
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
File: 57D075B2873A1E1F844485DAAC774C656EB9A611.cer (raw, json)
Hash identifier: zEgjDcdHnx/pn+mIyIVebP8mWIbVhy776iafkn+U+4E=
Subject key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0831179D96933C4E78829C1DACD17A67EF6D5F34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 14 Feb 2026 04:22:53 +0000
Certificate not after: Sat 13 Feb 2027 04:27:53 +0000
Subordinate resources: IP: 103.90.252.0/22
IP: 2001:df0:ed00::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:31:17:9d:96:93:3c:4e:78:82:9c:1d:ac:d1:7a:67:ef:6d:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 14 04:22:53 2026 GMT
Not After : Feb 13 04:27:53 2027 GMT
Subject: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:0e:36:b1:d2:97:40:b1:40:5e:84:b7:eb:
d5:cd:78:54:f4:74:33:8d:8f:8c:33:f5:2c:98:3c:
7f:15:39:0c:f2:e9:35:fa:b4:1b:b1:c1:82:69:20:
a8:3f:e6:82:c2:03:7a:87:90:ec:c8:8b:98:f9:e6:
f9:d2:42:db:99:ee:bd:33:67:1b:4b:f2:49:92:11:
0f:0c:87:6d:95:61:c6:95:72:63:2f:0f:5f:5c:4e:
95:e6:98:52:62:96:ac:07:ec:f3:8d:d7:cd:ec:49:
be:54:3e:58:51:54:d5:f7:74:f7:20:92:01:3f:8d:
8e:a8:4d:dd:46:af:93:ef:70:50:97:6b:8d:6e:ef:
30:de:4c:54:90:7a:c3:b7:f1:2e:87:56:ba:b7:9e:
c2:51:94:f0:a1:74:44:f7:78:fd:55:ea:e3:6f:e5:
86:28:ae:3e:7c:3f:0d:8c:e1:ff:6b:44:65:87:dc:
15:ce:59:06:a7:71:4e:d4:62:83:e0:16:69:f3:0b:
ca:16:d4:a6:ef:2d:de:30:85:6e:d4:05:5b:9f:78:
b1:05:b7:b6:c9:c3:ec:2f:6b:05:1b:d3:a3:37:04:
10:59:4f:29:d5:a0:7a:68:e3:df:78:0b:16:37:59:
93:24:ef:d1:84:1a:ca:92:39:53:6d:20:6a:64:83:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.252.0/22
IPv6:
2001:df0:ed00::/48
Signature Algorithm: sha256WithRSAEncryption
5d:55:c4:95:92:2b:71:83:b2:06:61:6b:a1:9f:c8:50:22:76:
dc:98:ae:0c:fe:08:32:f8:c3:cd:c2:9d:a4:20:23:4e:e1:ab:
f2:4c:b6:28:cb:7b:55:6a:b7:e4:2a:ea:a5:ed:ed:af:b1:0f:
0b:e9:f4:f1:2a:20:8a:93:70:49:2c:21:d1:4c:9a:5f:d0:5c:
2f:12:ce:70:dd:de:8d:21:d1:52:4b:73:ed:ee:f1:c7:91:6c:
f3:e7:28:c1:aa:a4:1f:53:70:f8:15:8e:d0:c3:05:fa:1d:d3:
10:34:37:e1:3e:97:3d:be:0e:04:15:3b:4a:dc:50:c8:42:ce:
e2:2d:48:3b:71:84:7e:67:62:9d:e8:72:0a:c1:39:3f:22:18:
85:8b:4c:bc:68:c0:e8:00:7e:42:03:18:b6:95:a1:0c:ce:c7:
ce:ef:6e:9e:c2:f5:a7:02:82:07:0c:e6:56:b7:95:4a:3b:f4:
ad:8f:11:60:91:fa:b3:bd:9e:28:c8:a7:f8:cf:cc:b9:37:a0:
09:a3:f4:5b:6f:8e:b6:38:af:2d:a6:72:eb:a0:4a:58:21:b1:
97:3a:0b:2b:98:c4:86:a6:51:18:63:13:1b:8e:df:79:ce:38:
65:32:ee:5d:93:2f:82:88:af:42:be:86:9f:95:b6:58:e5:59:
c6:bc:2a:f7
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUCDEXnZaTPE54gpwdrNF6Z+9tXzQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNDA0MjI1M1oX
DTI3MDIxMzA0Mjc1M1owMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4
NURBQUM3NzRDNjU2RUI5QTYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiIDjax0pdAsUBehLfr1c14VPR0M42PjDP1LJg8fxU5DPLpNfq0G7HBgmkg
qD/mgsIDeoeQ7MiLmPnm+dJC25nuvTNnG0vySZIRDwyHbZVhxpVyYy8PX1xOleaY
UmKWrAfs843XzexJvlQ+WFFU1fd09yCSAT+NjqhN3Uavk+9wUJdrjW7vMN5MVJB6
w7fxLodWureewlGU8KF0RPd4/VXq42/lhiiuPnw/DYzh/2tEZYfcFc5ZBqdxTtRi
g+AWafMLyhbUpu8t3jCFbtQFW594sQW3tsnD7C9rBRvTozcEEFlPKdWgemjj33gL
FjdZkyTv0YQaypI5U20gamSDPvkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFfQdbKHOh4fhESF2qx3TGVuuaYRMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9kNzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3NzRiMThj
LWYyNjMtNGZlMS04ZGY4LTFlN2M2OGJmYmVmYy8wLzU3RDA3NUIyODczQTFFMUY4
NDQ0ODVEQUFDNzc0QzY1NkVCOUE2MTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAJnWvwwDwQCAAIwCQMHACABDfDtADANBgkqhkiG9w0BAQsFAAOCAQEAXVXElZIr
cYOyBmFroZ/IUCJ23JiuDP4IMvjDzcKdpCAjTuGr8ky2KMt7VWq35Crqpe3tr7EP
C+n08SogipNwSSwh0UyaX9BcLxLOcN3ejSHRUktz7e7xx5Fs8+cowaqkH1Nw+BWO
0MMF+h3TEDQ34T6XPb4OBBU7StxQyELO4i1IO3GEfmdinehyCsE5PyIYhYtMvGjA
6AB+QgMYtpWhDM7Hzu9unsL1pwKCBwzmVreVSjv0rY8RYJH6s72eKMin+M/MuTeg
CaP0W2+OtjivLaZy66BKWCGxlzoLK5jEhqZRGGMTG47fec44ZTLuXZMvgoivQr6G
n5W2WOVZxrwq9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:46 2026 by rpki-client