
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
File: 47CBAD1A648715C5E867F1A2ED3558688608EE19.cer (raw, json)
Hash identifier: 4z9cPzILttpvlqMhAVSdMok+8CXg3yzrtukyyE4OJBE=
Subject key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1566F2EDEC67EC961A2B967C600270D49FAA9CD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 08 Apr 2026 08:20:51 +0000
Certificate not after: Wed 07 Apr 2027 08:25:51 +0000
Subordinate resources: IP: 103.153.150.0/24
IP: 103.235.65.0/24
IP: 2406:4640::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:66:f2:ed:ec:67:ec:96:1a:2b:96:7c:60:02:70:d4:9f:aa:9c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 8 08:20:51 2026 GMT
Not After : Apr 7 08:25:51 2027 GMT
Subject: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:fb:23:b4:5a:9e:f1:b6:c9:a1:94:d3:b8:
c4:85:c3:dc:bf:0b:0a:6a:e1:d7:f1:29:7d:59:f0:
63:1c:71:a3:0a:ae:94:e7:c9:65:03:bb:59:4b:0c:
95:ef:92:fe:61:04:e3:b6:21:9d:7a:fb:74:ce:e5:
cb:e3:5c:2b:9a:05:c2:9f:ce:01:e3:b5:4a:0e:74:
b5:99:76:21:00:33:ec:e2:7c:b2:8e:b4:fe:ed:57:
32:01:30:e2:29:0f:1c:fc:ac:c0:c3:6a:5d:80:c5:
9f:eb:0d:62:6e:20:92:80:82:2a:95:09:2b:6e:ab:
4d:db:0c:71:33:2c:bd:ee:84:9b:4c:cb:91:bd:d0:
89:41:42:0b:12:6a:82:d7:64:60:b0:05:61:71:5b:
17:2e:97:50:31:4f:59:f9:af:f8:28:b8:d1:d3:37:
f3:f5:d8:4b:a1:25:22:41:27:75:f3:8b:43:95:fe:
f3:bb:be:dd:1b:40:08:d0:48:9f:7e:42:c4:fd:bb:
3a:28:e3:9e:d3:43:8e:b4:85:34:66:47:bf:44:9a:
2d:ae:d3:c9:a5:1c:8a:7b:7d:89:bd:97:f7:d5:5d:
53:9f:36:9a:64:94:9b:28:8f:ae:d8:4c:2f:30:35:
5e:d0:2d:13:9b:a2:dd:df:af:aa:41:3b:0f:6a:3a:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.150.0/24
103.235.65.0/24
IPv6:
2406:4640::/32
Signature Algorithm: sha256WithRSAEncryption
13:82:40:79:39:2e:d6:31:17:69:54:36:24:4d:19:31:d7:b9:
b1:d2:e1:ed:d2:7c:cb:5d:ca:af:8a:78:2c:07:bd:42:63:67:
d3:6a:f9:b0:e3:fb:ce:1a:b7:c0:78:93:ee:ab:cf:bb:50:f9:
49:5e:f2:bb:b5:de:3c:aa:64:55:8d:ec:5f:99:de:26:1b:d3:
6b:b3:a6:b6:d4:55:b2:37:61:1f:dd:49:5d:2c:a0:57:49:86:
e0:09:78:07:a0:09:4a:92:cc:d4:24:f5:5a:f0:5d:ee:c6:25:
47:bc:76:4f:ac:82:8e:17:8f:83:2c:18:7b:83:93:82:06:56:
f9:3b:25:7b:76:31:46:4a:f1:1f:7e:30:1c:2a:01:21:fb:04:
22:11:5e:66:a8:60:93:62:14:55:ee:5f:9b:61:51:0b:aa:8f:
01:1f:c3:5f:dc:59:9a:27:f3:f5:26:02:06:ab:be:e8:2d:92:
6d:9b:13:c6:f5:b8:e0:0a:f6:f7:f7:6b:98:04:d9:65:8d:15:
f2:26:69:1f:15:7c:d4:71:b2:3e:87:23:f8:9d:d8:f7:35:6d:
6d:30:2d:04:bb:34:b1:56:bf:45:9d:2f:d7:05:ad:2a:6e:7c:
e8:80:ec:88:6e:3c:11:78:ee:05:28:f9:00:6c:8d:8d:eb:f5:
35:29:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:41 2026 by rpki-client