
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer
File: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer (raw, json)
Hash identifier: 2unbwr+lSOohGgLNhlZ2rgfspQO3h5sE63yAkgEwWDY=
Subject key identifier: F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3AE9546D004E9BF61D556A0978A8A7027FE6E71B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 19 Feb 2026 04:32:27 +0000
Certificate not after: Thu 18 Feb 2027 04:37:27 +0000
Subordinate resources: AS: 152799
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e9:54:6d:00:4e:9b:f6:1d:55:6a:09:78:a8:a7:02:7f:e6:e7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 19 04:32:27 2026 GMT
Not After : Feb 18 04:37:27 2027 GMT
Subject: CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:33:14:eb:c6:38:c5:95:d4:f4:af:31:5f:
c7:b4:bc:f4:b6:7a:d0:3b:64:7a:7d:bb:d6:1b:b0:
d9:6e:b5:5b:10:43:a3:dc:49:dd:0f:89:61:05:4f:
d1:3a:99:f4:08:05:e1:4a:b4:0e:89:09:11:b9:56:
83:0d:d3:44:03:3e:f0:db:18:d8:32:10:ee:9f:56:
b7:36:63:8d:cd:f8:ab:fa:c3:d5:5c:ab:db:32:f7:
b0:ff:3a:68:e7:a1:42:bc:5d:17:66:0e:09:57:f6:
8b:37:4f:09:91:a5:8f:1b:68:fe:7b:b3:98:9a:88:
55:a5:4e:b3:87:b3:74:0d:52:19:f2:ce:b9:b2:6e:
d6:f7:40:6b:67:30:40:f1:c6:c7:93:50:9f:86:c2:
5f:98:6b:d3:e6:aa:90:9d:ad:ea:40:a8:d9:2d:a2:
f2:03:c3:68:df:22:33:7a:40:7a:cb:88:17:dc:2b:
2d:9c:a0:97:8f:af:10:5c:3c:82:83:6b:4a:00:be:
25:0b:ad:a9:f1:76:df:a8:32:15:e3:bf:d3:ba:99:
5c:21:ac:29:77:00:c6:8f:68:b7:d2:c4:ab:f4:f9:
30:c9:ec:8b:d8:d5:92:f4:c7:84:9b:38:28:64:50:
e8:29:dd:a6:bb:74:01:90:43:93:ec:d0:8b:09:bb:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152799
Signature Algorithm: sha256WithRSAEncryption
5a:24:cf:c5:cc:3e:7c:a4:4b:c1:af:a6:ff:b7:7a:53:63:ab:
44:19:d0:96:30:6c:cc:39:55:4b:86:14:a7:2f:3c:01:23:fa:
f1:f9:4c:c4:16:65:b9:c7:e9:63:cf:59:67:de:9c:8f:26:a7:
74:83:90:34:9e:9e:58:04:d1:87:87:aa:4f:7b:ad:03:85:10:
e4:1d:f6:f8:ad:10:4d:bf:85:56:ce:08:81:03:d3:2a:c3:c5:
17:61:21:42:7b:4c:13:c2:c3:a8:bb:30:32:ba:ab:54:10:8f:
2f:3b:90:d5:4b:23:c5:77:58:ce:c2:28:ad:8c:24:e6:05:6c:
63:76:70:6b:f9:0c:cb:6e:fd:27:21:6e:56:76:8f:7f:9d:77:
2b:f0:6c:0e:77:0e:b2:26:07:ba:42:ad:0f:a8:31:6a:a4:a2:
7f:db:a3:8b:ca:ee:fa:b3:41:21:36:71:e0:9d:01:82:63:8f:
b9:a4:1b:ad:d1:11:cf:7b:6b:6a:e6:92:43:64:ef:6f:dc:eb:
18:95:e5:e1:f3:37:fe:93:36:70:e9:d0:79:4e:e9:1b:d9:67:
35:d2:bf:e2:eb:7b:0a:95:60:a5:d3:39:4a:8a:c0:ba:eb:3f:
bf:15:ea:00:8a:2f:7a:6d:4e:48:e6:30:53:c4:96:1b:d7:f3:
ae:54:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:16 2026 by rpki-client