
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
File: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer (raw, json)
Hash identifier: 4+VH4xh1xyfm96TCoDB1kr3Bh79qK9JEBUmSQpejHpk=
Subject key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 78C03A8BE68994EEE59A680E1264A879ADC81201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
caRepository: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 25 Feb 2026 02:53:49 +0000
Certificate not after: Wed 24 Feb 2027 02:58:49 +0000
Subordinate resources: IP: 103.172.70.0/23
IP: 2001:df1:98c0::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c0:3a:8b:e6:89:94:ee:e5:9a:68:0e:12:64:a8:79:ad:c8:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 25 02:53:49 2026 GMT
Not After : Feb 24 02:58:49 2027 GMT
Subject: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:b4:37:8b:c0:46:69:6a:2c:88:4d:f5:c8:
7a:68:5a:ba:8a:c1:dc:20:20:20:46:43:35:ce:8f:
2c:af:74:19:61:4d:95:80:08:8d:f6:3d:02:99:f2:
70:40:4f:96:06:70:cf:3f:75:b9:23:a8:98:1f:47:
b3:8e:57:fa:3b:29:f3:85:a4:2c:f0:8d:b5:76:af:
64:51:08:14:80:dd:bf:31:ec:63:6b:cd:c6:2c:38:
17:5e:34:ee:99:5c:21:30:75:52:18:42:0e:60:39:
5d:18:f7:23:a2:25:8f:94:88:b2:2a:ce:e2:18:95:
14:28:66:6b:0c:2e:11:c5:f6:64:36:cb:47:dd:08:
aa:6a:a1:7c:9b:8a:03:7f:c0:6f:8f:b7:ba:29:4d:
22:84:5d:e9:54:bf:ea:08:11:a8:69:04:4e:9f:b6:
5c:30:65:13:3a:28:ac:7f:ff:05:52:24:38:c2:65:
b4:28:6a:6b:e0:6c:9d:82:76:7f:f1:c2:66:bd:2b:
fe:84:f0:52:a8:49:3b:ef:70:7d:ed:82:fa:45:89:
27:19:b7:76:97:31:a6:8f:bc:2e:ea:82:5e:46:03:
01:32:4f:0e:b9:b7:73:a6:0d:d2:29:48:ff:a5:a2:
5f:41:59:a9:bd:95:0a:0f:9b:02:e8:54:59:5c:73:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.70.0/23
IPv6:
2001:df1:98c0::/48
Signature Algorithm: sha256WithRSAEncryption
49:a4:c1:a7:51:a6:81:cf:c1:a2:a6:c8:98:4e:87:5e:1e:98:
5f:32:20:b0:05:89:55:c2:bd:93:27:3b:0e:d9:a1:a2:c6:87:
6c:26:61:3a:17:cf:70:c9:f2:51:0b:26:97:2c:bc:3e:99:13:
c2:51:b7:b8:5c:b9:17:e6:2e:ad:b6:b8:d3:40:1c:75:71:20:
6e:dd:4f:97:98:d3:9f:31:ab:33:b9:fb:23:5f:1e:1a:3d:55:
35:30:cb:f7:c5:e2:fa:72:00:4e:09:34:6d:3c:51:b3:18:77:
40:34:5d:63:6e:77:20:90:63:f8:e4:be:d1:64:c5:0e:da:f0:
81:3e:f8:69:5b:58:02:1f:e6:be:a2:b3:ba:23:b2:aa:93:c5:
3f:9f:95:62:1d:af:7c:c0:d5:f1:1f:8e:c5:92:97:a5:19:a2:
48:d2:6c:b2:81:e0:6f:ac:31:c1:27:db:c8:19:b9:70:7c:6c:
34:49:b1:ba:81:de:3b:04:70:68:52:44:9d:42:eb:0a:5c:bc:
7b:d3:bc:3b:d1:9c:c3:bd:37:d9:03:6b:45:38:de:e7:74:42:
35:1d:4b:54:62:53:a2:6f:d1:60:c1:78:40:3e:32:8a:13:52:
45:a1:1a:de:bb:fc:a2:db:80:0f:5d:36:df:c6:b0:03:23:89:
49:d1:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:16 2026 by rpki-client