
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.cer (raw, json)
Hash identifier: BxGH0rKKLlsusPzPtgDIIorRRxGJqgwxCs5tl+L9LhI=
Subject key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 346E7AA41E34C0FE66623448F982E650B7D77F55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
caRepository: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 05 Mar 2026 05:15:00 +0000
Certificate not after: Thu 04 Mar 2027 05:20:00 +0000
Subordinate resources: IP: 103.70.92.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 20:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6e:7a:a4:1e:34:c0:fe:66:62:34:48:f9:82:e6:50:b7:d7:7f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 5 05:15:00 2026 GMT
Not After : Mar 4 05:20:00 2027 GMT
Subject: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:7b:53:cc:18:36:a5:ec:e9:5c:0f:dd:4e:
1a:94:f6:ae:2b:d0:84:36:35:7c:c8:8b:42:ef:e2:
ee:45:09:a3:6f:8d:0d:43:7d:ad:23:2e:b3:24:be:
77:51:1f:fa:82:f3:35:7d:6e:54:23:94:e1:4b:01:
e2:a1:a4:44:58:97:73:7a:9d:22:ec:94:81:5f:a2:
0b:c5:1c:df:60:b9:22:f0:67:25:72:9c:75:8a:80:
b5:52:64:cb:8e:b2:6d:07:d2:77:94:b6:c3:25:1b:
82:e8:5b:14:7f:db:8d:6d:2f:20:ef:85:52:ae:96:
fc:de:ae:34:cd:cf:76:e8:61:14:f5:05:f7:1e:9e:
45:45:ae:8d:97:38:ed:79:46:bd:6c:3c:ad:38:3c:
7d:21:7d:5b:85:43:3f:80:9f:8e:de:f1:dc:9d:c9:
4e:24:b1:b2:4c:67:ee:df:06:46:90:06:d2:7b:70:
4f:a8:3f:3b:29:31:71:f8:0a:f0:90:5d:2b:99:60:
0b:71:5e:99:ce:41:6d:f5:8e:39:e6:35:a9:3e:f8:
12:06:3d:b5:c8:d1:ba:be:e5:96:44:18:a8:69:05:
73:63:18:24:79:89:b9:10:44:e8:be:06:76:08:84:
04:4b:e9:cb:13:26:92:cf:1f:28:6b:fc:e4:54:ff:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.92.0/23
Signature Algorithm: sha256WithRSAEncryption
24:25:04:02:17:e3:06:65:42:15:ae:a5:44:85:0b:67:95:c4:
c4:f9:b9:32:34:ab:c9:a3:9b:90:bb:8c:8d:9e:00:03:0f:70:
43:97:56:73:e9:b6:d2:00:ca:3d:ea:4d:45:47:a0:92:13:b7:
d0:f2:32:65:94:bf:9f:f3:d8:08:33:08:79:45:bc:01:24:ca:
b5:a6:60:ea:4b:63:49:c1:11:08:04:55:1d:f3:5f:8a:54:44:
21:ef:92:9f:52:12:4b:17:32:2f:c5:75:9d:1e:82:df:16:cd:
1f:60:03:59:14:c7:d1:5b:b0:86:41:d3:1c:13:02:38:47:ec:
83:8c:34:a3:5c:18:6e:51:4e:ab:13:f0:bb:aa:d1:e5:00:26:
8e:31:ae:01:92:24:85:61:39:06:0e:50:a0:7e:c7:40:18:bf:
64:6a:f0:d4:ef:35:b0:08:77:78:3c:10:6d:6c:51:ee:be:ac:
27:4d:05:1e:f3:f4:d2:aa:68:0e:9a:66:74:80:73:cb:e3:29:
7e:82:c4:fa:6a:a8:97:a2:ea:88:91:1e:18:4f:3f:fd:67:50:
57:f6:01:74:20:61:6d:50:7b:1b:af:ab:e3:14:77:15:ec:62:
1a:db:44:c4:ac:a5:29:a1:72:43:d2:15:f2:43:90:99:49:dd:
d0:3a:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:05:21 2026 by rpki-client