
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer
File: 6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer (raw, json)
Hash identifier: cl9rHv+TxWJKObhydmkO9wYM8e1ZpFpKtolGE82Vsnk=
Subject key identifier: 67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3F49704B9D68058AE76D1E05567CCD4D18A0DCC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 28 Feb 2026 12:36:18 +0000
Certificate not after: Sat 27 Feb 2027 12:41:18 +0000
Subordinate resources: IP: 103.167.22.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:49:70:4b:9d:68:05:8a:e7:6d:1e:05:56:7c:cd:4d:18:a0:dc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 28 12:36:18 2026 GMT
Not After : Feb 27 12:41:18 2027 GMT
Subject: CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:31:5d:2d:16:a8:ab:88:c0:68:79:26:f6:
5d:d0:e7:d9:a2:00:8b:fe:23:19:03:e2:2d:68:64:
c1:19:a4:99:a2:a6:c6:b9:77:9e:e2:5e:07:a9:23:
6b:33:01:1d:b4:0d:0f:4f:a7:9d:d8:1b:a4:a4:9c:
ee:48:83:87:4a:18:ca:16:a7:17:b0:a2:97:d4:09:
a2:f3:3c:8c:0a:e8:ad:7e:d5:0d:d2:bb:5b:d8:2d:
ea:5c:a0:51:0a:86:a6:d1:43:af:66:d9:14:25:71:
be:a1:7f:dd:cf:e0:f4:03:45:a1:4c:65:c5:94:44:
a7:84:fa:0a:af:59:c4:ee:d6:ce:50:10:e9:2f:0a:
91:ad:b8:8b:ff:57:a0:8b:c7:1a:93:8f:0f:8b:2b:
11:07:7b:43:b8:46:b1:33:33:75:74:eb:a1:cb:12:
4e:9f:f5:41:24:68:7e:6e:4e:86:65:04:da:e8:6a:
a9:9e:60:a5:55:30:95:3f:94:e5:c8:cf:ca:91:d4:
90:62:3e:9a:14:13:01:ae:68:81:46:12:ed:36:86:
23:69:9b:bd:29:11:0d:a8:b2:85:32:21:ae:e0:d0:
38:e3:26:84:47:c2:c7:93:a6:b2:75:f9:37:88:d7:
d1:63:07:a7:8c:55:a5:88:56:ef:f7:04:82:d8:59:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.22.0/23
Signature Algorithm: sha256WithRSAEncryption
65:df:7a:50:fe:fd:9e:08:62:c0:e6:ed:15:0d:40:7e:d3:6d:
cc:4a:ca:c4:26:7c:8a:2e:ab:53:9e:da:cb:bb:c7:d0:28:19:
af:01:aa:80:8c:bb:30:a5:85:3d:cb:66:8f:dd:a2:7c:32:e9:
7d:1c:65:67:18:fc:cb:53:05:63:a8:47:14:bb:a0:62:04:6b:
34:5d:21:38:28:26:b8:a3:fd:f3:cd:32:45:cd:7d:0c:69:e4:
d4:39:e8:60:a9:73:6a:64:81:5e:8c:64:b8:64:6f:c4:03:88:
34:ea:67:2d:1c:ac:c6:c0:bd:ae:68:21:4a:10:9c:c1:a4:ed:
97:e7:bc:98:ce:a0:0a:11:4c:00:a3:9c:87:7b:c9:4c:ec:80:
a2:78:b4:c7:97:70:0d:69:1b:7f:97:92:d4:12:d9:c0:e6:1e:
3d:4f:52:fb:a4:b9:db:09:a7:b6:4d:fb:30:d5:2b:26:af:71:
28:b2:98:b5:fb:f1:51:aa:76:1c:44:5e:41:e4:7a:15:d7:47:
c0:2d:2b:0c:3c:a4:28:93:70:ca:6a:9a:94:4a:68:e6:1e:d3:
14:e5:96:6d:cd:c5:0e:ef:9b:e6:73:91:d3:5e:5c:8a:40:15:
0a:3c:be:46:de:65:cd:d1:1e:0f:45:83:9b:6a:e9:73:0e:c0:
c6:24:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:41 2026 by rpki-client