Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
File:                     1F56B4FADE1163027086547FBCB424EDF45191FD.cer (raw, json)
Hash identifier:          dnX3OMe3C0oCHgXjCFvX9k0CYyVUJ5EgayZ40V7CsXA=
Subject key identifier:   1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5013541995B885F1A373C9A53B28E82172C4E47D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Mar 2026 18:24:36 +0000
Certificate not after:    Thu 18 Mar 2027 18:29:36 +0000
Subordinate resources:    IP: 103.136.4.0/22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 16:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:13:54:19:95:b8:85:f1:a3:73:c9:a5:3b:28:e8:21:72:c4:e4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar 19 18:24:36 2026 GMT
            Not After : Mar 18 18:29:36 2027 GMT
        Subject: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:90:9c:e7:4e:f6:3c:c1:62:33:1f:b5:7b:f2:
                    4d:78:1e:2c:d8:94:ec:09:b1:67:70:dc:b1:d3:55:
                    60:b6:5c:19:78:79:ee:ff:2b:fb:41:65:cb:e0:dc:
                    22:2a:84:3b:86:dc:9a:9e:db:20:a9:81:45:59:b5:
                    50:4c:7c:8e:8a:7c:1b:e0:b3:67:13:a1:e3:67:77:
                    39:c5:ea:fd:e6:92:f5:2c:61:93:57:c2:42:29:7a:
                    9a:a7:62:20:31:ff:96:a2:10:e9:c3:09:25:32:8b:
                    43:34:79:fb:47:7d:35:98:cf:af:11:e0:d8:fb:d4:
                    49:10:6d:98:b0:be:ef:5e:2b:42:4e:49:14:55:d5:
                    19:11:12:4a:13:da:fc:72:21:09:60:0f:f0:05:7a:
                    99:6b:da:23:4f:63:89:bd:bd:64:21:c2:d6:eb:63:
                    ab:9e:70:70:ee:75:79:c4:4f:43:27:69:19:c1:3b:
                    34:b4:6c:96:04:46:0c:61:55:6d:50:b2:39:c6:99:
                    24:86:6c:d4:db:5c:fd:8d:b3:e5:b6:08:c8:0b:6a:
                    d3:75:8f:24:25:4c:9e:87:2c:0b:3a:1f:f7:17:a7:
                    6a:6d:80:9c:2f:69:38:aa:8d:93:ce:9f:ef:99:9b:
                    62:9e:8e:da:80:c9:67:8d:fc:f8:28:3f:63:4d:c9:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:1a:23:83:f2:d7:a0:87:5b:f9:e8:e1:0a:b8:7e:c0:d1:
         0f:0b:96:2d:50:88:49:d2:91:ce:5c:c9:23:44:d9:21:50:cc:
         69:77:76:60:d1:5e:86:06:33:d5:a2:38:75:ba:bc:35:23:41:
         02:2b:72:83:eb:ed:3d:64:1b:3f:9b:75:8b:f0:61:36:31:7b:
         d7:c2:a9:08:12:ea:2e:0f:96:3e:0e:6b:64:db:3c:59:e5:9c:
         82:b1:d2:08:27:cf:ca:37:b9:7c:3e:4f:92:27:d1:f8:a8:ec:
         14:df:3b:bb:b5:9e:d7:b1:5b:73:c3:bd:11:51:c7:98:44:cd:
         90:ae:1e:2e:c7:06:f0:25:c8:ba:1c:d1:31:86:8b:1e:0b:df:
         38:35:ed:f9:4a:98:c0:83:86:8d:11:0a:00:d3:31:e2:7a:0a:
         f2:33:3b:d3:7d:52:9b:09:22:4c:81:7b:e6:f6:a7:9a:02:84:
         e9:95:0d:65:f4:73:9c:34:5f:5f:64:de:a4:cc:7b:8d:7e:bf:
         0a:c3:be:e3:b6:c6:d5:55:bb:32:29:17:56:9c:f5:72:87:e5:
         bc:af:ac:5d:7a:f2:50:41:2f:c3:f8:f7:f6:19:3c:02:dc:c6:
         a1:c5:64:57:88:8f:18:d7:23:77:76:f4:9c:d2:7d:f0:2d:79:
         5f:f7:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:21 2026 by rpki-client