
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
File: DA3283EBD45CCF7056D92A914183FB7825C66692.cer (raw, json)
Hash identifier: gJoKug9Sa/C/Qnjl0N4EdtrmJ2ZWfbDr5qWvhF+bx6w=
Subject key identifier: DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 32EF01888181711130249970277815FF0CD563A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
caRepository: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 27 Feb 2026 23:14:29 +0000
Certificate not after: Fri 26 Feb 2027 23:19:29 +0000
Subordinate resources: IP: 103.166.36.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ef:01:88:81:81:71:11:30:24:99:70:27:78:15:ff:0c:d5:63:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 27 23:14:29 2026 GMT
Not After : Feb 26 23:19:29 2027 GMT
Subject: CN=DA3283EBD45CCF7056D92A914183FB7825C66692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:0d:f0:1f:74:b5:d6:f6:be:40:7c:d0:5a:
b9:ca:58:84:9b:f1:97:56:66:d3:5c:ba:87:42:5f:
ce:73:e2:fa:81:09:81:79:06:a8:f2:6c:9d:cb:05:
c3:ba:60:27:af:c7:59:5d:ac:f6:0a:c6:88:41:b9:
02:65:21:96:4e:88:b6:7e:6a:e7:29:f2:c4:c6:73:
6b:2b:68:74:0c:cb:c2:84:77:8d:fd:ee:20:db:88:
da:91:69:a7:03:13:4e:4b:4f:04:51:16:d5:33:94:
09:cc:0f:b2:79:39:76:bd:62:30:4c:45:96:ff:ad:
cf:2e:ff:6a:95:ea:12:0a:06:b4:29:6d:56:f2:a5:
a0:33:c0:77:ff:8a:81:3f:da:0a:a6:2f:41:fe:12:
53:cb:bc:ac:f1:00:a3:ca:16:f4:80:5b:5f:6f:78:
e5:25:b5:8d:03:e9:7c:59:b1:62:9b:d9:e3:ee:09:
6a:9f:3e:85:88:fc:ed:fe:f3:f4:46:89:4a:38:a9:
1e:77:66:c5:9c:ce:3a:50:2f:f9:b1:4a:1d:98:09:
a5:b1:de:97:f7:3a:eb:af:b8:8b:68:a2:e7:27:6e:
88:6a:81:d1:3b:88:e3:10:5d:27:fd:cd:40:89:bf:
00:5e:e3:66:7c:bf:ab:24:ba:0e:60:a8:e1:3d:3e:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.36.0/23
Signature Algorithm: sha256WithRSAEncryption
24:da:3f:65:75:59:f9:23:b1:99:24:77:25:8b:41:7d:d4:d9:
0c:1b:27:bb:d3:f4:1a:1a:65:c3:58:2f:1c:f4:09:33:00:27:
a2:1d:1f:7c:da:2f:68:01:1f:93:1a:dc:b2:af:41:c1:9b:d9:
a3:fc:54:31:88:fa:5c:b1:59:55:e5:54:75:66:89:eb:d0:94:
a1:95:ca:03:b4:18:b8:25:b1:95:66:0a:bc:f5:4a:da:7c:2a:
af:55:dc:cc:39:c4:7b:c6:45:5a:b9:72:b1:d9:a3:29:f6:fa:
e5:04:da:e6:fb:7e:f8:e6:32:f4:09:41:3d:b2:81:59:8b:7b:
44:8a:21:7c:82:e9:fa:ce:64:93:bb:3c:f5:f0:99:c0:a8:41:
71:ab:16:ee:e3:e6:c4:7b:e9:bb:e3:1a:2b:86:ac:df:ec:80:
f6:28:47:e6:31:c1:79:37:79:d8:45:8f:27:4d:60:7b:23:96:
86:86:f9:14:1a:c6:6b:16:ae:9d:1e:18:bb:e5:4a:a4:d3:71:
91:26:10:0a:95:f1:7e:02:e5:3e:fa:94:7d:7d:a8:4a:f0:7b:
d5:51:dc:1b:9a:ea:fd:f9:39:e0:a3:b3:c4:b3:d2:6a:e7:a9:
68:0e:01:91:78:e4:e9:23:0b:35:bf:88:7a:2e:c3:b3:ad:84:
5a:7d:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:28 2026 by rpki-client