
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
File: A51BB787CE84E18D5A972818D11BBD38618D7D30.cer (raw, json)
Hash identifier: g3ZBqoWiK/lv6AI3nAXk+NEpTVFw+dcJsVKPNpDzb0M=
Subject key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 21144BA87591297583136CD1B51449C0AEA925DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
caRepository: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 25 Feb 2026 06:30:10 +0000
Certificate not after: Wed 24 Feb 2027 06:35:10 +0000
Subordinate resources: IP: 103.164.16.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:14:4b:a8:75:91:29:75:83:13:6c:d1:b5:14:49:c0:ae:a9:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 25 06:30:10 2026 GMT
Not After : Feb 24 06:35:10 2027 GMT
Subject: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:9d:a7:92:f3:1a:79:e7:69:41:24:d1:84:
6f:db:63:17:71:d9:d3:8d:69:57:da:08:77:9b:21:
12:22:73:6e:f1:85:ca:4e:2e:a1:43:f9:90:ec:a4:
c1:32:e4:d4:0d:4e:15:3a:38:8f:34:67:29:5d:f9:
cb:54:cc:58:13:d7:d7:6e:6a:62:77:7b:12:66:a6:
6c:ef:00:3d:9a:25:35:ff:e9:c5:39:de:bb:2a:a4:
9b:1a:cb:fa:09:41:8d:ef:bd:f6:fa:b0:bb:2b:df:
58:16:71:3b:f2:21:8c:a9:79:d4:57:20:bb:5d:bb:
ae:28:55:f7:08:76:de:30:53:23:71:2b:50:7f:e7:
04:05:d4:b3:70:1e:12:cd:4a:40:36:24:f0:35:20:
b4:b0:bb:8c:84:37:c8:87:7c:18:dd:da:e5:02:4b:
90:77:e6:b8:4b:37:be:d9:72:42:fb:f3:39:56:fa:
16:47:6c:77:91:f9:96:9f:47:01:58:52:db:0c:22:
83:8d:87:24:8d:6b:b0:fd:52:ec:c9:45:19:ea:ec:
0b:34:2c:88:0e:8b:d1:82:04:9d:64:df:ce:e9:c5:
7a:54:93:13:27:c0:b4:6e:5a:e0:3b:e9:c5:35:e3:
f9:8f:4d:d3:92:5d:c9:1a:83:cf:c0:d8:85:27:dc:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.16.0/23
Signature Algorithm: sha256WithRSAEncryption
64:92:29:6d:7e:ce:ad:9e:ee:6f:1b:da:30:22:4f:6c:f1:cf:
74:67:41:92:e8:ea:de:e5:ee:31:7d:22:e9:a7:1d:11:b0:1b:
50:21:a9:4d:49:1a:a7:de:61:6a:0a:9a:32:c1:24:07:f7:33:
1d:fa:2f:34:03:a0:ca:f9:23:ed:81:70:e3:be:08:41:f5:b9:
b1:f2:a3:74:d3:e2:1a:88:f3:9b:2e:54:af:ae:d3:b7:fb:9c:
b5:44:b5:6b:fc:d6:55:b0:ad:08:ae:37:df:4e:a9:17:f3:83:
8f:6a:f5:fc:90:19:77:05:d2:0e:4f:2e:3c:1b:59:ed:0d:da:
b3:5c:a9:e2:29:4c:aa:6e:a9:2b:9d:90:7c:b3:55:d6:1e:54:
f7:38:58:04:9d:76:a3:64:f2:b3:e6:41:f5:07:45:b2:12:c9:
c0:e5:9d:52:ba:f1:c6:27:2a:c9:0f:65:95:1d:11:ab:0b:81:
eb:84:8d:cd:17:2c:fc:7e:e2:41:cf:af:7d:5d:87:ed:a9:54:
71:14:d9:96:6f:49:72:0e:97:44:f8:6d:d6:b5:9c:a0:0f:ca:
05:4e:53:7b:8a:22:00:7c:76:f5:e6:cf:21:8b:e8:0d:a0:62:
3b:c7:dc:7f:cd:be:42:1f:14:ba:9c:a2:32:ac:4e:4e:1d:58:
ff:67:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:32 2026 by rpki-client