
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
File: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer (raw, json)
Hash identifier: t6HtwiLUHBrU8h/QkPtKT9BzQvz8CDkaPQ6AiMWGv4s=
Subject key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 4CE75908A0FA13F4089F76F59AD59C581498E36D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
caRepository: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 00:00:32 +0000
Certificate not after: Wed 03 Feb 2027 00:05:32 +0000
Subordinate resources: IP: 157.20.236.0/24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 15:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e7:59:08:a0:fa:13:f4:08:9f:76:f5:9a:d5:9c:58:14:98:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Feb 4 00:00:32 2026 GMT
Not After : Feb 3 00:05:32 2027 GMT
Subject: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:50:6c:aa:62:8d:bb:aa:f6:5e:2c:e0:7b:
b2:90:3f:ff:e8:00:a4:7a:f1:4a:b1:e2:44:e2:8e:
bb:44:bb:42:fe:3e:1b:83:24:8c:ef:f6:bc:90:ea:
d2:30:8a:90:b3:f7:d1:92:00:62:33:e8:45:56:36:
47:dc:58:b5:ac:8e:07:72:9f:fc:da:bc:32:96:61:
d4:43:7e:85:b1:36:b3:2a:35:5f:34:b4:2c:41:58:
88:b9:21:a7:d0:c7:fa:20:7e:f7:3f:aa:ed:13:71:
19:d5:38:69:5b:c0:69:d4:6e:e3:bc:68:da:f9:e6:
27:2b:bc:5d:f2:68:34:1b:50:a4:d0:9c:51:a6:9d:
7a:bb:cf:42:10:84:5f:21:69:96:7e:f7:0b:4a:0a:
7d:94:4b:37:1d:52:04:db:29:f5:0a:5d:18:3f:f4:
b8:d2:e5:81:12:59:7e:9f:15:eb:95:90:a0:2e:59:
6d:d0:ac:e4:61:c4:a9:f4:4e:d2:f6:fb:43:69:0e:
76:9b:d7:dc:82:30:f1:75:f7:95:e7:e5:e9:ba:34:
ee:a2:29:c9:c1:80:2f:c6:6d:07:73:59:8d:0a:ed:
41:98:6a:ba:30:d4:d2:45:c6:de:e1:cb:bf:6a:5b:
09:5b:f3:8e:b3:c0:e6:2e:1b:de:97:29:82:89:a0:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.236.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2b:1f:0e:d9:cf:21:d4:3f:c5:25:c3:39:da:dd:3d:ba:8e:
70:8d:b0:51:ee:89:6f:24:0d:f0:62:61:34:f4:83:af:74:98:
a4:ab:12:42:2f:55:68:da:99:7c:76:20:d2:e4:8c:44:48:8b:
f8:79:43:b5:cc:21:87:6f:18:ca:b3:ee:ae:36:a9:db:97:ee:
c3:4a:7e:c6:99:de:bd:bf:69:2e:6f:36:03:ee:ef:53:86:3a:
f1:9a:bb:b1:57:b4:4a:d4:35:09:00:91:0c:46:d6:72:44:95:
ac:3e:91:cf:03:de:c7:41:ca:95:1f:c7:a1:b2:19:31:34:c6:
8a:54:84:d0:ed:75:cb:f0:9c:0d:9e:c2:44:f3:95:6d:58:43:
0b:33:80:74:9a:8c:1f:bd:38:81:9b:45:83:4b:1b:ba:7b:a0:
d3:e8:b8:47:7f:fb:01:a5:89:50:64:2c:f6:34:62:d2:1d:72:
f8:f1:4f:60:5e:2a:90:bd:20:3d:c4:33:71:30:2b:0b:d3:07:
e7:ae:4f:0f:21:a8:1b:ed:24:2a:e7:48:bf:04:a6:72:97:58:
05:08:db:89:f9:e6:ab:11:63:8a:ca:bc:20:a9:1b:26:41:39:
00:23:c3:7e:00:b5:55:0e:b1:df:36:98:84:9b:05:a5:00:03:
cb:18:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 03:27:40 2026 by rpki-client