Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer
File:                     0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer (raw, json)
Hash identifier:          A/2AdqpDnEd29BTJXQrtKe+bq97hF0plWl9WqTbBa4k=
Subject key identifier:   06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7FCAFB18ED57421DD504C600E6810A4BD243A43A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Mar 2026 02:04:08 +0000
Certificate not after:    Tue 02 Mar 2027 02:09:08 +0000
Subordinate resources:    IP: 103.172.144.0/24
                          IP: 103.178.125.0/24
                          IP: 2001:df2:81c0::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 06:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ca:fb:18:ed:57:42:1d:d5:04:c6:00:e6:81:0a:4b:d2:43:a4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 02:04:08 2026 GMT
            Not After : Mar  2 02:09:08 2027 GMT
        Subject: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:88:96:78:79:57:38:18:2a:c9:72:d2:53:
                    92:4d:6e:b3:04:7e:f2:9f:0e:6d:54:f8:01:99:85:
                    c1:c7:b0:e4:ec:1a:b7:ea:75:33:aa:3e:59:ca:fb:
                    29:1c:f2:15:b5:1d:9f:bb:ae:cf:2a:a4:c2:42:78:
                    f2:3c:49:40:a7:36:a5:3a:c5:8f:6b:17:cb:03:a3:
                    0c:30:66:16:a7:48:d5:f8:32:6f:1a:25:2c:82:6c:
                    77:21:f0:de:7e:51:d5:5c:53:ea:a7:be:17:c4:32:
                    7a:a6:4a:c5:2f:d7:0f:e6:07:b6:d8:77:d2:8f:ca:
                    3f:d8:ad:d2:01:17:77:d2:5f:58:d6:31:b2:8a:3b:
                    42:89:24:a7:8d:6d:96:0d:8d:5e:21:9e:22:cb:85:
                    0d:19:f9:6d:c1:3a:f9:df:12:3b:ad:b8:13:00:c6:
                    2c:f9:ee:4e:f8:22:eb:b1:99:dc:4e:8d:65:81:c1:
                    39:c4:1f:47:2b:98:f0:cb:ff:7f:18:96:fa:04:a7:
                    1e:da:4a:be:c2:b3:ff:ec:17:5c:30:61:c4:56:a3:
                    d3:54:df:dd:71:29:28:d2:c0:34:53:4e:1f:ab:4e:
                    83:f8:e6:d5:3b:64:28:ce:03:04:b9:25:3f:7b:a0:
                    cb:4c:61:00:51:ba:82:d1:a5:c9:39:d5:43:07:24:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.144.0/24
                  103.178.125.0/24
                IPv6:
                  2001:df2:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:6b:9d:5a:dc:e9:b2:da:c6:aa:54:34:7a:d7:1f:0f:90:
         50:cb:0b:16:a3:79:bf:61:f5:11:71:eb:08:f5:ec:6a:85:89:
         da:1f:c0:06:c2:06:79:30:db:90:e4:25:86:15:ef:6f:0d:fd:
         c8:0e:04:ae:4f:cb:08:34:79:29:d1:b4:f6:f1:a7:5a:73:7c:
         f2:db:f8:aa:44:52:4f:54:83:ff:f3:a5:6c:d8:20:b5:4f:14:
         21:53:45:12:41:b0:09:6d:af:f6:c5:09:55:1d:f8:79:bb:03:
         41:fa:f1:be:3c:e5:9c:de:22:81:96:40:1a:21:74:87:3b:49:
         e0:c4:f8:a9:04:f3:69:b4:68:dc:ec:b7:c5:28:13:af:13:b6:
         82:ae:a2:6d:4a:51:80:15:e7:01:86:3c:67:5a:71:06:77:85:
         ca:5e:65:5d:5a:43:c5:94:3f:fd:fd:50:8e:8c:78:e5:f5:4d:
         03:18:6a:b3:cb:b1:48:b2:4b:7c:6e:cc:7b:22:bc:38:59:37:
         1a:28:64:38:4f:df:a9:42:19:42:9d:89:9f:12:45:4f:fd:2a:
         bc:7a:12:dc:76:5a:c9:1b:0e:fb:58:25:8e:cf:31:d1:23:3e:
         96:28:85:f8:80:c2:e0:82:3a:81:70:02:c2:df:5c:5f:e3:82:
         ea:3c:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:28 2026 by rpki-client