
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F6354755B734FD4C86834DEEDCB911BEE9694CE5.cer
File: F6354755B734FD4C86834DEEDCB911BEE9694CE5.cer (raw, json)
Hash identifier: +Q5AN6f74NU46Ab7pYphdjN8mIVwab/7drW94yP5nm0=
Subject key identifier: F6:35:47:55:B7:34:FD:4C:86:83:4D:EE:DC:B9:11:BE:E9:69:4C:E5
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0135DB2162276983AF3FEEA3F1A7D47EBF41EDC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/F6354755B734FD4C86834DEEDCB911BEE9694CE5.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:26:06 +0000
Certificate not after: Sun 02 May 2027 01:31:06 +0000
Subordinate resources: IP: 103.120.124.0/23
IP: 2001:df6:1300::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:35:db:21:62:27:69:83:af:3f:ee:a3:f1:a7:d4:7e:bf:41:ed:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:26:06 2026 GMT
Not After : May 2 01:31:06 2027 GMT
Subject: CN=F6354755B734FD4C86834DEEDCB911BEE9694CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:fd:59:4e:b4:bc:93:0f:b9:59:46:99:90:
a3:5b:10:f4:86:0d:fc:f9:bd:a2:7e:16:b5:27:b4:
ca:62:8b:e8:f9:54:5a:bc:8b:5f:ca:ee:86:be:b2:
9b:59:17:ac:d7:d6:33:1a:4a:44:2d:74:e8:91:80:
f6:67:9a:71:77:f6:5a:18:c2:44:a6:48:e2:90:81:
e6:50:9a:3f:c1:36:e7:06:e5:22:5a:a3:6f:5b:12:
fb:6c:31:16:c1:ed:55:85:b9:ca:c6:5a:fb:0d:1d:
e7:0e:93:56:f4:c5:41:5b:ac:60:14:31:2f:12:4b:
26:1a:80:50:d1:44:bb:60:41:2c:52:a2:77:1e:51:
a0:78:15:cd:98:68:05:65:78:81:63:78:e8:db:dc:
80:90:b9:4d:d7:e5:65:f7:9e:2b:db:f2:c3:7a:a6:
cc:3e:c7:c3:7e:fa:f7:cc:9e:51:e7:9d:54:c4:b1:
c3:7b:22:05:53:71:4e:92:59:c9:2c:56:b5:13:16:
2e:74:1b:5b:44:bf:c3:83:6a:71:1c:b2:fb:e3:8c:
57:f2:74:bc:9e:ff:07:b9:45:21:86:59:9f:08:3d:
71:0b:95:29:58:05:a9:ad:f7:70:a8:f4:fb:7e:8e:
ee:b3:83:1a:6a:af:33:10:4d:64:a4:73:5f:b1:b9:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F6:35:47:55:B7:34:FD:4C:86:83:4D:EE:DC:B9:11:BE:E9:69:4C:E5
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/F6354755B734FD4C86834DEEDCB911BEE9694CE5.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.124.0/23
IPv6:
2001:df6:1300::/48
Signature Algorithm: sha256WithRSAEncryption
0e:8c:e2:b3:6a:e7:5f:25:a0:ad:f8:52:30:23:2c:42:fe:26:
29:25:23:00:25:e0:23:d3:eb:44:ef:cc:d5:be:45:71:1b:fe:
78:03:dc:84:9b:80:49:15:54:4c:b3:20:a0:86:d9:b1:4d:b6:
2d:46:20:f3:ef:27:84:dc:81:a2:23:aa:61:7a:d5:7e:d7:9f:
cc:83:06:21:f3:fd:9c:55:84:a4:1d:65:bc:84:44:86:e9:3e:
8f:1d:d4:12:3f:6d:c7:2c:78:19:4c:07:03:d0:75:45:06:05:
05:c4:30:35:b6:bf:db:c7:a0:e0:b3:5e:05:a9:53:57:35:6a:
bd:5e:11:ac:6e:1f:a6:08:8c:f7:06:4c:53:83:64:cf:df:cc:
d7:46:04:fa:5d:63:d9:4c:a8:87:5f:52:4e:23:6c:64:ba:86:
2d:3b:a5:f2:06:d0:ee:9c:5a:4c:0b:ed:d8:06:cb:34:65:e2:
52:95:ea:6c:5d:9b:a9:5f:34:5b:9d:3b:28:c0:ba:fc:ed:4e:
a1:6e:e8:aa:f3:3c:70:c7:29:c9:bc:f7:24:f0:48:f6:4f:c5:
db:d1:38:97:c3:31:3e:cb:42:fd:4c:56:96:8e:de:6d:5c:80:
17:c6:6a:82:0f:7c:51:6a:44:18:c9:8d:c3:6c:9d:f8:98:ef:
8e:15:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:43 2026 by rpki-client