
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
File: 3B6C011787F4528DAFAEE19B8408D9405F030E61.cer (raw, json)
Hash identifier: 0EVD6LvEC9wwkboa+wmmJulfqvu7+fkAFXiLdkfF6sI=
Subject key identifier: 3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0230CFC1C5396EC9EAC066F460266BF331C8CADB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
caRepository: rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 14 Feb 2026 03:02:42 +0000
Certificate not after: Sat 13 Feb 2027 03:07:42 +0000
Subordinate resources: IP: 103.115.99.0/24
IP: 2001:df5:2500::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:30:cf:c1:c5:39:6e:c9:ea:c0:66:f4:60:26:6b:f3:31:c8:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 14 03:02:42 2026 GMT
Not After : Feb 13 03:07:42 2027 GMT
Subject: CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:b9:94:23:54:dd:c4:91:e2:d5:9b:5e:cd:
44:67:32:9e:0b:82:38:02:b3:46:e9:e1:66:6f:44:
9f:c8:c0:9b:6f:0b:89:8f:9a:6f:38:bf:eb:73:75:
e2:e4:fd:5c:de:5f:62:e3:49:2d:98:c6:83:ad:25:
bc:4d:1f:7f:08:59:78:2c:b4:f2:cf:e5:73:4b:07:
a5:4d:a3:53:c0:b4:3e:10:54:bd:9f:cc:c7:64:b8:
7f:0f:4c:13:2b:06:20:4e:c6:03:2e:84:ae:d4:8a:
66:e9:4d:b4:5b:9a:ec:0f:55:98:59:66:72:c0:56:
b7:00:25:fb:17:54:1f:81:89:ac:ad:d1:ad:a6:df:
7f:13:32:66:36:65:40:c8:be:e6:d5:04:de:18:a2:
11:1e:ae:89:90:fe:04:6e:35:38:7d:44:db:d2:95:
7b:0b:d9:aa:1a:69:ff:09:52:84:ee:b3:99:44:dc:
eb:76:0e:73:06:2d:0f:cf:ff:5a:74:b8:e4:3e:ae:
df:3b:0b:6d:b6:90:28:19:a0:cb:1a:c3:1c:75:4a:
38:f7:5a:17:83:88:e3:83:23:9b:36:64:26:92:d1:
55:77:7f:c7:dc:ca:84:94:60:e2:f8:ed:f3:1f:a8:
63:5d:6a:48:12:3b:00:1b:95:4f:46:3e:d5:67:fa:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.99.0/24
IPv6:
2001:df5:2500::/48
Signature Algorithm: sha256WithRSAEncryption
8c:37:bf:52:71:96:5c:0d:86:4a:27:9e:a7:3b:c9:65:9d:b2:
f8:37:9c:7f:f5:8c:d5:d0:80:d9:f2:76:9f:a0:06:09:b6:7a:
6d:ce:80:63:12:dc:67:57:54:8d:91:23:8d:ca:d6:25:38:f7:
6e:58:14:b9:1b:0a:66:fe:f2:95:ec:c5:52:8f:a2:fd:fa:5b:
d5:42:0d:f8:6c:02:b7:b2:b1:2e:e0:ac:77:08:cc:41:fe:e6:
84:c6:d0:f5:93:9b:07:94:3b:20:f9:4b:34:8d:23:53:4b:a3:
5d:10:93:bd:c3:4e:be:30:10:10:26:a1:7c:bf:d6:09:0c:23:
f5:4c:14:72:c4:c7:84:b3:14:de:31:f8:79:b8:e7:96:07:ae:
e7:ad:7b:b7:44:84:fe:e7:35:a6:76:76:a7:49:7a:5a:29:88:
d4:7d:e9:cd:77:8d:7d:2d:5d:a7:89:3e:6c:a2:9e:5c:97:9d:
9f:46:1f:1b:24:00:b2:fb:3d:38:e2:9d:dd:fc:e5:44:eb:17:
5e:3a:57:41:fa:1c:1c:1f:3d:99:28:15:1c:dc:df:be:c5:d5:
48:d4:5d:d3:90:27:ca:0c:2e:3d:e5:d5:a2:3e:13:cd:44:39:
ef:e7:87:46:d6:dc:67:7d:c5:22:08:30:d6:ea:de:a1:af:ad:
4f:29:f1:b1
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUAjDPwcU5bsnqwGb0YCZr8zHIytswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNDAzMDI0MloX
DTI3MDIxMzAzMDc0MlowMzExMC8GA1UEAxMoM0I2QzAxMTc4N0Y0NTI4REFGQUVF
MTlCODQwOEQ5NDA1RjAzMEU2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANYbuZQjVN3EkeLVm17NRGcynguCOAKzRunhZm9En8jAm28LiY+abzi/63N1
4uT9XN5fYuNJLZjGg60lvE0ffwhZeCy08s/lc0sHpU2jU8C0PhBUvZ/Mx2S4fw9M
EysGIE7GAy6ErtSKZulNtFua7A9VmFlmcsBWtwAl+xdUH4GJrK3RrabffxMyZjZl
QMi+5tUE3hiiER6uiZD+BG41OH1E29KVewvZqhpp/wlShO6zmUTc63YOcwYtD8//
WnS45D6u3zsLbbaQKBmgyxrDHHVKOPdaF4OI44MjmzZkJpLRVXd/x9zKhJRg4vjt
8x+oY11qSBI7ABuVT0Y+1Wf6U0UCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFDtsAReH9FKNr67hm4QI2UBfAw5hMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by80YzRjMmY2Mi1mNzM1LTRkNjAtOTIzNy05MjdlZmFkOWRhZDAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjNGMyZjYy
LWY3MzUtNGQ2MC05MjM3LTkyN2VmYWQ5ZGFkMC8wLzNCNkMwMTE3ODdGNDUyOERB
RkFFRTE5Qjg0MDhEOTQwNUYwMzBFNjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABnc2MwDwQCAAIwCQMHACABDfUlADANBgkqhkiG9w0BAQsFAAOCAQEAjDe/UnGW
XA2GSieepzvJZZ2y+Decf/WM1dCA2fJ2n6AGCbZ6bc6AYxLcZ1dUjZEjjcrWJTj3
blgUuRsKZv7ylezFUo+i/fpb1UIN+GwCt7KxLuCsdwjMQf7mhMbQ9ZObB5Q7IPlL
NI0jU0ujXRCTvcNOvjAQECahfL/WCQwj9UwUcsTHhLMU3jH4ebjnlgeu5617t0SE
/uc1pnZ2p0l6WimI1H3pzXeNfS1dp4k+bKKeXJedn0YfGyQAsvs9OOKd3fzlROsX
XjpXQfocHB89mSgVHNzfvsXVSNRd05AnygwuPeXVoj4TzUQ57+eHRtbcZ33FIggw
1ureoa+tTynxsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:10 2026 by rpki-client