
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
File: 6176447D40001B20E000D73A3B5E66B74A431374.cer (raw, json)
Hash identifier: 1VrSzZbKtDVSUqIKHNY410+PNEXOybk9frmNM7/J/0I=
Subject key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 6ACB99CE94027457EB2EC8CDD32F2B4611E4C0EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Apr 2026 09:39:35 +0000
Certificate not after: Fri 16 Apr 2027 09:44:35 +0000
Subordinate resources: IP: 160.19.144.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 06:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:cb:99:ce:94:02:74:57:eb:2e:c8:cd:d3:2f:2b:46:11:e4:c0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Apr 17 09:39:35 2026 GMT
Not After : Apr 16 09:44:35 2027 GMT
Subject: CN=6176447D40001B20E000D73A3B5E66B74A431374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:81:53:ab:1c:e3:9a:c6:6f:35:df:7c:3e:
d6:64:b4:ff:18:86:9e:06:82:93:bf:89:ce:1b:63:
77:79:36:04:75:20:ae:4b:80:92:38:b5:b3:35:e1:
cb:9d:fb:df:f0:78:8f:1c:68:0e:79:9d:f3:8d:da:
dd:a2:91:dc:65:18:9a:65:8c:79:67:2d:82:80:d7:
9b:6d:7c:2d:68:8e:65:fb:48:8e:ea:08:d8:dc:a1:
69:f2:ce:9a:ee:e9:46:92:22:f8:50:aa:52:ec:75:
9b:5b:41:79:8c:b1:9e:9d:16:f3:17:ef:7c:cf:14:
7a:20:8a:b1:c5:7e:e1:9b:c8:c1:5b:a2:c2:7c:77:
ff:1b:83:57:e3:61:1a:44:d7:6c:ef:9c:12:9b:28:
7f:d2:fb:12:a6:2a:b5:5f:0e:f1:11:88:b2:11:d4:
fe:4a:e9:9d:e7:56:0a:47:e7:70:1f:c4:10:6c:5e:
96:6c:6b:70:b6:69:55:1e:2a:b0:be:6e:f9:45:19:
47:a5:c3:6b:7b:d9:dd:2f:e2:de:3a:7d:4a:b1:5e:
46:d7:cc:1b:cd:cd:82:a7:bc:f7:0b:9b:35:3c:e6:
69:f0:46:4d:70:e5:0b:9e:33:5d:ca:b3:b8:92:19:
4d:6e:61:f7:d6:85:6c:62:ec:0b:1c:30:3c:05:e0:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.144.0/23
Signature Algorithm: sha256WithRSAEncryption
08:8f:68:37:71:fd:4a:23:1b:c2:00:e9:1c:74:1d:9c:37:f7:
89:c8:41:71:c4:08:76:79:98:d1:6c:56:05:7c:11:9e:91:b4:
76:85:8c:d3:31:68:2f:b7:47:39:a1:1e:32:a6:a6:00:b8:bf:
b0:d6:3e:ce:c5:60:39:ae:32:b2:75:7a:bb:fd:45:3f:d0:27:
e4:32:8c:64:d5:33:5d:65:43:bd:0a:46:60:63:13:35:20:79:
ce:01:0b:61:74:fc:6d:5e:f9:79:5e:e7:ae:4e:38:50:d6:b8:
18:73:62:8e:8f:73:39:1e:38:6c:7c:56:70:60:91:53:67:c9:
a0:62:0d:b4:27:1d:ab:fb:0c:67:b7:75:8b:de:0f:4a:e7:99:
bf:3a:01:ac:16:2a:d2:3b:52:b7:34:1e:36:d5:41:ea:2b:ea:
75:e4:50:ce:5c:b2:6d:7d:e5:2a:ef:5a:b9:34:9e:fe:66:c6:
9d:15:b8:9c:6c:11:39:c1:23:11:4a:e9:14:09:fb:d8:6d:6c:
c1:32:42:7c:17:4e:4f:c1:ba:d6:93:60:f7:4c:76:75:e8:10:
0e:cf:06:46:31:31:78:4b:43:72:84:de:89:08:dd:6b:26:bc:
7d:3f:0b:60:29:7d:bd:72:65:e5:e5:f0:34:37:6b:82:a2:dc:
0f:9b:2a:b1
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUasuZzpQCdFfrLsjN0y8rRhHkwO8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQxNzA5MzkzNVoX
DTI3MDQxNjA5NDQzNVowMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBE
NzNBM0I1RTY2Qjc0QTQzMTM3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZTgVOrHOOaxm8133w+1mS0/xiGngaCk7+Jzhtjd3k2BHUgrkuAkji1szXh
y5373/B4jxxoDnmd843a3aKR3GUYmmWMeWctgoDXm218LWiOZftIjuoI2NyhafLO
mu7pRpIi+FCqUux1m1tBeYyxnp0W8xfvfM8UeiCKscV+4ZvIwVuiwnx3/xuDV+Nh
GkTXbO+cEpsof9L7EqYqtV8O8RGIshHU/krpnedWCkfncB/EEGxelmxrcLZpVR4q
sL5u+UUZR6XDa3vZ3S/i3jp9SrFeRtfMG83Ngqe89wubNTzmafBGTXDlC54zXcqz
uJIZTW5h99aFbGLsCxwwPAXgAqECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGF2RH1AABsg4ADXOjteZrdKQxN0MB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9kNDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0MGJkNmU0
LWI0ZmItNGY0OC1iODNhLWFjYjhmMmQ3NDU4My8wLzYxNzY0NDdENDAwMDFCMjBF
MDAwRDczQTNCNUU2NkI3NEE0MzEzNzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGgE5AwDQYJKoZIhvcNAQELBQADggEBAAiPaDdx/UojG8IA6Rx0HZw394nIQXHE
CHZ5mNFsVgV8EZ6RtHaFjNMxaC+3RzmhHjKmpgC4v7DWPs7FYDmuMrJ1erv9RT/Q
J+QyjGTVM11lQ70KRmBjEzUgec4BC2F0/G1e+Xle565OOFDWuBhzYo6PczkeOGx8
VnBgkVNnyaBiDbQnHav7DGe3dYveD0rnmb86AawWKtI7Urc0HjbVQeor6nXkUM5c
sm195SrvWrk0nv5mxp0VuJxsETnBIxFK6RQJ+9htbMEyQnwXTk/ButaTYPdMdnXo
EA7PBkYxMXhLQ3KE3okI3WsmvH0/C2Apfb1yZeXl8DQ3a4Ki3A+bKrE=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:31 2026 by rpki-client