
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
File: 50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer (raw, json)
Hash identifier: TUZMURMGuex15OvJfz86Ps4RqSUyCvrug/cAc6HQ0/c=
Subject key identifier: 50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 739665E44198662A24869AF221EACDB31B427147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft
caRepository: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 11 Mar 2026 05:03:42 +0000
Certificate not after: Wed 10 Mar 2027 05:08:42 +0000
Subordinate resources: IP: 103.30.170.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 09:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:96:65:e4:41:98:66:2a:24:86:9a:f2:21:ea:cd:b3:1b:42:71:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 11 05:03:42 2026 GMT
Not After : Mar 10 05:08:42 2027 GMT
Subject: CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:0e:68:7b:04:66:53:8d:62:0f:c9:5b:eb:
b6:79:f8:19:0e:bd:fd:bb:62:78:f3:64:b5:81:ba:
e5:37:aa:17:e4:17:21:70:c7:7f:44:1f:95:2e:e4:
59:47:f2:31:10:98:0b:c7:16:d3:65:2a:9a:e6:8d:
01:6a:06:1e:ff:d7:9f:e8:d1:96:51:92:10:e1:76:
86:16:96:c7:ab:7e:46:29:e4:a8:77:af:93:99:33:
c0:53:84:82:e6:3d:b9:a5:6f:7a:e2:06:62:45:7d:
d4:0d:3e:37:51:38:8c:47:02:cb:99:d3:4f:fc:3c:
71:8e:4d:73:38:d9:eb:be:6b:df:9d:c0:6d:4e:9c:
b4:87:9b:24:01:de:c8:c2:d1:d9:0d:a6:30:46:fb:
5b:9a:1d:09:3c:f6:08:c7:64:1d:e7:4e:51:b4:b2:
af:ac:29:44:4b:eb:7d:0f:ce:83:b8:86:37:6f:ae:
32:64:ae:0f:81:8b:a8:9d:a1:2e:ca:09:1a:e1:15:
c8:02:ca:55:e2:e8:fc:72:fc:24:b5:00:d1:f2:c6:
52:69:a8:b0:45:79:6f:9e:e8:80:ca:b0:99:b6:17:
23:a9:b9:92:ff:d8:ae:a5:be:81:7c:df:03:84:ec:
7a:fb:d3:48:97:36:aa:ea:33:f7:ae:e6:58:78:77:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.170.0/23
Signature Algorithm: sha256WithRSAEncryption
69:69:40:00:1d:10:3b:86:b4:4d:a4:86:da:25:d2:3b:2a:94:
b3:2f:d7:1c:15:66:7c:b3:cb:ad:5e:0d:ad:d1:20:07:eb:8f:
bb:0d:7a:b3:3b:14:55:fc:a0:f1:a3:1d:74:0e:f0:b1:49:e3:
6d:6e:d5:c3:02:c1:19:60:90:5b:d9:fc:ec:6d:6a:af:47:4f:
97:ed:09:07:ac:6a:32:7b:d6:d4:5b:5d:ee:5a:b4:2c:a8:fc:
8f:b8:25:de:8f:bb:73:1e:b8:09:33:3d:2c:d6:ea:07:8c:be:
38:00:02:f7:b7:51:a0:fe:ae:4c:05:7d:0a:6b:13:1d:41:75:
e9:66:1c:dd:4c:b9:bf:97:7e:e3:07:c3:f8:3e:88:7d:1e:05:
a3:58:b9:49:7c:97:b9:e4:4b:96:6b:f2:73:e5:59:41:4e:38:
21:38:c3:49:4d:61:55:57:a8:f3:62:74:c7:b4:36:ea:c1:e8:
33:34:88:aa:6e:23:98:0c:ec:01:6c:74:7c:b1:db:e9:d1:4c:
0f:92:70:82:7a:5c:d8:2d:fd:cd:8c:42:1d:b7:bb:b5:42:48:
a7:28:95:ff:6b:4c:82:4a:40:98:1e:e6:66:94:1a:90:82:e8:
ac:96:4b:f6:ba:d1:c0:1e:a7:2f:9c:5e:25:7d:96:5f:9f:53:
53:94:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:11:42 2026 by rpki-client