
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer
File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer (raw, json)
Hash identifier: K4uYwZHaWiHbzDYWgyL04lV7fb7D/ODz9PVOMkjZ2u8=
Subject key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1D6F6766BC9B4FF70D62221BB65DFD02F4938844
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 18 Feb 2026 14:18:57 +0000
Certificate not after: Wed 17 Feb 2027 14:23:57 +0000
Subordinate resources: IP: 103.165.148.0/23
IP: 2001:df3:1940::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6f:67:66:bc:9b:4f:f7:0d:62:22:1b:b6:5d:fd:02:f4:93:88:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 18 14:18:57 2026 GMT
Not After : Feb 17 14:23:57 2027 GMT
Subject: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:c8:36:e0:25:da:cb:cb:db:f3:88:ac:4d:
d3:6a:f5:b7:2b:aa:98:61:98:24:81:15:a8:9f:34:
20:e3:4e:1d:aa:3c:a9:3f:bb:e3:f2:e7:47:f7:65:
34:b8:4f:b4:8e:e3:95:7f:d8:a5:81:32:ca:40:78:
40:e4:26:15:ef:4d:26:50:8e:38:c7:55:a1:6b:63:
04:4a:f3:3f:25:5a:71:bf:da:2f:3d:c8:7e:aa:0a:
e3:31:d5:50:d3:00:fb:9f:14:b8:94:b3:5e:d7:4b:
84:6c:e5:97:d2:ad:22:2c:e7:54:d4:14:e2:a7:27:
cd:22:74:79:b9:e5:57:14:a1:e2:fe:77:e1:f0:21:
19:20:d6:28:52:65:c0:99:ac:1e:c1:c7:ae:24:79:
34:91:e1:85:3d:55:44:d4:aa:ff:54:24:c0:e2:e2:
6d:73:8b:a2:51:36:25:2b:a8:fe:89:9b:3d:76:32:
87:b3:1b:a8:af:ee:3c:43:a2:ee:9b:a1:be:03:c0:
44:4a:4e:82:c3:1a:cb:65:fa:fe:2b:c1:74:a4:1c:
60:e2:ac:ef:3f:db:cc:f6:90:a2:08:01:ad:42:6d:
ea:3c:8f:7e:68:35:9d:d9:09:4a:d5:fa:f8:a2:5d:
34:f2:e4:cd:0d:9c:cc:db:fa:aa:b4:41:93:16:27:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.148.0/23
IPv6:
2001:df3:1940::/48
Signature Algorithm: sha256WithRSAEncryption
5b:cf:15:82:c5:28:ea:48:9a:d4:ed:54:d4:65:c6:4a:4c:8d:
f2:0d:f2:07:27:96:2f:c7:7d:97:6c:07:a3:6e:e0:2b:d0:e5:
b9:77:13:3a:a7:ee:f2:a8:ea:fa:4a:34:f5:b3:71:e2:32:0e:
f8:c4:92:30:67:13:8d:cc:ec:11:9f:42:5f:52:c4:36:7d:51:
3f:30:49:9c:ab:1f:aa:dd:d5:e1:dd:c9:22:3e:bf:23:95:48:
fe:4a:43:5e:fc:2f:b9:4d:08:31:24:50:04:e6:c7:52:e0:d9:
71:83:69:1b:2c:ee:7d:49:17:c5:57:72:5d:e7:a3:5a:81:19:
a9:d5:49:fb:60:b1:d2:b9:95:0e:8f:45:02:4c:2f:72:7a:b6:
3c:05:a1:f0:36:b8:d2:d1:9f:ec:14:fe:2e:27:35:9d:ae:24:
e9:fb:50:74:13:a3:62:28:84:1c:69:e9:ce:8e:f2:42:e9:43:
98:61:6b:06:3a:f8:37:23:f8:87:26:38:ff:8a:4f:ff:72:75:
29:f7:c2:8d:94:4b:b3:d3:72:9a:d1:15:e9:c6:ea:07:d1:ca:
c4:c6:70:0f:2d:14:89:77:80:17:02:a0:62:6d:b8:f2:18:96:
25:0a:1f:e8:ce:7b:ab:fd:13:43:0a:cc:03:f2:88:c7:0c:1f:
07:8e:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:42 2026 by rpki-client