
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
File: 98906779AB8F30762B65B3E6AD7F48326A08605E.cer (raw, json)
Hash identifier: qfPTZGzA6pe0NwTp5+mNd4m/ubBrrurlcnFXyPOYux4=
Subject key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4FA3C83282A9A814F3912F22BA7A50B667B97FA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 15 Feb 2026 19:08:22 +0000
Certificate not after: Sun 14 Feb 2027 19:13:22 +0000
Subordinate resources: IP: 103.126.232.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a3:c8:32:82:a9:a8:14:f3:91:2f:22:ba:7a:50:b6:67:b9:7f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 15 19:08:22 2026 GMT
Not After : Feb 14 19:13:22 2027 GMT
Subject: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:40:9f:8e:6a:0b:2c:e6:11:78:0f:c8:49:
e8:57:7e:9a:ec:ca:cc:1d:b0:df:b9:34:67:d6:b3:
1d:e9:d9:7e:7f:fc:48:56:6d:3d:9c:4b:b1:ff:f7:
d0:78:f3:66:94:33:78:e5:b1:b7:23:09:8e:e4:eb:
97:f7:0a:5a:b6:41:8b:2e:49:3a:af:6d:fc:80:ac:
65:f5:9b:00:8e:6b:6c:59:53:70:9b:6b:2b:ab:6a:
65:74:90:d8:67:f5:a4:ad:70:0e:3f:ea:d6:5b:67:
19:5c:a0:7a:05:51:e0:22:25:dd:36:a4:9e:83:f4:
f1:74:de:d8:df:d1:d1:7a:2b:50:43:2a:b5:f7:ea:
2a:07:e1:4b:88:c6:f4:c1:73:d9:83:86:45:13:8c:
c0:2b:c5:ac:ca:73:d9:8e:d8:52:6e:0f:47:8f:c5:
99:3a:c0:06:a9:ae:1e:79:dd:26:8c:85:56:20:dd:
e7:d7:27:e1:a5:6b:07:0a:46:e8:6c:ac:f8:e4:6b:
df:b5:0a:e4:c4:f9:c4:bb:40:e0:b1:78:ee:c8:a3:
41:40:ab:0f:49:fd:e5:1c:2e:1f:23:45:26:47:70:
03:a1:bd:8b:5b:a0:ca:74:d0:77:8e:fb:49:93:c9:
87:27:3d:09:2b:d6:32:d5:c5:c6:bd:fd:2f:93:9d:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.232.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c2:5b:28:8e:98:ea:f3:4b:cb:e8:27:9f:7b:5b:28:6b:2d:
c6:68:f8:e1:d8:5a:f3:f8:7c:c9:05:b7:0d:1b:81:2a:23:0a:
70:0b:78:8e:32:08:67:c1:59:8c:86:51:28:00:81:d8:c9:a3:
cf:4c:62:0b:e8:02:5d:54:bf:85:7f:d9:38:e0:da:62:36:84:
d5:91:c3:7d:12:68:6c:c3:74:fe:a5:2f:e5:e7:d4:2a:92:0a:
13:ea:3a:55:68:ab:52:d5:e9:28:2b:be:b4:c3:c2:d5:13:98:
e7:79:1d:0b:84:e4:75:25:33:07:05:3f:61:94:12:20:97:f6:
b5:20:5c:44:1a:cf:ff:5c:65:15:69:fb:5d:72:6f:8e:93:65:
58:0c:ac:7b:24:ab:d8:e2:d5:1e:b2:58:23:1d:6d:c5:a9:7c:
52:bc:92:08:ca:be:e9:5d:bc:f7:9e:92:68:84:b6:bb:8c:09:
b2:81:56:38:d4:8b:2a:a2:40:5e:1a:0f:30:52:e3:bb:3b:93:
8c:f1:3e:35:46:62:7f:9e:eb:6d:c1:c2:f6:dd:25:a1:56:8d:
6d:ec:60:1c:2a:12:6d:24:6c:2e:99:93:38:0b:51:b7:3c:1a:
64:68:8c:c0:11:f8:91:7e:02:67:3f:42:dd:ee:34:0d:aa:8d:
de:5e:1d:08
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUT6PIMoKpqBTzkS8iunpQtme5f6MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNTE5MDgyMloX
DTI3MDIxNDE5MTMyMlowMzExMC8GA1UEAxMoOTg5MDY3NzlBQjhGMzA3NjJCNjVC
M0U2QUQ3RjQ4MzI2QTA4NjA1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMgDQJ+Oagss5hF4D8hJ6Fd+muzKzB2w37k0Z9azHenZfn/8SFZtPZxLsf/3
0HjzZpQzeOWxtyMJjuTrl/cKWrZBiy5JOq9t/ICsZfWbAI5rbFlTcJtrK6tqZXSQ
2Gf1pK1wDj/q1ltnGVygegVR4CIl3TaknoP08XTe2N/R0XorUEMqtffqKgfhS4jG
9MFz2YOGRROMwCvFrMpz2Y7YUm4PR4/FmTrABqmuHnndJoyFViDd59cn4aVrBwpG
6Gys+ORr37UK5MT5xLtA4LF47sijQUCrD0n95RwuHyNFJkdwA6G9i1ugynTQd477
SZPJhyc9CSvWMtXFxr39L5OdEvcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJiQZ3mrjzB2K2Wz5q1/SDJqCGBeMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by84OWE0MDA4OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5YTQwMDg5
LTYwNDEtNDVlZC04ZTQ0LWE5OTdjOGFjZjQ4MC8wLzk4OTA2Nzc5QUI4RjMwNzYy
QjY1QjNFNkFEN0Y0ODMyNkEwODYwNUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnfugwDQYJKoZIhvcNAQELBQADggEBAE/CWyiOmOrzS8voJ597WyhrLcZo+OHY
WvP4fMkFtw0bgSojCnALeI4yCGfBWYyGUSgAgdjJo89MYgvoAl1Uv4V/2Tjg2mI2
hNWRw30SaGzDdP6lL+Xn1CqSChPqOlVoq1LV6SgrvrTDwtUTmOd5HQuE5HUlMwcF
P2GUEiCX9rUgXEQaz/9cZRVp+11yb46TZVgMrHskq9ji1R6yWCMdbcWpfFK8kgjK
vuldvPeekmiEtruMCbKBVjjUiyqiQF4aDzBS47s7k4zxPjVGYn+e623BwvbdJaFW
jW3sYBwqEm0kbC6ZkzgLUbc8GmRojMAR+JF+Amc/Qt3uNA2qjd5eHQg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:42 2026 by rpki-client