
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
File: 79204255412F26FC4519CA94E35B93EF4E47BC73.cer (raw, json)
Hash identifier: FhxV1ppM9FYftbA5vViEkL3QG7DIfLfVV8uJWATcQro=
Subject key identifier: 79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7A66A6BF91A38343B9D76AADD07172D118AB265D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
caRepository: rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 28 Feb 2026 23:01:03 +0000
Certificate not after: Sat 27 Feb 2027 23:06:03 +0000
Subordinate resources: IP: 103.164.22.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:66:a6:bf:91:a3:83:43:b9:d7:6a:ad:d0:71:72:d1:18:ab:26:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 28 23:01:03 2026 GMT
Not After : Feb 27 23:06:03 2027 GMT
Subject: CN=79204255412F26FC4519CA94E35B93EF4E47BC73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:7f:ba:9d:ee:54:32:58:76:c1:81:24:f9:
49:6b:20:5d:ae:f6:81:bd:d3:ae:56:59:14:9c:9d:
6a:00:f3:eb:18:02:ed:8e:62:a3:c4:76:f5:0c:7c:
ee:65:e0:3d:60:b7:a8:34:49:71:3d:06:13:79:9a:
ab:f3:47:4f:82:0b:28:a2:c6:85:86:fa:55:72:03:
0e:d3:27:55:74:4f:38:9a:4f:e4:e8:06:1f:78:0f:
92:a3:84:10:80:83:3e:00:95:90:e1:d1:b3:68:1e:
74:ef:6f:b4:c4:d3:ab:9c:9d:ab:68:8b:59:d3:f3:
47:a9:f6:22:12:01:4f:ee:a3:39:ae:90:d9:c3:e2:
53:e3:c0:bd:33:1f:f5:37:55:5e:7f:bc:8f:4d:b5:
11:8c:ef:51:4b:bb:d5:cd:c8:b5:23:45:99:5a:85:
0e:85:71:2d:7b:d2:c0:a9:79:dd:95:83:67:80:de:
1f:9b:4e:d6:1a:54:1c:bf:de:f3:c1:3c:18:2f:91:
2e:9a:8a:b3:f8:a0:d9:ee:93:e7:f6:f2:1a:86:c3:
76:5d:89:d2:69:02:ba:48:eb:12:3e:f1:78:7d:2e:
31:d0:82:9c:2c:4c:7e:f2:eb:f1:cc:36:8c:e3:7e:
7c:89:8c:1c:a7:7b:40:98:35:c6:79:93:32:66:bb:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.22.0/23
Signature Algorithm: sha256WithRSAEncryption
50:76:13:10:ac:7b:01:15:b6:26:35:4e:b8:48:5f:44:af:30:
21:16:9a:e0:e8:02:e6:a4:9b:fe:6f:2e:c1:be:d7:41:f2:04:
75:04:09:ad:e2:e7:dc:d5:1e:52:13:00:53:e0:4c:28:e7:20:
10:3f:88:d6:66:34:b7:d1:fd:3f:e0:84:4c:0a:85:d6:57:f3:
62:58:a8:62:d5:b4:23:ab:d4:70:4a:a7:8d:87:d0:4a:be:aa:
79:eb:8f:73:93:6c:f3:d7:0d:d5:a0:44:ca:9e:ab:88:f2:94:
ed:0d:95:0c:a5:18:5e:10:dd:a5:0a:62:f6:4c:39:cb:bf:ed:
d4:2e:f4:88:9f:47:38:0a:1f:c3:e1:4f:00:ae:7d:3e:84:06:
c5:78:d6:3f:b7:bd:62:5c:b5:ed:ab:20:9c:05:51:59:d6:f6:
70:c2:04:e7:c5:f9:5f:e8:c1:bd:b4:9b:5f:d3:11:fe:3f:1a:
0c:a1:0e:8e:9e:ac:11:65:8d:a8:23:78:d3:4a:17:c2:7d:bb:
9b:c8:fb:6d:3f:59:6d:a3:8e:e4:37:04:07:e7:b6:4a:af:f1:
ff:fd:a8:89:8d:00:3e:ab:fb:e4:4e:a0:af:9f:d4:aa:76:5d:
36:5a:cd:3a:4e:fc:ae:f2:9e:95:49:5b:c2:10:d9:48:28:37:
d6:f3:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:31 2026 by rpki-client