
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer
File: 62DE2AF277EBF89C97513655B43DEF762311A799.cer (raw, json)
Hash identifier: mjLcYA6XSrcpWuCHnoTnul2gX1/oHVOdTqB6S+MswHQ=
Subject key identifier: 62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 7CA69072EFEBA6B5063BA67436301A2FDED88BAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 02:00:14 +0000
Certificate not after: Sun 02 May 2027 02:05:14 +0000
Subordinate resources: IP: 43.225.64.0/22
IP: 103.247.216.0/22
IP: 2404:2f80::/32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 01:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a6:90:72:ef:eb:a6:b5:06:3b:a6:74:36:30:1a:2f:de:d8:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:00:14 2026 GMT
Not After : May 2 02:05:14 2027 GMT
Subject: CN=62DE2AF277EBF89C97513655B43DEF762311A799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:fa:25:d1:9d:ce:41:6d:5f:04:fc:0d:af:
62:c5:c0:06:56:ee:8a:5d:bb:11:59:2b:57:e2:b1:
ae:4a:d1:bc:ff:a5:ca:9f:38:9d:c5:77:dd:9e:e5:
8c:c5:40:eb:5c:29:cc:fc:52:f7:14:c9:69:4c:60:
9a:44:b8:a0:46:31:75:f2:66:dc:cd:8b:f6:15:16:
1e:79:b3:02:bf:0c:c2:90:d6:e1:52:09:09:21:9a:
19:0b:01:b6:8a:a3:83:82:81:fb:9d:b7:d9:60:19:
33:f1:ee:fa:0b:1e:92:68:a1:be:68:b7:8c:9d:87:
ed:5b:45:92:c0:9e:d9:f2:62:26:61:53:ba:5f:f3:
c2:25:be:f2:d0:96:3b:f5:40:16:65:25:51:13:85:
4e:72:da:18:7e:f5:4e:f6:1a:d9:c9:13:87:ba:aa:
cd:62:ce:af:08:d7:fd:7a:b5:38:d6:1e:38:4e:8b:
00:f6:e8:8b:aa:b6:03:67:af:bf:96:cf:ab:b2:72:
c7:7d:3f:cf:d2:f7:cc:52:e0:49:55:59:35:c3:85:
24:1d:96:e1:80:36:7d:e0:5f:17:ad:d5:16:08:7c:
7e:24:24:fe:02:2f:42:c1:9a:4d:a7:b5:b6:8c:19:
e7:e0:df:9d:5f:c3:dd:78:05:bc:99:17:0b:12:90:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.64.0/22
103.247.216.0/22
IPv6:
2404:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
70:84:c2:ee:f9:ce:49:59:d6:79:cf:42:29:46:33:c2:9f:88:
d5:90:e3:d8:8e:aa:09:12:71:60:d8:0f:fa:6c:58:4e:b1:1a:
2f:bf:8d:a8:c1:ad:14:72:8d:17:ec:91:33:5b:11:9a:a9:01:
ca:7c:c8:e3:97:10:7c:d4:3e:82:60:3c:3d:86:70:cc:02:00:
74:1a:80:3a:a4:64:7e:1c:95:f5:7f:06:13:c0:06:59:7f:4b:
34:90:52:f7:a8:ae:7e:f7:05:b7:22:6c:63:c4:d6:66:bd:ec:
d1:15:74:c3:de:53:52:9c:8a:52:bf:9a:c0:8a:fb:f2:6b:dd:
e3:cf:96:af:ff:f4:16:c5:94:da:6f:b3:57:22:c8:15:12:9d:
d5:f9:f8:11:75:bb:ff:e1:3f:cb:56:5f:a0:4b:d7:42:18:08:
65:45:f9:90:de:3a:16:83:eb:9a:77:73:2a:bc:f0:fe:c8:2f:
01:bd:4e:b5:68:0f:0a:ba:29:1b:35:06:0b:61:c2:66:d2:61:
8a:66:94:6e:94:85:41:2c:63:e7:3f:17:d8:d6:31:ed:c6:d3:
93:c8:da:d4:4a:dd:95:8d:e1:b2:cd:77:1d:1a:74:17:e0:6a:
60:80:63:1a:38:bc:7f:94:e0:29:87:fe:9f:a8:8f:08:1f:e7:
b2:e6:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:53:35 2026 by rpki-client