Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
File: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (raw, json)
Hash identifier: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=
Subject key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C94
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Tue 25 Aug 2026 07:48:11 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 154.8.96.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19604 (0x4c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Aug 25 07:48:11 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:00:ce:4b:89:ac:09:7e:57:dc:49:42:e0:
bb:7a:89:34:82:71:07:7b:1c:67:6e:1e:b8:e2:e4:
31:46:19:65:e1:86:3e:1d:87:d2:4d:e9:15:3b:a1:
d4:8a:b3:26:d8:26:89:88:bf:1c:be:9f:bb:4d:8b:
a7:f9:f9:d6:a9:a1:a6:e2:06:81:65:c1:56:33:f9:
be:4e:ea:56:01:d5:9a:94:a5:f9:ea:70:9e:59:c3:
c4:a7:6d:9c:5b:47:9e:80:f3:bb:ec:da:2e:63:4b:
01:cf:19:a3:a8:9b:e9:75:b0:0f:29:3b:ad:56:8a:
66:63:79:fe:9c:3f:a8:ae:a9:29:fa:48:3c:ab:70:
eb:7f:f4:34:da:d8:cc:df:1a:f9:e8:43:83:25:35:
9b:6d:cf:2e:82:7a:c7:04:6b:db:d8:cc:4c:97:08:
7d:e4:be:a5:3c:38:c6:d6:81:23:7c:0a:28:fe:90:
91:17:ce:a7:1f:fe:28:f5:b0:ae:60:8c:68:d7:6c:
33:16:d1:44:e4:c8:de:02:98:e4:8b:ae:b9:aa:00:
b4:ba:c3:bf:89:a4:40:39:73:b3:e0:59:94:58:11:
25:76:9b:46:0b:42:48:96:2d:8d:65:9a:65:1a:04:
c2:0f:2c:b9:7f:cf:54:6d:d9:4b:d1:fb:a7:99:24:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.96.0/20
Signature Algorithm: sha256WithRSAEncryption
56:97:64:eb:27:08:a4:b2:a5:f4:a0:9c:0d:94:e7:a9:ca:0a:
78:e3:dd:f1:2a:94:75:31:1f:54:4a:1e:a5:fb:32:d3:8e:13:
79:b9:80:54:ed:37:46:60:d0:bd:55:d0:71:7c:d5:34:38:a7:
03:43:14:ad:ff:40:eb:9a:de:a5:d1:23:54:ce:d0:55:7e:b5:
88:0b:56:df:62:c9:0c:77:19:29:d5:c6:ee:61:c5:f8:1d:a1:
47:01:46:7b:ac:ed:42:9d:43:de:fc:5b:e8:73:54:05:db:a1:
75:42:56:52:8f:f8:ab:97:28:f7:80:5d:a4:e9:6d:6f:f4:1d:
42:23:83:a1:1c:73:27:27:18:37:74:28:c5:54:f8:20:62:74:
2c:7f:7f:d5:9a:14:cc:fa:85:c9:fe:e5:ee:af:52:c3:61:aa:
76:2c:73:35:6a:52:66:27:33:ff:33:0d:a4:2b:0e:d3:ff:79:
5a:17:85:80:06:99:55:78:28:d1:a4:03:39:a5:71:35:7a:ff:
40:05:6f:86:2c:5c:ca:f0:6a:3f:68:64:4e:71:94:5b:c3:1c:
c5:f4:58:0f:e9:ec:68:03:ce:30:f0:4f:44:33:23:4e:27:cd:
46:36:d5:9d:75:bb:ef:7c:2f:9a:e3:ce:e9:c4:a3:5e:47:66:
49:ff:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:52 2026 by rpki-client