
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer
File: C816A670D0EF35D7923125F4B2671225E2E843FB.cer (raw, json)
Hash identifier: FTnijLNBgz04gO3EAniybNlJTX43XBlGmhWa0ZTbJDk=
Subject key identifier: C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2C9B8B72BEE80D76BAB306FC4989524A3273A22C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 05 Feb 2026 03:43:09 +0000
Certificate not after: Thu 04 Feb 2027 03:48:09 +0000
Subordinate resources: IP: 103.141.62.0/23
IP: 2001:df0:f180::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9b:8b:72:be:e8:0d:76:ba:b3:06:fc:49:89:52:4a:32:73:a2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 5 03:43:09 2026 GMT
Not After : Feb 4 03:48:09 2027 GMT
Subject: CN=C816A670D0EF35D7923125F4B2671225E2E843FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:d6:e3:0d:3b:55:03:bc:f6:9f:c3:79:c2:
05:89:f5:ca:d8:45:da:6d:ff:cc:44:17:ca:1d:f5:
49:79:37:b0:3d:65:f9:8c:1e:e0:58:b9:52:f6:d4:
dd:5a:1a:7b:c0:a4:e3:25:25:ce:62:51:9d:74:3d:
62:9e:c3:b9:c3:26:28:97:fd:1d:07:f6:4d:f4:46:
60:97:60:1d:16:3a:98:4f:59:7b:a1:22:6a:18:c3:
f7:ea:03:32:32:31:f8:97:45:82:c2:31:b8:1e:bb:
27:50:30:ed:71:69:cb:f0:bb:f0:ae:66:92:d4:1d:
19:ce:b5:49:42:e5:a2:a9:40:f3:31:a0:ab:19:12:
66:5e:99:2a:b1:2e:2f:7f:c3:a7:e3:83:ba:99:11:
eb:2a:8a:0b:d2:b6:26:f2:dc:57:b8:50:e1:58:3e:
15:95:76:6e:24:a7:53:21:a1:53:bb:c4:03:50:e1:
d8:28:b1:b1:ac:7c:25:d9:a8:b3:4f:4f:8d:f3:ce:
d4:c4:1d:fe:67:44:59:98:c0:9f:aa:56:5b:ec:87:
8b:04:b2:1b:7b:62:69:b0:07:f9:d5:7c:c6:bb:cf:
bf:f6:0d:40:9e:e8:95:bd:a7:a2:cc:11:a1:f1:e0:
e6:a0:2e:ab:83:04:a5:d4:77:45:b3:ad:e4:7e:e1:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.62.0/23
IPv6:
2001:df0:f180::/48
Signature Algorithm: sha256WithRSAEncryption
91:f6:85:14:de:97:e4:23:77:8b:bf:8d:95:1a:f6:cd:3c:4e:
be:f5:57:50:90:86:e4:80:dc:33:cd:79:93:d3:98:27:3f:e6:
66:96:1b:56:ae:e5:72:25:f3:6f:2e:54:c1:aa:89:07:a9:23:
cd:aa:38:40:bd:3e:9e:90:71:38:ec:b7:aa:2a:58:b4:69:b4:
47:e0:32:8c:7d:fe:d6:5f:d7:6b:cf:ba:a4:c2:ab:6f:34:19:
2f:49:3e:fc:40:00:e4:66:d0:9d:bd:88:b3:35:e7:e5:10:3c:
be:19:c5:7b:aa:3c:42:ac:23:a4:71:83:9e:b8:b7:cb:e2:e8:
15:ac:00:39:62:e1:33:25:98:29:1e:6f:2e:a5:5c:d2:99:6b:
e4:0c:8e:30:76:32:93:07:c3:33:7f:6e:a7:74:60:91:7f:46:
0d:ac:78:de:21:c5:80:cc:6c:59:d0:25:64:79:66:81:2d:65:
19:fe:03:34:0e:f0:36:a1:35:16:ca:e7:3c:51:e9:90:e2:68:
a1:e6:cb:5c:5c:66:f4:79:8d:21:80:87:a0:40:b3:57:a9:1c:
db:1a:22:67:40:fa:69:bb:c6:3b:4d:30:87:94:51:07:91:b1:
8e:fa:f0:fa:92:d2:17:da:31:dd:27:65:d8:a7:13:ca:47:59:
b9:c8:4d:4c
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIULJuLcr7oDXa6swb8SYlSSjJzoiwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNTAzNDMwOVoX
DTI3MDIwNDAzNDgwOVowMzExMC8GA1UEAxMoQzgxNkE2NzBEMEVGMzVENzkyMzEy
NUY0QjI2NzEyMjVFMkU4NDNGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKSu1uMNO1UDvPafw3nCBYn1ythF2m3/zEQXyh31SXk3sD1l+Ywe4Fi5UvbU
3Voae8Ck4yUlzmJRnXQ9Yp7DucMmKJf9HQf2TfRGYJdgHRY6mE9Ze6EiahjD9+oD
MjIx+JdFgsIxuB67J1Aw7XFpy/C78K5mktQdGc61SULloqlA8zGgqxkSZl6ZKrEu
L3/Dp+ODupkR6yqKC9K2JvLcV7hQ4Vg+FZV2biSnUyGhU7vEA1Dh2Cixsax8Jdmo
s09PjfPO1MQd/mdEWZjAn6pWW+yHiwSyG3tiabAH+dV8xrvPv/YNQJ7olb2noswR
ofHg5qAuq4MEpdR3RbOt5H7hUo0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFMgWpnDQ7zXXkjEl9LJnEiXi6EP7MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iODdkNDQ2Yy0xMTQ0LTQwMDktYmQ5OC0wNjc4ZDY0N2Y0Y2UvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4N2Q0NDZj
LTExNDQtNDAwOS1iZDk4LTA2NzhkNjQ3ZjRjZS8wL0M4MTZBNjcwRDBFRjM1RDc5
MjMxMjVGNEIyNjcxMjI1RTJFODQzRkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAFnjT4wDwQCAAIwCQMHACABDfDxgDANBgkqhkiG9w0BAQsFAAOCAQEAkfaFFN6X
5CN3i7+NlRr2zTxOvvVXUJCG5IDcM815k9OYJz/mZpYbVq7lciXzby5UwaqJB6kj
zao4QL0+npBxOOy3qipYtGm0R+AyjH3+1l/Xa8+6pMKrbzQZL0k+/EAA5GbQnb2I
szXn5RA8vhnFe6o8QqwjpHGDnri3y+LoFawAOWLhMyWYKR5vLqVc0plr5AyOMHYy
kwfDM39up3RgkX9GDax43iHFgMxsWdAlZHlmgS1lGf4DNA7wNqE1FsrnPFHpkOJo
oebLXFxm9HmNIYCHoECzV6kc2xoiZ0D6abvGO00wh5RRB5Gxjvrw+pLSF9ox3Sdl
2KcTykdZuchNTA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:51 2026 by rpki-client