
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
File: EFCC7BEA840185763FF7624CF3DDE00563137A27.cer (raw, json)
Hash identifier: fIXFXcGmMmSaTj5WtGOWAQqTQfb11Zvs6H0IoWqPd4o=
Subject key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7BB67C2EA102D219017DC365E9EAD91B479E3B2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
caRepository: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 15 Feb 2026 01:54:52 +0000
Certificate not after: Sun 14 Feb 2027 01:59:52 +0000
Subordinate resources: IP: 103.168.149.0/24
IP: 2407:a1c0::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b6:7c:2e:a1:02:d2:19:01:7d:c3:65:e9:ea:d9:1b:47:9e:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 15 01:54:52 2026 GMT
Not After : Feb 14 01:59:52 2027 GMT
Subject: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:e7:45:90:2e:f4:de:25:da:a8:99:c2:77:
12:59:dd:a8:5c:e3:89:ad:16:41:8f:10:ef:95:10:
e9:43:9b:18:5d:f1:ed:b7:12:cf:14:bf:01:f4:01:
82:62:3e:a8:0f:98:d5:5c:2c:8a:a5:41:fc:ff:bc:
2a:97:de:bc:6f:23:72:56:1f:db:a2:0c:57:8c:b4:
82:3a:7c:dd:ba:e5:de:a3:30:e2:22:ad:c2:8c:bd:
44:f4:e9:e1:5d:05:1e:f5:e4:9b:9a:17:40:20:22:
33:45:eb:25:49:82:70:b5:c5:3c:8c:f8:00:28:4b:
64:06:eb:29:0b:6c:ad:62:fd:e1:f4:a5:11:4a:2d:
39:c5:f0:af:d1:05:18:25:ae:9d:b4:cc:b1:ee:65:
c5:f1:74:8d:27:fb:20:ad:56:b3:97:48:b7:a3:0d:
4a:8a:9e:35:74:17:9e:31:de:01:56:cc:f1:25:6b:
82:d5:a5:48:02:94:4d:bd:e8:de:d0:72:df:00:52:
6e:dd:26:f5:67:84:17:91:f5:62:6a:01:c7:51:32:
12:10:d5:57:7b:64:bf:c7:6f:38:cc:b7:f4:c4:40:
d8:07:38:8a:b4:80:2d:19:fc:b8:bd:ec:cd:5c:9e:
b7:b0:8b:8e:19:fe:84:ac:89:c7:21:52:60:a6:8d:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.149.0/24
IPv6:
2407:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:46:b5:72:a3:89:93:20:49:01:ee:60:d9:ce:1b:a8:b2:dd:
d0:9e:7f:0b:14:72:0b:f9:e0:ff:ea:19:56:f8:39:79:3c:a2:
c7:73:5b:9d:0f:3d:f8:e0:d2:b3:13:fb:25:19:bc:44:b3:8d:
07:02:a0:5e:48:7d:1d:00:b3:49:42:3b:0e:82:fc:a1:7a:b1:
3d:6d:44:99:21:a1:be:2c:a9:11:55:12:cc:3b:28:02:3b:f0:
85:92:08:eb:40:ed:ca:15:07:70:29:b2:e2:7f:0a:29:e3:6b:
86:2c:2f:39:95:9b:48:dd:42:89:f6:3a:1b:6c:57:c8:56:7d:
b7:26:54:35:9d:c0:73:75:ce:33:07:d4:07:91:82:dd:c5:35:
14:cf:06:2a:39:87:b4:e3:23:54:4c:89:20:a3:2e:3c:62:b7:
69:23:ad:b7:28:da:7d:01:d9:27:03:3a:be:a7:b2:5d:95:e5:
f8:3c:b2:26:4c:12:cb:2c:2c:e3:92:3f:38:cc:2d:50:a9:a5:
3d:69:77:0d:ae:0e:72:67:3a:4e:dd:0e:6e:00:86:b5:19:7a:
cf:ca:68:74:8b:07:4e:cb:da:31:26:f2:40:6b:4e:8f:ed:69:
a4:04:4d:4c:f0:b5:dd:5f:cf:69:a2:e1:ba:cb:7c:df:a6:6b:
17:e2:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:29 2026 by rpki-client