
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
File: 053084D88D32CFF591DBCBF3109B9137C3E74648.cer (raw, json)
Hash identifier: 4t4acZ2wmOm61z8PG/SwaMKbxFxUjUSTqXkPlLI8HaI=
Subject key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 30CA7617572BB0D8EDC6680E5C111248861DF6E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
caRepository: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 14 Apr 2026 21:17:17 +0000
Certificate not after: Tue 13 Apr 2027 21:22:17 +0000
Subordinate resources: IP: 103.205.62.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 21:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ca:76:17:57:2b:b0:d8:ed:c6:68:0e:5c:11:12:48:86:1d:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 14 21:17:17 2026 GMT
Not After : Apr 13 21:22:17 2027 GMT
Subject: CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:49:1b:6e:c8:68:ea:22:19:0b:fb:62:ac:
97:5d:15:f8:50:b5:e6:ec:64:12:18:6e:72:81:84:
c3:07:71:7c:45:aa:6a:6e:ad:f4:45:c3:4e:b0:8c:
86:58:56:4d:b9:14:6b:e7:c5:e8:a2:40:51:23:1b:
f8:51:a3:ad:35:be:e3:a7:1b:f3:a7:41:0f:8d:48:
30:75:95:8d:4e:2d:3a:ec:e5:55:7f:c8:83:e4:c2:
e9:c8:de:75:f2:56:80:eb:fc:15:23:81:08:ee:7f:
28:7c:67:ed:16:d8:af:9e:82:04:ad:2d:d7:dd:98:
62:9b:4f:6b:e5:9c:e2:f3:47:6d:c7:53:31:45:b8:
86:60:e6:da:9d:79:47:9b:f1:31:74:f5:51:f0:f5:
da:2a:66:73:e8:29:be:e1:0f:af:b4:25:ac:f9:3a:
4d:3a:37:c8:dc:29:27:7b:32:ae:5d:f4:93:f4:34:
32:42:7a:30:14:28:7e:0a:f3:60:22:a9:ce:5c:4d:
04:b7:1c:7e:2a:57:78:fc:c2:85:8a:75:3d:e6:94:
dd:80:ef:3a:50:bb:68:ba:58:ee:7b:a5:22:40:5a:
2f:25:3a:97:ee:88:4d:b1:a7:8b:51:dc:06:19:a7:
fe:64:5b:f5:ff:fe:2a:d1:85:15:89:52:b2:8d:da:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.205.62.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:53:12:bf:fb:a8:d8:21:6d:2e:e7:10:b3:9f:b8:fb:fa:98:
87:ff:9c:04:67:53:20:b9:82:79:96:5c:cc:c9:a9:a4:a0:2d:
d5:1c:69:af:fc:8c:bd:79:42:39:2e:1b:fa:37:1f:c5:2f:14:
62:a0:0c:b6:2f:f0:a4:6d:1e:3b:df:e6:1f:7a:de:1b:d4:9e:
d3:cf:70:77:bd:bf:9e:07:48:9e:6c:a8:2b:6e:81:c9:14:53:
54:47:44:30:68:3f:47:60:f3:ef:47:48:66:57:a5:a9:73:0b:
ed:bb:d6:98:93:16:f6:ce:15:fb:ac:80:9e:f1:2d:8c:bd:03:
d1:d6:96:3b:65:f4:f8:fa:a9:3b:80:eb:4c:9a:3c:30:a4:0f:
a8:10:fe:06:c0:7d:20:cd:b2:6b:bd:4e:22:60:ab:5d:91:64:
2b:04:ca:00:c0:fe:7a:1f:57:53:b3:6d:1b:48:78:8b:5a:c9:
b5:76:d3:71:ad:0c:9c:ef:76:be:63:c5:47:18:37:cd:b0:a5:
0f:93:4f:6b:76:17:85:d5:95:89:56:1f:db:68:c3:93:fc:ea:
84:4a:9f:13:22:a8:8b:88:cf:86:7b:07:44:7a:b8:98:d0:d2:
12:d5:44:0a:b2:cd:7c:d3:60:2f:b8:5c:cc:0e:8b:28:f1:d6:
6a:c2:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:10 2026 by rpki-client