
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
File: FC4AE05C1547B778063F91C4687D12E8D6978309.cer (raw, json)
Hash identifier: yB1kQhyHO/KoCs55+LcrLiNesP3lwLg2EpGFjc/7h4o=
Subject key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 16B14AFC8B430983311EF16C869B43CF66656366
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
caRepository: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 03 Mar 2026 02:30:28 +0000
Certificate not after: Tue 02 Mar 2027 02:35:28 +0000
Subordinate resources: IP: 157.20.230.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b1:4a:fc:8b:43:09:83:31:1e:f1:6c:86:9b:43:cf:66:65:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Mar 3 02:30:28 2026 GMT
Not After : Mar 2 02:35:28 2027 GMT
Subject: CN=FC4AE05C1547B778063F91C4687D12E8D6978309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:91:e7:ef:db:2b:6b:98:1d:d6:b7:eb:c3:
38:af:92:a1:98:ea:5a:8f:27:13:94:06:45:36:f7:
d1:98:ce:ce:68:1c:49:47:f3:79:7b:f7:91:a9:f2:
64:8e:ae:a0:27:61:a6:d0:b1:bd:4f:6b:33:15:2d:
4a:c4:b1:a5:c9:c7:89:39:c2:ee:58:3e:b7:1c:02:
10:07:bb:57:63:bd:3c:2d:b4:21:2a:5c:76:aa:3d:
ef:d8:a5:93:3d:aa:31:39:96:bb:4d:02:67:e7:9b:
67:d0:78:41:d3:8d:a0:ef:68:4f:80:2c:8b:a7:92:
0a:c9:cd:21:63:57:c5:f0:85:d6:14:68:bb:ef:67:
32:e5:88:11:46:95:39:54:24:01:40:1a:52:76:db:
49:b2:a9:b0:b1:a8:8c:b5:1a:3a:3a:62:5c:f8:ea:
21:0e:1f:c5:de:05:61:c9:86:0d:6d:4b:bf:25:98:
95:02:cf:b3:7c:d7:31:4b:f7:68:3c:2a:8b:f7:91:
8d:f6:f9:5c:78:e3:0a:09:ef:6c:b1:e2:b2:88:59:
63:fe:d2:09:e9:f7:8e:46:5c:c9:10:d3:e5:7d:52:
ee:84:87:df:a0:88:18:66:f9:b5:29:f1:45:69:c5:
c1:c1:7b:5c:44:8a:b1:2e:6c:23:25:6d:5c:1b:e0:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.230.0/23
Signature Algorithm: sha256WithRSAEncryption
10:19:0a:06:d9:ed:10:0e:d0:38:32:d5:ff:f0:63:e7:bc:39:
a3:5a:ad:49:59:ba:85:4a:a9:91:53:d9:32:ed:b8:88:c8:1d:
5b:26:14:ea:c4:25:a1:89:a6:c3:c3:65:e1:28:ed:b4:56:9b:
59:9e:54:72:38:7c:57:1c:2c:50:11:5d:06:54:9e:a1:cf:a8:
e0:f5:8a:e5:c7:fb:82:22:e5:52:05:7d:8f:03:d9:93:61:c7:
f7:92:f7:f1:5b:67:57:3a:9f:93:6d:e1:0f:9a:94:3a:11:53:
9c:81:d8:95:38:69:13:e6:6d:9a:05:f7:15:45:c0:74:4a:6e:
e3:08:4a:6b:02:cd:d7:44:79:61:9d:19:88:2e:ad:3e:fc:11:
cf:fc:50:ea:95:e8:07:96:bc:3e:df:bf:27:c9:70:9f:75:b7:
d7:a3:a0:fe:75:88:2b:60:e2:fc:60:c1:c1:96:a4:0e:e6:c8:
31:fc:19:f8:06:e0:75:6e:de:b5:bd:4e:97:b1:ee:3f:e7:4d:
f2:4a:fc:12:97:9e:3b:e0:6e:07:a7:13:d6:77:10:59:9f:44:
ad:18:88:0b:2f:90:c2:b4:cf:02:95:73:32:fd:3a:04:5f:26:
84:4a:62:93:26:6e:eb:3c:b8:42:18:cd:8c:38:07:fe:61:c3:
d4:18:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:14:30 2026 by rpki-client