
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer
File: 07560F77A1685B4C155E037BCDB207359FA510B4.cer (raw, json)
Hash identifier: rj6+ZGfV3eBXuIC322W9+WH23k+7ggCP8EknO6+DGZ8=
Subject key identifier: 07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 09499DC5EEF3E00E030B219E0A68A8A25D2D5D0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 04 Apr 2026 06:03:20 +0000
Certificate not after: Sat 03 Apr 2027 06:08:20 +0000
Subordinate resources: IP: 103.172.18.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:49:9d:c5:ee:f3:e0:0e:03:0b:21:9e:0a:68:a8:a2:5d:2d:5d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 4 06:03:20 2026 GMT
Not After : Apr 3 06:08:20 2027 GMT
Subject: CN=07560F77A1685B4C155E037BCDB207359FA510B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:ff:5a:7a:5f:84:2c:6e:c2:fe:4a:0d:b7:
6d:66:6d:83:a5:4b:de:1c:d6:f3:c9:e8:05:b6:d7:
1a:dc:9e:fe:15:bd:3e:65:3b:23:e0:f0:66:0c:7f:
17:58:8c:c9:2d:0e:9c:60:b8:d5:69:31:e5:e1:a5:
3c:d1:7c:36:b1:8f:94:f4:da:4b:98:ee:5d:03:1c:
7c:c9:0a:6e:6f:53:c2:f5:51:b7:ee:06:fe:c7:20:
d0:cc:30:7a:4a:ce:69:95:75:ce:1b:2a:96:99:3f:
39:dd:9c:62:0d:98:ee:ff:1c:07:cc:cb:e4:15:44:
17:1f:5e:3a:fa:39:8d:2f:d6:0f:75:1f:16:46:d5:
c3:6b:87:8e:72:f7:e4:f6:bd:3d:11:e2:75:fd:c0:
f4:ba:2e:f7:6f:ca:0c:5f:a6:8d:fd:d0:95:44:55:
f2:1f:2b:2a:b6:0a:ef:6b:6b:bc:2b:f9:70:d8:23:
76:5c:0e:fb:1d:bc:ca:97:4a:d3:25:51:31:50:ae:
c6:93:b9:0c:45:da:97:ca:40:38:69:33:b0:e3:21:
dc:eb:f8:5c:b2:78:8e:8b:1e:b1:98:d4:2a:e1:e2:
8d:c7:9f:ca:26:95:fa:22:6a:8a:f9:a0:75:da:d6:
b8:1f:e1:99:d3:72:84:ac:2d:40:e8:f3:b8:38:3d:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.18.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:40:08:2b:64:0a:64:0e:15:c3:e7:2a:25:01:fb:4e:83:96:
85:d5:a9:e6:1c:72:3f:16:05:b5:25:e3:15:a7:66:47:f4:9c:
62:fb:62:4a:28:9a:ec:32:86:77:33:7d:94:d0:99:88:23:7c:
a0:04:fd:1f:e5:d4:d4:15:1a:a6:7c:97:20:65:9b:f6:28:a0:
dd:35:e5:79:9e:65:01:08:e1:f6:5a:7a:67:d3:d5:9d:f2:84:
64:59:3f:25:16:00:89:c9:8b:aa:8c:48:63:db:02:40:d6:15:
4d:bd:28:80:9e:a8:a0:47:b0:52:b9:83:cd:5f:57:1b:63:49:
06:2c:2c:eb:14:1e:02:63:98:ec:b2:d5:87:c5:fe:96:85:ce:
95:ba:ad:d1:ef:b9:4a:39:6d:96:08:6f:c7:75:07:52:5d:23:
cd:84:b2:14:12:c1:f9:92:34:c4:35:e8:1e:2f:22:fb:c9:e7:
7b:28:e2:93:e4:7a:65:08:9a:7d:7b:81:cf:5c:de:48:a8:49:
d2:9e:17:a1:34:3b:28:66:bb:7c:fc:40:4d:74:35:49:eb:f6:
af:a4:ec:01:dc:e9:f2:00:88:77:55:a2:6f:84:d4:bf:b7:a0:
d2:ee:0f:cf:07:75:ec:2d:1d:7a:4b:95:10:af:4b:4b:fb:a0:
6d:33:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:38 2026 by rpki-client