Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
File: 61566F205F7037962069571320603B274357CC6D.cer (raw, json)
Hash identifier: Q7/Tu4K9YhIa+43vmNbbeykloQ5JDP1VJeJhtO4qoSM=
Subject key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 18780E6657ED75027690977AA2599322B54A0DC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
caRepository: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 06 Aug 2025 02:13:04 +0000
Certificate not after: Wed 05 Aug 2026 02:18:04 +0000
Subordinate resources: IP: 27.124.80.0 -- 27.124.82.255
IP: 27.124.84.0 -- 27.124.95.255
IP: 43.240.224.0/23
IP: 103.3.76.0/22
IP: 103.18.34.0/23
IP: 103.25.109.0 -- 103.25.111.255
IP: 103.26.4.0/22
IP: 103.42.40.0/22
IP: 103.47.228.0/23
IP: 103.55.220.0/22
IP: 103.101.22.0/23
IP: 103.121.238.0/23
IP: 103.206.240.0/22
IP: 103.210.230.0/23
IP: 103.215.178.0/23
IP: 103.248.219.0/24
IP: 103.253.86.0/23
IP: 119.47.91.0/24
IP: 119.252.160.0/20
IP: 121.100.16.0/21
IP: 124.158.160.0/20
IP: 157.119.56.0/22
IP: 163.53.184.0/22
IP: 182.48.160.0/19
IP: 202.57.17.0 -- 202.57.18.255
IP: 202.57.22.0/23
IP: 202.62.8.0/22
IP: 202.146.48.0/20
IP: 202.162.208.0/20
IP: 203.89.146.0/23
IP: 220.247.168.0/21
IP: 2400:4a00::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 Aug 2025 13:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:78:0e:66:57:ed:75:02:76:90:97:7a:a2:59:93:22:b5:4a:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 6 02:13:04 2025 GMT
Not After : Aug 5 02:18:04 2026 GMT
Subject: CN=61566F205F7037962069571320603B274357CC6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:af:89:10:c9:c9:c2:1d:60:f1:41:dc:61:
86:21:3f:7b:03:c9:b9:01:e4:6d:8f:de:18:4b:37:
9d:c1:66:18:5c:2f:aa:41:23:ed:83:f1:33:2f:15:
ff:ec:51:31:6e:63:56:71:bb:c3:04:20:d3:dc:bc:
07:df:00:91:2a:f8:38:e0:ab:81:98:80:45:36:de:
7a:8b:46:57:88:4e:a7:ce:26:ce:c6:a2:27:5b:66:
b3:f6:25:04:98:b1:12:18:37:77:cd:c9:fa:76:60:
71:4e:bd:6a:15:71:dc:d3:5e:13:31:1d:0c:60:87:
fe:f5:f9:3b:ff:43:58:8b:25:be:c1:68:2b:89:86:
13:98:72:72:19:7f:e8:90:f1:8d:85:06:4c:2c:80:
df:cc:51:fe:5f:00:91:f3:a7:c2:57:88:a4:c0:43:
15:40:d6:72:4e:db:ec:99:f1:e3:32:66:8a:db:9c:
9a:d2:15:38:71:ad:e1:59:95:27:d6:d6:e0:96:2a:
21:51:a3:16:cd:77:86:71:01:60:73:e6:18:4b:fe:
35:16:8b:1f:ff:06:b8:76:87:cd:f6:5a:15:f4:e6:
09:d2:bb:40:46:df:18:1b:24:87:46:4f:f6:b8:76:
c9:2c:8f:c6:b7:c4:dd:fc:2a:a2:8b:59:eb:bb:14:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.80.0-27.124.82.255
27.124.84.0-27.124.95.255
43.240.224.0/23
103.3.76.0/22
103.18.34.0/23
103.25.109.0-103.25.111.255
103.26.4.0/22
103.42.40.0/22
103.47.228.0/23
103.55.220.0/22
103.101.22.0/23
103.121.238.0/23
103.206.240.0/22
103.210.230.0/23
103.215.178.0/23
103.248.219.0/24
103.253.86.0/23
119.47.91.0/24
119.252.160.0/20
121.100.16.0/21
124.158.160.0/20
157.119.56.0/22
163.53.184.0/22
182.48.160.0/19
202.57.17.0-202.57.18.255
202.57.22.0/23
202.62.8.0/22
202.146.48.0/20
202.162.208.0/20
203.89.146.0/23
220.247.168.0/21
IPv6:
2400:4a00::/32
Signature Algorithm: sha256WithRSAEncryption
58:bd:72:36:18:a3:4c:56:4a:60:fb:30:32:37:27:69:29:9e:
55:ff:85:9b:ea:ce:0a:47:2c:a4:f0:27:d0:a5:0d:88:08:54:
f1:2f:eb:f3:75:44:d8:58:a7:61:3c:e3:70:0d:4d:45:91:75:
ec:3e:10:10:69:da:c4:9b:ee:dc:40:3e:0e:80:96:77:58:98:
bd:85:0d:db:4e:dc:95:98:cb:be:8b:fe:8b:9d:a5:da:b6:c7:
8a:36:40:a9:a4:a6:49:c8:b0:14:3e:e8:8f:81:eb:39:14:45:
4c:81:5f:3f:ad:2a:da:d2:9c:ef:ff:b3:80:2d:7f:e4:f0:e5:
98:12:b4:b0:02:58:f6:60:ad:b1:27:f6:a3:8f:a8:73:e2:88:
28:1c:99:98:a9:1d:6a:3f:92:56:54:2e:e8:9a:14:ce:26:0c:
0d:54:cc:7d:c2:17:37:4b:fc:76:a3:4a:4d:ab:cb:42:a9:eb:
42:80:21:bd:d0:ff:1b:c3:2c:e4:30:e2:98:26:a8:5d:8a:d3:
6f:40:9b:90:80:4e:b5:7e:75:fb:9d:21:f9:2f:dd:87:05:f0:
97:3e:87:7d:99:ef:98:38:92:e7:8e:30:4b:d5:12:c3:ad:d2:
41:9b:bb:3e:4b:00:81:c4:17:35:64:01:83:0f:c4:3a:11:d1:
56:88:0f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:38 2025 by rpki-client