
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/7A938D65CC747D9D8622C28CA82134BAF9568A19.cer
File: 7A938D65CC747D9D8622C28CA82134BAF9568A19.cer (raw, json)
Hash identifier: Q/wsjY/ZBnr3QRPGfVDpXa+9WKgXaxx2g/H6Mb79oPg=
Subject key identifier: 7A:93:8D:65:CC:74:7D:9D:86:22:C2:8C:A8:21:34:BA:F9:56:8A:19
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 18ABB91C071F41F7728AC0E3852945F09DBD018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/0/7A938D65CC747D9D8622C28CA82134BAF9568A19.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Mon 05 Oct 2026 10:27:07 +0000
Certificate not after: Mon 04 Oct 2027 10:32:07 +0000
Subordinate resources: AS: 154745
IP: 2001:df7:2cc0::/48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ab:b9:1c:07:1f:41:f7:72:8a:c0:e3:85:29:45:f0:9d:bd:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 5 10:27:07 2026 GMT
Not After : Oct 4 10:32:07 2027 GMT
Subject: CN=7A938D65CC747D9D8622C28CA82134BAF9568A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:ce:0d:9d:d5:61:7f:cc:04:f1:31:2e:02:
5a:74:d9:69:64:5a:5a:47:82:9e:55:ec:40:9e:9a:
59:2b:99:34:f8:7f:63:c8:54:3f:48:b6:29:5b:f1:
2d:ec:0d:1f:2e:d7:33:3c:56:26:0c:98:63:dc:6a:
28:27:e6:84:7f:82:01:14:37:80:c1:af:fe:78:cd:
f5:d2:05:d9:ae:be:f2:88:47:a3:10:aa:80:a9:79:
cc:48:83:83:74:1e:a7:d0:cd:94:53:cc:81:4f:be:
ba:fa:26:b3:6e:b4:5c:af:f9:44:63:2a:60:6f:cb:
55:9b:da:0e:d6:f9:ef:07:e8:36:55:46:b2:c6:da:
f9:ba:67:6c:a6:bf:c0:00:e8:7a:6c:15:23:92:72:
09:4e:eb:4e:40:3c:7b:5c:d1:c6:48:69:67:0b:7c:
a1:4a:10:38:24:ea:c5:fc:d2:bd:30:8b:e2:87:dd:
61:a4:52:6f:e9:23:3a:e7:a7:82:94:21:0f:73:64:
4b:19:22:e5:a7:0a:3e:09:a3:54:04:13:16:f4:bb:
ff:b4:07:93:c6:e8:74:56:5c:2c:c7:e0:e5:16:18:
55:23:94:c2:d0:f5:6e:87:87:0c:37:ae:34:11:e4:
bd:75:50:3b:79:b3:74:95:ca:e0:3f:22:27:82:0a:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7A:93:8D:65:CC:74:7D:9D:86:22:C2:8C:A8:21:34:BA:F9:56:8A:19
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/0/7A938D65CC747D9D8622C28CA82134BAF9568A19.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:2cc0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154745
Signature Algorithm: sha256WithRSAEncryption
11:e3:c7:fe:28:2f:85:ab:11:b6:64:9a:37:ec:0d:77:e9:da:
64:e7:e3:b1:cb:03:a7:3f:9c:2e:d1:03:31:eb:14:83:7f:da:
cd:d6:d3:c3:c8:6d:93:65:9a:71:97:97:81:f6:e1:c5:91:1e:
ae:c6:ce:00:97:7e:89:ab:eb:51:b6:74:13:78:8f:f9:d8:60:
2b:49:0b:6e:54:7d:9d:9b:0f:f9:2e:8c:6c:02:7c:1f:d2:8f:
ef:eb:56:d6:6a:32:4b:e6:fb:6b:c6:d1:d3:d9:39:c5:1f:2c:
c6:56:d0:c3:20:ea:d1:bd:cb:17:4a:94:e0:85:1f:98:dc:dc:
ad:60:aa:7f:e6:18:41:bc:37:59:88:13:60:e4:9d:2d:85:4d:
58:5c:43:03:1d:c5:df:cb:8e:2c:44:e7:00:52:e2:9a:4c:59:
b8:ef:d8:e3:2b:7c:a7:78:06:c8:c8:cf:a7:23:01:0a:7c:84:
74:96:d2:f4:85:19:23:fc:b9:19:4b:01:51:db:b0:c7:fc:cc:
c8:76:a6:ae:80:c4:bd:b8:ac:df:3a:4d:89:94:be:30:e9:00:
ab:3d:86:cd:ca:38:5c:0d:3b:b5:ba:b8:12:a0:44:c6:21:6f:
6c:cc:5e:8f:3c:df:ce:39:51:1d:b8:db:56:a0:ad:d5:03:d5:
c1:7f:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:04 2026 by rpki-client