97:5b:03:2b:01:f8:
9e:72:ba:20:ae:98:29:82:17:5a:bb:d8:54:20:42:
85:44:08:2f:39:6b:bb:bd:31:9f:30:d0:46:25:fc:
28:91:29:48:28:92:74:d6:49:04:3e:4f:cb:51:7b:
e3:1e:bd:45:30:a4:f8:de:97:61:b3:6f:71:b1:72:
ab:83:24:98:c5:c3:15:85:b0:25:30:d8:fd:f4:26:
ab:64:72:e8:07:8b:4c:f8:05:e5:a5:65:f4:c3:8e:
6e:c7:9f:1a:1b:44:ed:ac:82:55:6b:cb:33:72:42:
21:b0:da:f9:c1:fa:8f:2f:77:be:da:93:89:eb:78:
5b:b9:01:77:38:25:4b:a6:85:61:7b:2a:33:70:b4:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.2.0/23
Signature Algorithm: sha256WithRSAEncryption
45:77:cd:f2:7a:19:d1:25:c6:6c:89:29:00:c5:f7:00:4a:24:
17:27:4a:c6:a0:04:59:5b:fd:64:e1:d1:13:29:d2:af:25:09:
f8:49:23:01:cb:7f:dd:f3:8f:38:21:81:e3:32:55:4d:8f:7d:
df:b5:35:7a:4f:e3:4c:99:1f:5e:28:28:9a:f6:d8:10:72:24:
e2:60:1b:34:2a:2e:5f:8a:2e:bf:fc:6a:18:0d:37:2a:72:af:
09:f1:b2:ff:d3:bf:8d:3e:4a:bc:c8:27:b6:f5:b4:9d:17:7e:
31:cf:af:84:27:92:69:2f:08:db:c1:65:84:c7:ed:03:59:0a:
ee:2e:47:b4:c2:f6:8d:b9:2b:8d:08:e1:3b:c1:49:61:5f:38:
51:ed:17:ee:a5:87:c5:19:5f:2f:e7:fc:8f:13:1a:05:94:1d:
58:4c:48:48:3f:23:f5:92:d5:74:63:81:7d:39:c8:3b:35:aa:
d2:d2:f1:a9:3a:77:e7:aa:76:8f:a8:1c:d2:fe:14:14:fe:b3:
ae:26:68:37:bc:0f:3e:d0:46:00:fe:de:8e:fc:61:c5:04:16:
73:a8:4c:eb:c2:4e:48:55:75:f8:c0:1e:eb:0e:ad:44:6a:d2:
d8:7f:b2:34:7e:ee:e1:4f:1c:07:cf:cf:b0:7d:6b:0f:bf:21:
95:0b:ca:26
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUEeNhBjUPbmjcYkyvKcXEIhkTlrcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDc1NloX
DTI3MDUwMjAyMTI1NlowMzExMC8GA1UEAxMoRjVDNzdCOEU3NjM4NkUwNkY3QzU5
NjM1ODBGNzJGRkRCNjI2MDgzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+TIgJHhNROJI/ahGHCj/Ydow4MeQXSWec+HcNjEc6HNlzlIdsQWR4nTyC4
0G5IVl+RhGZJ46KoAxnFeexAjK/5MW1UGFRqQd7hmyzZIF/MMrUEnkx70ewqS9Rr
W40i71BwWSodavX0JytY+3esgEA5l1sDKwH4nnK6IK6YKYIXWrvYVCBChUQILzlr
u70xnzDQRiX8KJEpSCiSdNZJBD5Py1F74x69RTCk+N6XYbNvcbFyq4MkmMXDFYWw
JTDY/fQmq2Ry6AeLTPgF5aVl9MOObsefGhtE7ayCVWvLM3JCIbDa+cH6jy93vtqT
iet4W7kBdzglS6aFYXsqM3C0VqkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPXHe452OG4G98WWNYD3L/22JggzMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2RmYzMwYzcxLWRmMmQtNGZjNy1iNDM1LTc1MTFkZjI4N2E2Yi8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZmMzMGM3
MS1kZjJkLTRmYzctYjQzNS03NTExZGYyODdhNmIvMC9GNUM3N0I4RTc2Mzg2RTA2
RjdDNTk2MzU4MEY3MkZGREI2MjYwODMzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ9ICMA0GCSqGSIb3DQEBCwUAA4IBAQBFd83yehnRJcZsiSkAxfcASiQXJ0rG
oARZW/1k4dETKdKvJQn4SSMBy3/d8484IYHjMlVNj33ftTV6T+NMmR9eKCia9tgQ
ciTiYBs0Ki5fii6//GoYDTcqcq8J8bL/07+NPkq8yCe29bSdF34xz6+EJ5JpLwjb
wWWEx+0DWQruLke0wvaNuSuNCOE7wUlhXzhR7RfupYfFGV8v5/yPExoFlB1YTEhI
PyP1ktV0Y4F9Ocg7NarS0vGpOnfnqnaPqBzS/hQU/rOuJmg3vA8+0EYA/t6O/GHF
BBZzqEzrwk5IVXX4wB7rDq1EatLYf7I0fu7hTxwHz8+wfWsPvyGVC8om
-----END CERTIFICATE-----
Generated at Tue May 12 22:39:07 2026 by rpki-client