
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer (raw, json)
Hash identifier: NGRXy6xTkrXS6MXf88XrwNvt8OBTTlML6LMxkLNPvfM=
Subject key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 781C69135A9C26D17A284321B75BB24EA467B447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
caRepository: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 03 Jun 2025 15:41:26 +0000
Certificate not after: Tue 02 Jun 2026 15:46:26 +0000
Subordinate resources: IP: 103.50.24.0/22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1c:69:13:5a:9c:26:d1:7a:28:43:21:b7:5b:b2:4e:a4:67:b4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 3 15:41:26 2025 GMT
Not After : Jun 2 15:46:26 2026 GMT
Subject: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:fa:5f:04:32:c8:11:4a:c6:7d:6e:bd:0a:
91:14:b8:c6:1e:38:1b:ec:bc:29:28:7b:1e:bf:36:
2b:9b:97:64:75:cb:df:7c:38:a7:05:4d:78:a7:97:
59:54:08:d7:1b:d7:c1:65:e2:02:60:ba:03:67:a3:
c1:32:40:d1:6a:6b:fa:5b:cb:39:d5:1c:85:a1:5f:
46:06:12:79:64:4c:0b:42:1f:90:9d:62:21:a6:18:
13:59:cd:77:2d:cd:6f:5b:15:4f:ee:16:74:72:04:
80:41:a1:12:3b:1d:c1:14:b6:2b:1b:49:cb:dc:4c:
c8:d7:bc:84:1b:a7:43:78:4f:a7:64:b6:45:f1:8a:
39:02:1b:ec:32:4c:b6:91:be:43:0c:5d:50:4f:fd:
2b:70:4a:80:f3:fa:28:60:44:6d:06:98:20:47:e5:
66:6e:11:4b:4e:ec:8b:04:63:4e:64:e0:fd:e1:ef:
4d:20:df:da:ec:86:a4:2f:14:de:af:bf:37:da:a8:
15:48:e2:f3:08:a9:40:9b:0a:2f:d2:24:31:aa:b7:
83:c6:27:54:2f:bf:8a:76:da:d5:f0:2a:25:b4:b4:
ed:5a:8b:02:88:ec:3c:76:72:8d:86:c1:b0:91:d9:
c9:9f:1f:f3:5b:99:8b:c3:9a:91:0f:1a:98:98:e2:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.50.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:39:8b:61:91:4f:bf:f0:2f:b2:6e:fd:b5:56:ad:d6:0e:2b:
3c:90:07:ad:34:28:01:62:3a:72:db:e8:73:af:24:39:ee:4e:
df:14:89:20:75:a5:87:21:9a:89:91:63:e6:7b:7f:a2:f8:2c:
f2:83:a1:c5:0b:8e:87:2b:a3:e0:9b:15:dc:b1:d8:93:7a:13:
e4:e3:2c:fa:75:7e:09:61:08:e8:5c:ce:8c:01:cd:5f:bd:da:
33:23:70:56:c2:58:0e:6d:a5:da:64:c3:85:0e:04:0c:e4:87:
fc:f3:d4:95:41:2e:36:41:1d:fe:7f:3e:d8:f6:23:8e:d8:02:
55:fd:e2:32:12:a1:b5:54:5c:0b:ea:47:87:9c:97:6b:f9:d2:
7f:4c:91:84:6c:d2:3d:12:1d:c1:30:e9:30:19:76:c6:88:8e:
9d:a3:2a:ef:0b:70:49:4c:f1:15:bb:13:ba:d5:c8:96:3a:d0:
c3:6f:5e:51:a6:0d:b5:ac:da:83:ef:41:be:97:99:f6:15:6f:
e0:b5:5a:72:d4:6f:ac:98:fa:d4:b0:a1:4a:22:ba:4f:3d:36:
a1:d5:70:77:ac:08:0e:be:97:ec:de:eb:0b:e7:98:40:f5:4f:
ea:18:fb:f0:aa:5e:f7:86:d0:d9:ef:b6:3a:41:9f:80:51:55:
f1:3c:14:89
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUeBxpE1qcJtF6KEMht1uyTqRntEcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE1NDEyNloX
DTI2MDYwMjE1NDYyNlowMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBD
RjQ4RkYzMUJBRkQ3MUQyRDEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkT+l8EMsgRSsZ9br0KkRS4xh44G+y8KSh7Hr82K5uXZHXL33w4pwVNeKeX
WVQI1xvXwWXiAmC6A2ejwTJA0Wpr+lvLOdUchaFfRgYSeWRMC0IfkJ1iIaYYE1nN
dy3Nb1sVT+4WdHIEgEGhEjsdwRS2KxtJy9xMyNe8hBunQ3hPp2S2RfGKOQIb7DJM
tpG+QwxdUE/9K3BKgPP6KGBEbQaYIEflZm4RS07siwRjTmTg/eHvTSDf2uyGpC8U
3q+/N9qoFUji8wipQJsKL9IkMaq3g8YnVC+/inba1fAqJbS07VqLAojsPHZyjYbB
sJHZyZ8f81uZi8OakQ8amJjiNs0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGwVl2B6DD6sPjDPSP8xuv1x0tEhMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8zNzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQx
LWQ2YzYtNDA5ZS04YWQxLTVlODlhNGIyODUwZS8wLzZDMTU5NzYwN0EwQzNFQUMz
RTMwQ0Y0OEZGMzFCQUZENzFEMkQxMjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnMhgwDQYJKoZIhvcNAQELBQADggEBAC85i2GRT7/wL7Ju/bVWrdYOKzyQB600
KAFiOnLb6HOvJDnuTt8UiSB1pYchmomRY+Z7f6L4LPKDocULjocro+CbFdyx2JN6
E+TjLPp1fglhCOhczowBzV+92jMjcFbCWA5tpdpkw4UOBAzkh/zz1JVBLjZBHf5/
Ptj2I47YAlX94jISobVUXAvqR4ecl2v50n9MkYRs0j0SHcEw6TAZdsaIjp2jKu8L
cElM8RW7E7rVyJY60MNvXlGmDbWs2oPvQb6XmfYVb+C1WnLUb6yY+tSwoUoiuk89
NqHVcHesCA6+l+ze6wvnmED1T+oY+/CqXveG0NnvtjpBn4BRVfE8FIk=
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:31:36 2025 by rpki-client