
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
File: A575236C1BE8E700EF4D54FB243030C7256654C6.cer (raw, json)
Hash identifier: dBAmHDZwfp2DwhIAwHt7qwR4U4qsie281ouwosmZv+0=
Subject key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 01FAFB71BDE940F5E168220517BFB954DE14FC4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 21:43:21 +0000
Certificate not after: Wed 03 Feb 2027 21:48:21 +0000
Subordinate resources: IP: 103.175.204.0/24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fa:fb:71:bd:e9:40:f5:e1:68:22:05:17:bf:b9:54:de:14:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 4 21:43:21 2026 GMT
Not After : Feb 3 21:48:21 2027 GMT
Subject: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:d9:e9:f7:c2:89:b6:44:58:87:b1:66:ee:
b4:a8:ea:39:d3:5c:a0:aa:ad:7b:2c:27:70:20:02:
47:47:40:a9:48:3a:9f:0f:c9:4f:42:21:b2:6e:a1:
63:e9:89:d0:da:76:d3:b4:f5:36:e5:14:57:e7:64:
ca:69:a2:0c:bc:55:6d:43:b8:89:44:af:82:56:79:
46:5e:b1:68:07:eb:b4:3a:14:d5:10:ee:9f:e6:4e:
d5:6b:03:20:fa:b0:d0:ee:38:a0:c0:c7:61:34:00:
b4:5f:90:83:03:c7:81:c5:65:e1:e4:13:38:0e:28:
09:c2:6a:a5:54:c1:64:47:ad:b8:ba:5e:81:14:b7:
1c:73:3a:fa:da:6f:a5:19:c0:94:82:23:6e:f0:64:
66:82:cc:d8:e1:08:58:01:51:68:e2:ec:b5:03:3d:
21:90:ee:ac:1b:b9:e0:e8:d8:d2:25:f2:71:66:8a:
58:b5:51:bb:ac:1f:1e:7f:a8:e5:45:ca:bd:93:f3:
38:f5:3d:f8:67:0e:5b:ec:34:27:fb:34:a0:59:63:
f8:75:6b:af:5f:ff:09:3d:ce:4f:16:5b:27:57:28:
75:aa:ac:60:09:ab:65:ce:01:dc:47:90:53:83:1e:
f2:5d:9b:40:55:1c:1d:4b:30:b7:d3:34:a8:83:ae:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.204.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2f:10:f4:be:2c:9a:3a:40:3f:25:ea:6c:ee:6f:95:e0:62:
3d:55:b8:ac:d0:f5:4b:5a:d5:b8:ac:2b:ef:c7:45:1f:54:78:
ad:94:2c:ec:56:c1:34:95:eb:7d:ec:e0:9e:8b:49:a0:9f:56:
8d:56:32:f3:cb:21:ea:00:af:fe:1e:50:ce:a7:14:9e:ad:09:
27:8f:23:ee:b6:70:75:69:0f:7f:0a:7b:29:d7:eb:9c:5a:3d:
1c:37:c3:e6:7e:75:ce:5a:6b:21:bf:88:db:c4:df:dd:68:8e:
54:86:a4:8e:de:84:67:14:62:10:87:41:82:cd:86:c5:53:7a:
b7:cf:2e:9a:72:d4:76:9d:da:a9:16:e2:b7:f4:e9:cf:f5:83:
60:c3:9a:44:81:64:65:cc:66:ba:33:06:b6:fe:d3:3c:44:8f:
3e:95:ff:74:36:a1:dc:85:69:73:01:26:c1:47:26:da:f3:bb:
69:ff:c8:c6:94:19:c8:cd:c6:8d:27:13:8e:71:71:19:5f:9c:
fa:a5:9a:21:9e:d9:95:8b:19:d7:10:eb:c3:fb:ec:8c:37:10:
13:6d:15:fd:51:d6:eb:21:57:e8:5c:e2:2b:f7:48:9e:63:50:
45:9f:e1:46:5b:e8:82:4c:c6:49:41:66:c2:d3:1d:fd:ab:73:
a1:02:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:37 2026 by rpki-client