Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
File: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer (raw, json)
Hash identifier: Zvoo5cfat/YIjsWCTAhQ875vid+BbUvLmpGXphob9dc=
Subject key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 73ED3F0827F2272F43B9A3BDD3FF8E105AA41F63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 03 Jun 2025 07:52:06 +0000
Certificate not after: Tue 02 Jun 2026 07:57:06 +0000
Subordinate resources: IP: 103.31.156.0/22
IP: 103.234.216.0/23
IP: 103.234.219.0/24
IP: 112.78.96.0/21
IP: 114.31.240.0/21
IP: 114.110.40.0/21
IP: 114.134.72.0/21
IP: 115.178.120.0/21
IP: 116.66.200.0/21
IP: 116.254.120.0/21
IP: 117.103.8.0/21
IP: 182.23.160.0/20
IP: 202.87.176.0/20
IP: 203.191.40.0/21
IP: 223.27.144.0/20
IP: 2401:2400::/32
IP: 2402:3700::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Jun 2025 03:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ed:3f:08:27:f2:27:2f:43:b9:a3:bd:d3:ff:8e:10:5a:a4:1f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 3 07:52:06 2025 GMT
Not After : Jun 2 07:57:06 2026 GMT
Subject: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:77:53:cb:4c:c3:05:03:54:5f:4d:75:d9:
55:e1:6f:cf:ab:ac:16:9c:e7:d7:fa:08:07:d4:99:
6d:a1:43:78:c5:62:88:53:44:1f:98:bc:0a:a5:f3:
2a:5e:18:b9:b7:7a:b6:9f:29:87:30:50:1b:55:55:
59:18:8c:ca:c3:e3:5c:69:3e:ff:70:95:72:c7:fe:
85:45:78:79:0f:a3:7b:c4:15:bc:b5:24:78:ba:d9:
bd:bd:ce:22:e2:fe:6e:38:0f:53:b1:31:e5:8a:1d:
99:c1:1b:4a:25:00:b2:51:9d:58:9d:6d:a0:e8:7c:
0b:00:09:54:51:b5:0a:55:64:8c:38:1d:b8:a8:81:
f7:f1:2d:97:66:fe:94:40:e5:7d:c6:42:b9:1f:f9:
97:61:b5:40:cd:31:ac:8a:fc:36:72:e2:39:f3:b7:
cb:30:ff:d2:57:fc:87:98:8a:ed:24:6e:34:e9:b3:
79:0a:e0:d6:f3:74:35:cf:5a:df:8e:5c:e9:fb:37:
1f:94:59:7c:d2:6d:8e:00:29:98:4b:7f:8c:6e:18:
77:d6:f9:40:71:86:bb:4d:1c:18:2c:c7:0b:b0:f4:
b2:51:fa:e5:02:19:0b:3f:40:17:96:ad:56:35:c5:
8a:a2:25:30:a5:80:fd:d1:42:ae:d6:8f:93:dc:56:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.156.0/22
103.234.216.0/23
103.234.219.0/24
112.78.96.0/21
114.31.240.0/21
114.110.40.0/21
114.134.72.0/21
115.178.120.0/21
116.66.200.0/21
116.254.120.0/21
117.103.8.0/21
182.23.160.0/20
202.87.176.0/20
203.191.40.0/21
223.27.144.0/20
IPv6:
2401:2400::/32
2402:3700::/32
Signature Algorithm: sha256WithRSAEncryption
6b:8d:20:2e:31:51:68:1c:3d:9d:ee:3d:a0:52:2b:d8:00:cd:
86:db:cd:65:7c:e8:34:cf:ee:75:92:d4:4c:da:bb:a2:2c:ad:
4d:77:ba:c2:ba:64:ab:ef:c2:4e:0b:c7:cb:1c:af:f8:73:2a:
f9:09:28:d3:ff:ac:f0:59:e1:6d:b3:68:8d:ed:80:19:8a:58:
81:df:cb:c5:4a:19:2b:d2:85:6b:e9:b9:db:62:a3:b8:f3:52:
bf:2f:65:a7:d3:a8:4e:97:0b:5c:6b:c6:87:ff:54:04:bf:f2:
df:3f:de:58:de:47:c4:f5:7c:3b:e7:a9:83:aa:79:32:2b:df:
fc:e0:c1:98:73:c6:a9:2d:04:54:89:ae:c9:28:81:6a:c5:0a:
d3:b7:90:13:68:58:91:9c:bd:a9:b9:76:ad:b8:73:97:97:48:
7b:a9:19:3a:d1:a0:6c:63:75:5e:46:fa:17:e9:d8:d9:1e:a9:
eb:b1:e8:3b:95:39:b5:0c:90:0a:42:51:c9:52:67:fe:ad:bf:
ed:00:24:9f:92:20:7c:eb:d8:6a:01:5b:a7:17:91:05:b2:4c:
05:b6:fa:8b:a6:3b:33:b5:e5:33:cc:60:3d:9c:b3:c2:c2:43:
ba:fd:e7:c2:fd:d3:d2:c4:6d:f4:17:18:e7:5f:b5:31:a8:5a:
e3:61:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:40:07 2025 by rpki-client