
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer (raw, json)
Hash identifier: AeSDS/A6kqlD60TcC1hMBhGL1zaXQMU8bV5jYXpemiw=
Subject key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 17C40A95824961CC9EC1A47A2ADF5E103FA92237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
caRepository: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 19 Feb 2026 02:42:21 +0000
Certificate not after: Thu 18 Feb 2027 02:47:21 +0000
Subordinate resources: IP: 103.68.136.0/23
IP: 2001:df3:1200::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c4:0a:95:82:49:61:cc:9e:c1:a4:7a:2a:df:5e:10:3f:a9:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 19 02:42:21 2026 GMT
Not After : Feb 18 02:47:21 2027 GMT
Subject: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:ee:05:45:0c:96:09:97:00:4c:5b:ea:28:
13:b3:e1:82:d6:e5:3b:af:42:56:93:01:5e:5b:ff:
0f:41:be:5f:0b:45:42:cd:15:2a:07:ab:dc:b9:58:
85:3a:dd:c5:c8:86:b6:14:30:7d:e7:24:9b:78:b2:
77:d7:54:7d:9e:f8:86:fc:94:e0:08:b6:9b:22:d4:
c7:a0:10:0e:b7:ce:75:f1:8d:f0:fe:8c:0d:eb:3d:
88:e6:e4:a3:13:c9:03:01:55:dc:d7:f2:6e:91:e6:
68:e5:32:d4:87:d3:1e:ec:6a:6b:ba:a5:23:19:c2:
c7:8c:e5:50:fb:cc:e6:d0:e0:dc:71:d5:7f:02:d3:
4f:fb:8d:d7:96:ff:fb:b5:3b:67:52:35:1c:c3:79:
fb:76:8f:c6:9a:26:94:12:c1:bc:38:91:5c:10:6a:
82:59:84:80:59:87:d7:b4:8e:be:d1:c9:8c:25:f3:
cd:d7:8b:34:68:c3:8f:1f:64:1b:0b:0b:56:9c:f7:
be:10:fc:47:f5:c9:68:e2:d2:00:28:08:ed:d0:d6:
c3:ae:ef:2e:6d:fc:d3:ad:74:c5:a8:b4:30:87:b0:
4d:0c:7f:96:6c:51:20:7d:52:6d:46:3f:00:36:6b:
2e:c1:87:bd:63:ba:c1:b2:30:bd:8e:d5:fb:69:39:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.136.0/23
IPv6:
2001:df3:1200::/48
Signature Algorithm: sha256WithRSAEncryption
7b:5c:d5:3d:6c:69:30:d4:1b:af:12:f3:e8:e7:a4:0b:c9:2f:
9c:e5:31:e0:08:23:8f:72:f9:1e:88:e4:1e:2d:bb:ea:91:e8:
fe:5d:13:83:1c:7c:2a:2e:06:88:d6:a3:50:5a:38:3d:cb:76:
4a:cf:d5:19:5a:dc:6d:d0:9c:27:af:5c:e1:f1:9c:87:2d:1c:
b8:72:a7:ea:f8:56:76:86:74:a3:00:60:19:ad:18:8c:09:8b:
c8:0a:e9:8d:4c:35:42:44:61:3c:ba:b1:08:8d:64:ba:1b:4a:
0a:83:48:5e:77:a1:76:69:a9:f1:c3:3e:9e:c6:89:59:27:69:
17:f2:8a:7c:df:c4:8c:b1:36:f1:a7:23:72:6d:c9:28:b8:58:
96:d5:ea:a4:87:0c:a2:1b:37:50:00:6b:21:e6:4a:ee:de:0d:
74:6d:e9:bb:e5:ba:7d:ef:35:60:6a:c2:1a:2b:cc:bd:bb:16:
16:80:10:20:77:3d:ec:69:f7:54:27:25:31:71:82:3a:4a:d0:
6c:97:dd:73:26:28:24:dc:35:2c:8e:bb:73:7a:39:26:3e:fa:
fa:e0:84:1b:78:ad:81:c7:9b:aa:a7:f8:d8:6a:bb:a9:27:4a:
e8:c2:9a:94:1c:cb:86:9e:8e:d6:4a:23:eb:35:b1:2e:8e:5f:
6d:01:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:25 2026 by rpki-client