Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
File:                     139934661CE07BEBBFA824F7225502B15AE8B653.cer (raw, json)
Hash identifier:          R45Qh496k+Oa4azNGSliOxNIJjpf1x6c+dnu5xRNdJ0=
Subject key identifier:   13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       180091BC944DB3487D620946A232FEF40DB83912
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Oct 2025 12:33:31 +0000
Certificate not after:    Fri 16 Oct 2026 12:38:31 +0000
Subordinate resources:    IP: 103.179.218.0/23
                          IP: 2001:df0:54c0::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:00:91:bc:94:4d:b3:48:7d:62:09:46:a2:32:fe:f4:0d:b8:39:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 17 12:33:31 2025 GMT
            Not After : Oct 16 12:38:31 2026 GMT
        Subject: CN=139934661CE07BEBBFA824F7225502B15AE8B653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:29:66:5a:1d:60:e2:8e:6a:18:a6:67:bb:
                    af:64:21:26:18:7a:eb:0c:c8:fd:58:40:bd:23:21:
                    5f:45:28:af:f6:bc:1e:e2:eb:2c:59:9b:63:15:73:
                    49:ce:fd:1e:e3:9e:85:3c:23:15:4d:5b:5e:ae:4a:
                    b6:3b:4c:0b:c4:b8:af:ad:14:4d:f6:d5:67:c9:2f:
                    3b:25:f1:0d:bc:b1:9c:a7:0c:29:f5:41:b7:f4:04:
                    32:0d:a1:8d:80:d9:f6:2c:3e:bf:be:f6:f2:ce:a0:
                    86:40:f9:23:71:eb:93:d2:35:9d:20:71:7e:95:14:
                    50:e4:7f:cd:03:be:79:9c:bb:a2:ab:57:2e:ef:24:
                    f0:67:70:bb:29:e8:09:59:88:4b:9d:39:d9:0e:1c:
                    e7:18:7e:49:4e:7d:be:00:6b:d3:1e:a0:a1:1c:93:
                    e2:b5:33:95:ef:5b:d4:a2:b4:be:df:dd:68:16:d4:
                    99:d9:c3:b0:49:47:7f:ee:1a:14:33:42:55:41:75:
                    11:68:8e:16:f2:22:f7:0d:6f:80:14:9a:71:c5:82:
                    06:ff:30:17:15:43:6b:6c:b2:49:40:1c:20:67:71:
                    7a:7e:54:b8:fc:a1:19:15:e1:70:ac:af:30:5d:51:
                    9c:ea:88:96:a6:fa:e7:f9:c8:2c:88:68:1d:27:6d:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.218.0/23
                IPv6:
                  2001:df0:54c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:97:8b:0c:e8:ac:03:7e:44:28:41:0d:01:5b:52:9f:aa:29:
         01:90:d5:ff:31:02:02:9a:fe:4c:82:1b:45:04:c3:91:4a:70:
         96:34:4c:7c:12:e9:62:1d:b2:75:84:9b:c1:d2:ad:f6:1c:17:
         d8:9d:4f:60:ef:7e:bd:5c:aa:07:e8:d8:fa:ec:da:f3:9a:50:
         4b:17:65:e5:ab:04:40:13:01:f6:94:47:48:cf:8e:49:18:06:
         0d:c4:19:c6:12:6c:16:52:85:12:3c:f8:de:fd:cc:fb:1f:7c:
         53:5e:b3:dd:0c:c9:a5:0f:75:55:fc:4f:d2:3d:09:1b:e6:46:
         1c:5e:e9:49:61:6a:f7:04:3e:21:e3:c1:5b:de:e8:cd:e6:b5:
         35:eb:a8:4f:42:1e:8b:14:1d:3f:25:25:36:f6:5d:3a:b4:1e:
         fe:fe:6e:ff:21:5d:76:a6:9e:31:10:34:12:85:80:c4:7d:d3:
         33:66:87:d3:88:aa:7d:bb:3a:14:25:1c:79:9d:26:a5:25:3a:
         4e:01:4c:d6:6e:6b:6d:16:29:44:1b:c5:ef:d6:2d:51:f1:ab:
         2c:e7:cc:98:76:68:f5:66:99:ce:b6:88:c3:3b:bd:c2:22:e8:
         3d:eb:74:76:94:ce:19:85:9b:4c:fd:fb:cc:6f:3a:15:66:c1:
         4c:74:5f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:10 2025 by rpki-client