Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
File:                     56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer (raw, json)
Hash identifier:          dkY6DkXQwu6s3OPpbgaQOLrh26gJLHH1X0pd7qpBE2U=
Subject key identifier:   56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5ABDDF327335A1E2953012A76D36F13EED8ED583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 09 Aug 2025 03:18:20 +0000
Certificate not after:    Sat 08 Aug 2026 03:23:20 +0000
Subordinate resources:    IP: 103.47.228.0/23
                          IP: 2001:df1:e400::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 10:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bd:df:32:73:35:a1:e2:95:30:12:a7:6d:36:f1:3e:ed:8e:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  9 03:18:20 2025 GMT
            Not After : Aug  8 03:23:20 2026 GMT
        Subject: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:d6:2a:76:9b:3a:c7:0a:de:a7:15:dc:00:
                    d8:56:be:27:87:51:7d:93:6f:06:89:b6:12:06:b3:
                    1d:8f:34:a9:48:01:ee:60:81:67:58:6c:2f:7c:41:
                    bd:61:90:52:db:c1:cb:7a:56:96:f4:47:a8:36:4d:
                    21:2d:d1:22:d1:f5:1f:5e:d3:ea:ac:9a:da:6c:cd:
                    57:7d:76:e0:83:22:18:30:9d:94:49:a3:f3:06:f5:
                    ad:15:5f:4d:9e:09:6a:af:2e:c9:da:20:49:60:62:
                    07:5a:1e:2d:d9:2a:4b:f3:89:9f:b3:1b:74:54:0c:
                    ff:f2:7a:25:ca:8c:c6:bf:c3:fe:bf:51:4c:de:ca:
                    88:b3:77:3f:d6:a5:f9:ca:10:99:7e:70:f0:53:58:
                    69:25:35:6f:e3:8b:bd:be:f0:99:62:69:f1:51:89:
                    a8:99:e7:d2:b6:19:44:f6:93:c1:30:0c:8d:29:03:
                    4b:18:70:fa:49:64:c2:a8:78:54:9d:2d:49:20:bf:
                    83:1c:b4:1c:a6:f8:21:ff:1a:fa:74:d2:9e:05:01:
                    26:b9:4d:d0:86:e5:ca:f9:84:e2:78:69:c7:52:06:
                    ad:ec:ad:70:a4:87:73:9e:d0:4a:85:bb:90:fc:4a:
                    58:07:37:00:ed:03:7e:83:26:70:8a:2d:fb:f1:7f:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.228.0/23
                IPv6:
                  2001:df1:e400::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:0a:c2:b7:fc:61:20:ad:10:2d:6d:d3:c5:b4:e9:63:2a:
         0a:84:bc:e5:ba:f9:be:0d:84:60:2e:98:01:1f:f2:f1:5c:e9:
         26:86:d6:84:5f:7b:74:bc:54:8b:c7:c4:ba:fa:9a:71:aa:24:
         66:3d:77:89:1e:eb:ac:83:ee:5e:b9:74:78:25:13:25:29:a6:
         24:98:09:dd:33:5d:9e:28:a1:de:3f:2c:8c:81:66:b3:4b:9e:
         22:80:f8:2d:79:88:86:95:b6:de:bb:1f:05:c5:30:f6:ee:18:
         ec:35:a6:03:e5:d7:eb:67:c0:6d:82:f8:3b:c7:e3:85:2a:a8:
         36:63:6d:11:15:4c:84:dc:d5:e1:9b:76:01:37:ab:09:09:17:
         19:5a:2c:e2:25:03:06:c1:41:71:c5:43:cf:61:ce:7b:4b:44:
         99:44:5a:59:17:67:f3:28:85:8a:66:ff:11:fe:91:ea:7a:99:
         32:43:2f:59:d2:98:74:6d:32:5d:6c:d3:d0:d9:c0:87:8b:af:
         8e:f5:ec:2c:35:f1:ce:5f:6d:ba:33:57:79:03:a0:42:2c:ff:
         98:5d:6e:60:a0:5e:1f:fc:1c:fc:0f:48:a2:34:b2:b4:aa:88:
         21:cf:9c:b4:16:5b:71:dc:3d:cb:7b:68:bc:c9:6a:31:e5:e3:
         c5:fb:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:58 2025 by rpki-client