Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer
File:                     4551A032C44485FF6593E043527E3E1CE35B4C46.cer (raw, json)
Hash identifier:          b++cTKTODQnYuEWh8q+qvqFwEp95sy4fYuwjuxhiuY0=
Subject key identifier:   45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1E9221E52EDB07E48AEA60284AE4F58532302004
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 05:52:48 +0000
Certificate not after:    Tue 02 Jun 2026 05:57:48 +0000
Subordinate resources:    IP: 103.219.72.0/22
                          IP: 2405:4c80::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:92:21:e5:2e:db:07:e4:8a:ea:60:28:4a:e4:f5:85:32:30:20:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  3 05:52:48 2025 GMT
            Not After : Jun  2 05:57:48 2026 GMT
        Subject: CN=4551A032C44485FF6593E043527E3E1CE35B4C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:e5:be:13:e6:be:4b:44:5d:47:a6:22:b8:
                    18:ac:9b:23:eb:bf:a5:2f:0d:1d:4f:98:ea:85:76:
                    df:ba:31:c2:76:83:b2:f5:c2:c9:81:f1:b6:ae:8c:
                    9b:3a:c8:f7:72:7d:85:e9:4c:c5:fe:5f:2f:6d:cd:
                    a8:97:74:7e:d8:48:31:c4:7a:3c:17:aa:e3:b7:d1:
                    01:53:dd:12:c6:a7:9c:54:6a:1e:3d:83:49:45:64:
                    59:9a:6b:a1:19:46:2b:d7:a9:fb:ba:3c:83:87:46:
                    88:80:f3:c8:cb:48:5b:92:0d:3b:09:23:84:7f:21:
                    b0:a8:50:64:56:42:bb:c8:67:8c:20:0b:99:91:e0:
                    c7:f9:26:0b:d3:9d:fc:36:58:44:b4:db:0a:6b:06:
                    5a:a2:26:1d:53:db:83:2a:53:4a:45:ec:7b:f4:03:
                    e9:c2:fb:9d:82:d7:d6:76:97:5e:75:f2:41:82:9e:
                    08:df:a3:ef:1e:66:06:d3:33:71:05:33:40:68:4b:
                    6f:f2:a4:28:d1:76:ea:f7:f5:85:c6:c8:a2:60:bd:
                    92:18:f2:0e:5c:23:a2:81:e2:9c:0c:cd:8f:a8:d3:
                    30:72:b0:10:a1:f6:5a:53:71:1a:8e:08:a1:36:3c:
                    87:58:95:01:09:b8:e4:45:6d:77:c3:95:9f:46:b7:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.72.0/22
                IPv6:
                  2405:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:88:2a:01:07:59:38:44:1d:30:39:02:24:07:f9:9a:8a:
         a5:d5:3a:ce:c4:fc:75:03:b8:96:c3:53:24:f8:da:d5:da:de:
         34:d0:08:ea:cf:55:90:28:ee:b8:1b:b8:1c:b1:75:9a:a4:55:
         2e:77:69:1a:e3:22:68:b6:7c:79:c8:a1:c3:f3:a4:b4:2c:06:
         ca:97:35:0e:c0:ac:07:8f:58:3e:b3:e6:d5:28:da:42:f5:46:
         b8:b6:bb:ff:29:f6:e5:a1:2a:3b:54:e3:6b:c7:75:67:15:15:
         6b:03:2c:d2:95:f4:bc:84:65:2a:9e:0d:a9:18:5a:71:d2:37:
         7f:4f:ab:1e:7c:bb:25:3a:bd:30:c8:cf:94:80:0f:f3:74:73:
         ec:89:61:77:e1:a4:98:4c:ac:18:bb:62:86:74:ff:ae:ff:e3:
         fd:da:02:c2:df:18:22:97:67:49:47:45:eb:bc:8b:08:cb:b1:
         63:a1:52:6e:d4:8e:e5:d3:d5:db:43:5e:84:16:9c:a2:a2:93:
         32:e5:0a:49:5f:7b:7d:fd:6e:bc:2f:4d:ec:c3:3c:d8:2f:aa:
         d4:ef:79:a4:d1:26:16:88:5c:86:99:4f:e3:84:25:1f:49:0c:
         5f:37:a7:ef:d1:12:3f:57:aa:a1:83:71:33:ac:3e:21:d7:8a:
         18:a9:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:50:14 2025 by rpki-client