Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
File:                     056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer (raw, json)
Hash identifier:          e0CMFpu3E6C5ACybD+ChC1P4MoZ5D4QOnB7C4jOuEvI=
Subject key identifier:   05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0EF9AF1F8FE0894946404442A8F8AF681BFC60E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Sep 2025 16:24:00 +0000
Certificate not after:    Fri 25 Sep 2026 16:29:00 +0000
Subordinate resources:    IP: 103.102.26.0/24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 14:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f9:af:1f:8f:e0:89:49:46:40:44:42:a8:f8:af:68:1b:fc:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 26 16:24:00 2025 GMT
            Not After : Sep 25 16:29:00 2026 GMT
        Subject: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:74:fc:8e:e1:06:99:ed:f9:55:7c:7a:27:
                    2c:d4:30:01:6a:43:71:3b:c2:a3:2f:72:fa:7e:fc:
                    68:f0:86:7c:b2:b4:a2:ed:ea:73:36:c5:41:e9:47:
                    01:44:6b:fe:99:3a:35:01:25:6a:7a:0d:16:75:6d:
                    e7:c3:71:3d:0a:6c:e9:6d:49:28:05:dd:1b:44:e3:
                    71:9b:ee:d5:a4:e0:58:63:70:33:2a:42:9c:fc:fc:
                    8a:a3:32:65:ef:ed:92:17:e9:ea:be:3b:a5:91:6c:
                    3b:33:46:e5:df:d1:b8:fe:af:c3:5a:a7:7e:d4:5a:
                    80:0b:c7:6d:75:0f:26:d6:ec:ae:94:d6:ad:3d:4d:
                    d6:43:87:3b:f1:4d:02:cd:d1:cb:61:4c:06:d1:03:
                    0a:d0:6a:73:17:88:d5:77:19:d5:45:18:8c:ae:7f:
                    2c:4e:c3:f1:24:56:2a:a2:f9:78:c9:76:8a:9b:03:
                    c1:2c:2a:cb:a2:ab:b2:ab:eb:ca:a8:36:ce:22:2e:
                    9c:8a:d6:7f:44:e0:12:da:5e:64:a1:96:7a:f2:ab:
                    08:0d:9c:cb:c2:d0:a3:3e:3a:7e:91:d3:84:c4:52:
                    f8:22:17:d3:61:cb:d9:df:a7:c7:bc:60:63:6d:33:
                    b5:af:75:67:14:fd:6f:04:ae:43:bd:74:c8:8f:82:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:1a:ec:d1:68:ab:76:6c:e7:4c:72:f5:d0:c4:10:96:e3:
         2e:34:ed:4c:59:aa:6c:21:fa:14:0f:14:ff:9f:20:57:82:b8:
         8c:50:c3:61:ba:c8:b4:bc:c8:99:09:6a:21:ee:99:45:ca:cc:
         69:a2:df:f6:0f:47:09:d6:3f:4f:d1:df:b6:b9:f8:e5:87:ba:
         ce:01:d4:be:84:3c:7c:45:20:4d:94:78:e6:c3:b0:4a:d1:91:
         20:3e:61:81:e5:7f:c5:e5:ca:a5:a4:7a:1e:55:3c:34:bb:f9:
         c9:ea:f5:0e:61:96:16:a7:d6:8f:c7:6b:0e:4b:33:e0:6a:4e:
         27:45:48:10:06:74:df:9b:eb:e0:96:20:88:e7:9a:1b:68:fa:
         ef:05:d7:a2:7d:84:ab:52:b7:f3:14:57:40:f1:2a:3a:20:21:
         2e:5c:d6:af:92:c3:73:34:bb:f8:b0:8b:e5:4b:91:f3:96:53:
         ae:cb:30:c2:3e:3f:29:a4:a3:bd:d8:fc:40:6d:8b:a1:fb:ba:
         91:95:0c:3c:2b:3f:0a:ff:ff:4f:b2:30:3c:b7:8b:5f:cc:cf:
         d9:8f:86:93:d7:3e:95:ea:05:19:67:55:a3:46:fe:fd:54:79:
         b9:a0:2a:26:1e:17:38:ae:79:1b:30:71:37:b3:84:bd:e3:78:
         d5:db:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:55 2025 by rpki-client