
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer (raw, json)
Hash identifier: +M7OGtbFa2dlV/oR+a4uwU/sLVoTO0wNOSGpjJUsikY=
Subject key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1C3A6D11DB500545E4D6974F1C1C0A9D43919E8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
caRepository: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 08:09:33 +0000
Certificate not after: Wed 03 Feb 2027 08:14:33 +0000
Subordinate resources: IP: 103.91.32.0/22
IP: 123.253.252.0/22
IP: 2001:df0:f900::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3a:6d:11:db:50:05:45:e4:d6:97:4f:1c:1c:0a:9d:43:91:9e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 4 08:09:33 2026 GMT
Not After : Feb 3 08:14:33 2027 GMT
Subject: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:c6:10:5b:c3:34:a4:f7:fa:08:a3:14:81:
6c:5d:29:76:63:9c:cf:12:6f:2b:c8:85:ca:1a:fc:
00:d2:83:01:d3:98:c1:19:fb:ec:c5:19:fc:bc:5e:
9f:06:ac:f5:e3:75:4f:0a:c4:b8:a3:ce:95:85:16:
26:fa:8d:34:0b:61:25:52:aa:14:fc:b2:85:a9:91:
bd:b8:d7:8a:e7:d3:eb:37:b1:90:75:ad:09:24:fb:
2f:10:d7:d5:d0:f6:ab:43:f6:95:4e:c0:fb:71:f3:
1e:ef:f6:84:fc:60:46:c8:47:3f:52:9b:24:9a:70:
3f:21:60:cb:83:b1:07:39:5b:9b:83:93:c6:8f:b2:
2b:00:89:2c:67:b1:b8:41:6e:b3:68:40:3f:5e:3e:
2f:35:7e:08:9d:06:0c:73:96:90:5b:6c:e4:c9:30:
a9:2a:58:2e:f8:42:f9:7d:83:56:82:52:aa:60:2d:
e4:68:c5:6e:85:06:7f:78:f8:bd:56:a6:02:52:ab:
11:bb:07:88:bd:88:9b:d4:94:4a:62:d7:3f:d4:a2:
b2:46:0c:ba:fd:dd:85:20:b0:a7:c6:9c:ad:45:c4:
81:65:4c:9e:13:9d:45:f6:ed:cd:11:68:36:54:bb:
b2:81:26:6d:0b:5f:9c:c4:58:63:9f:34:a5:34:e6:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.32.0/22
123.253.252.0/22
IPv6:
2001:df0:f900::/48
Signature Algorithm: sha256WithRSAEncryption
44:bd:79:b0:7b:3a:e6:75:c9:85:37:e5:81:58:8e:23:c9:9c:
69:ad:4a:50:4d:ef:15:c9:5c:28:c7:e6:df:be:93:95:37:23:
d5:29:68:7f:d0:cd:51:d0:ed:df:db:a5:d8:63:03:fb:ff:63:
5f:f4:53:aa:01:c9:c1:26:f1:e8:2c:80:ed:55:1e:5c:4f:17:
4a:a1:68:45:83:ae:dc:38:7f:24:d9:23:25:06:e2:bc:90:1d:
78:7e:34:7c:ee:ae:35:5b:51:40:a5:40:3b:f4:93:fa:5c:02:
94:6c:b6:be:13:f5:dd:16:98:fe:f4:bc:a9:b9:12:51:1e:18:
22:9a:aa:ef:1f:93:6c:25:4b:65:c7:d2:dd:aa:e2:b6:1f:5e:
a3:03:d7:3e:35:8d:58:14:dd:8d:35:db:c4:9d:14:ac:5c:b3:
07:4a:14:1a:b5:e3:be:7b:ea:ec:a2:be:8d:4a:e2:79:4b:29:
53:b0:ab:b1:7f:54:8c:fc:6c:01:3d:bd:8b:0d:68:96:10:ee:
25:2a:0f:30:a8:41:82:09:90:c8:49:74:64:50:04:03:37:45:
05:b5:06:bb:69:a8:2f:52:ed:b3:c4:58:ce:29:b4:9c:0f:09:
b9:cd:b7:d4:1c:8a:df:14:f5:dc:aa:53:eb:eb:38:b9:f0:d5:
eb:33:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:27 2026 by rpki-client