Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
File:                     0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer (raw, json)
Hash identifier:          OzIkGM0iUrNADGJ8FduybOhNdKKHOnpPNE7NnB+lYqg=
Subject key identifier:   0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       47BC15D1825F8F77F79D3F95843FE96C6B0BB5B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Sep 2025 23:52:41 +0000
Certificate not after:    Fri 04 Sep 2026 23:57:41 +0000
Subordinate resources:    IP: 103.177.92.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 17:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bc:15:d1:82:5f:8f:77:f7:9d:3f:95:84:3f:e9:6c:6b:0b:b5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  5 23:52:41 2025 GMT
            Not After : Sep  4 23:57:41 2026 GMT
        Subject: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:12:19:cf:df:a2:c6:72:cc:a9:f7:9b:6d:
                    b9:da:28:c2:12:48:36:c9:4b:f9:ae:c9:56:6e:6f:
                    93:e1:f9:6d:ae:85:a5:17:0d:1d:14:28:5c:5f:12:
                    06:db:f7:e7:42:9b:2e:95:5b:ea:bb:b4:bb:9a:f0:
                    cb:cb:4e:65:21:45:9b:40:36:16:33:88:ab:34:09:
                    c3:5a:57:a8:e4:8d:4a:d4:31:ff:dc:de:01:25:32:
                    02:08:8f:ba:70:6c:29:0e:e8:62:da:0b:3c:af:99:
                    41:78:47:bd:1e:9a:3e:fd:b5:8e:e1:22:9f:7b:33:
                    03:e2:51:05:b1:bb:11:ec:44:46:c1:65:07:51:29:
                    8b:ee:ef:28:01:1f:53:75:7d:5a:58:8b:39:b4:ec:
                    6f:50:70:bb:1d:d3:b7:30:2a:28:5e:6e:92:f3:69:
                    fd:62:0f:73:19:75:32:61:a7:68:40:8b:60:46:e9:
                    4b:b5:d1:4f:b5:20:30:16:db:b0:6a:0b:04:bf:d0:
                    b3:9d:20:5d:a1:55:71:56:17:d7:c2:65:0a:be:b6:
                    e3:7b:2a:35:4d:e0:03:04:ac:fa:68:d0:62:2d:d0:
                    b0:bb:63:fb:1b:cd:9e:ad:35:56:42:0a:a5:d8:c1:
                    1b:f2:1f:3c:ad:6f:91:85:48:9a:13:16:e8:b0:ea:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:de:40:ac:f9:ff:30:30:07:f6:c7:bd:21:18:82:d6:66:
         3c:55:b0:15:96:ac:7e:8e:39:ff:72:63:e9:7b:5a:c1:d7:5a:
         70:f4:42:ef:7e:3d:d6:5e:24:d7:38:45:8d:bf:4f:57:67:5c:
         12:ed:a0:bf:e4:28:79:c0:59:24:7b:74:36:89:3c:9b:db:63:
         4f:36:2f:fd:a2:5f:ed:e2:b6:3e:96:2d:d6:9c:78:5b:6e:d3:
         a5:c7:9e:19:d3:5c:af:95:2c:1a:4e:cd:ca:ae:ee:54:74:b5:
         54:3f:28:2a:af:f2:47:32:91:e9:f3:3e:8e:3d:84:0c:80:46:
         a5:8c:44:24:ca:72:07:97:0f:e4:98:1a:c8:8c:e4:01:1b:35:
         60:dd:e3:1a:42:a3:44:07:74:e4:a4:a8:8a:01:06:49:9b:56:
         81:61:64:77:74:01:16:b8:56:3d:7e:30:af:f7:18:86:c9:c2:
         45:5f:49:08:cb:07:71:df:55:2c:0c:a0:5e:23:2f:7d:52:4d:
         73:40:94:df:1e:90:23:6e:fc:f7:7d:17:9a:ca:b6:13:0a:47:
         67:e6:7b:fd:31:d1:98:8b:fc:fd:5f:e4:e7:d0:a8:ea:5b:d4:
         c1:ab:81:51:d3:95:24:ae:c5:ac:4d:70:d2:6f:d2:42:e1:2b:
         4c:71:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:20 2025 by rpki-client