Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
File: BvSy24SzhwK186kqeJJV2c_vPus.cer (raw, json)
Hash identifier: Qkd/KB4DV6H2ngRdLzN56fQNoJ9u96Tz//Ib8JxfNvk=
Subject key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4B6A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Wed 19 Aug 2026 07:24:04 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 179.65.192.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19306 (0x4b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Aug 19 07:24:04 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:a5:77:f0:92:7d:98:50:e6:56:77:eb:b2:
2e:0a:30:9f:0f:39:ff:2c:47:4b:07:49:a6:d9:9f:
8d:4b:77:e3:c4:78:56:08:f8:23:9d:ac:4e:64:85:
9e:1c:44:57:76:c3:ac:bf:75:b0:ca:60:98:de:52:
d9:7a:bb:4c:26:cc:ff:09:15:d2:a2:c8:df:3a:bc:
a0:d1:28:5d:5d:2d:c4:ff:87:90:9e:7c:b1:68:75:
d8:b6:10:c7:87:4c:6d:23:61:cd:6d:5e:90:58:37:
a3:6a:c0:04:28:67:7e:2a:4b:5b:4d:25:5f:4a:a0:
cc:6f:49:db:59:d9:16:ae:66:14:a9:02:94:a5:1a:
9f:b0:a8:94:aa:67:c7:a9:67:12:45:aa:c7:bb:4e:
f0:43:85:a4:15:34:b8:b7:57:9c:56:4f:72:38:ff:
08:ff:e0:0c:b4:ca:44:e8:20:26:0c:8d:62:96:d6:
29:01:59:e3:5b:7c:44:ff:4b:90:27:71:5d:fe:3c:
6e:0a:14:40:ae:b6:4c:54:b0:85:0b:2d:1e:45:6d:
8b:a4:af:19:1c:b7:51:bc:3d:ad:0f:61:5d:72:66:
22:a0:6b:04:43:a1:77:23:75:8f:e0:40:14:d6:44:
31:7e:a5:d9:f2:8b:5a:52:75:68:06:6f:72:6f:e3:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
179.65.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:3f:b2:32:ed:35:b9:8f:58:f9:a6:07:c6:7d:80:59:8f:32:
7c:d0:33:a3:70:a0:7b:dc:3e:63:87:6e:42:27:43:e8:b8:b6:
a2:a1:06:66:a3:77:c1:ce:7d:4d:50:36:d7:20:f2:a1:ad:b3:
f2:e8:0e:d2:36:be:d2:d2:4f:f0:d2:b3:34:90:5c:1f:9d:ba:
8c:95:65:5f:59:0e:94:5f:40:3c:28:ae:0a:12:4c:da:a9:0a:
f6:f3:f8:46:9c:5c:4b:ae:2a:93:35:8a:f0:fe:fc:1e:92:9a:
93:0d:66:f5:8b:31:05:73:0a:2e:fb:6a:2c:9a:54:2e:9e:24:
a7:1d:ff:0a:4e:26:88:d4:e2:02:c1:c2:32:37:12:24:3b:66:
52:56:40:7d:95:0d:31:06:89:d0:36:60:cc:90:10:fb:8a:f2:
4d:2e:f0:6a:6f:34:27:35:3c:fc:7e:86:2b:4e:9f:02:d8:92:
b2:98:6e:5e:88:b5:61:71:7e:85:71:25:18:e6:45:47:9a:65:
a4:32:b9:e2:d9:3f:b8:d1:20:52:8a:7e:5e:f4:63:d1:b6:2c:
9a:f9:fb:a3:f5:ef:9a:c0:e9:5f:02:a6:e5:95:f2:35:a2:2a:
57:17:a6:8e:ea:3a:f3:5d:40:fa:ab:6e:de:dd:4b:98:ee:2d:
8f:6e:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:13 2026 by rpki-client