Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
File:                     6ED97449A90175F41CA7139C43ABDB1DE992C510.cer (raw, json)
Hash identifier:          P0fWbC4K6zZhChl0fOKEAVfvjImItrDDRF8psQAN/QY=
Subject key identifier:   6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7BC1A826982544B748E22E7B855043D15C26A646
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 19 Sep 2025 04:48:02 +0000
Certificate not after:    Fri 18 Sep 2026 04:53:02 +0000
Subordinate resources:    IP: 103.255.162.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 14:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c1:a8:26:98:25:44:b7:48:e2:2e:7b:85:50:43:d1:5c:26:a6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 19 04:48:02 2025 GMT
            Not After : Sep 18 04:53:02 2026 GMT
        Subject: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:f3:38:72:53:45:47:98:7c:92:d4:ba:4e:
                    17:6e:a6:36:38:14:8a:84:4d:2d:5c:9a:27:db:29:
                    f3:2f:08:8b:7e:63:69:81:21:0b:ec:57:98:4d:c6:
                    42:b0:fb:0e:74:c5:43:3c:eb:c3:32:32:70:d6:02:
                    29:9e:aa:b5:97:25:f2:71:ca:7b:a4:54:9e:05:f9:
                    5c:61:8e:fe:b6:18:c9:cc:a4:b3:5e:d5:5d:ae:c6:
                    9a:d8:06:31:03:0f:c5:14:d7:2d:d8:52:71:1a:7e:
                    5d:c8:8d:94:25:01:d8:a1:0e:d8:ef:07:35:52:7e:
                    01:7f:78:ca:db:32:0b:bc:c8:1e:8e:af:ef:f1:04:
                    dc:1c:32:23:d4:53:c5:19:e9:ee:a6:ad:df:b5:03:
                    37:ed:b0:00:76:62:b3:66:90:83:9b:c6:d3:3f:40:
                    b6:50:56:b0:5a:cf:f7:d4:2a:6e:3e:a1:3d:69:ea:
                    aa:91:f6:44:79:6a:f4:44:7a:14:a7:3b:72:81:c7:
                    af:a2:4b:94:41:03:bd:4c:e9:48:75:6d:cd:e3:f9:
                    e6:6e:bc:c8:8a:8e:1e:32:bf:41:7c:ad:98:40:cd:
                    75:80:8c:68:b4:10:2f:92:cd:f0:92:17:e7:42:ba:
                    57:ad:de:5d:10:e5:54:b0:c0:1a:05:ab:07:89:a1:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:b2:70:36:57:28:c1:28:7f:18:f4:33:1a:09:b5:58:32:
         a6:65:46:f8:78:72:a7:73:a6:b1:5a:9f:e1:38:a6:54:c5:ab:
         13:02:62:ef:6d:c5:e0:c0:b9:19:c3:85:b5:1f:71:f3:e1:69:
         99:62:13:59:1c:b9:7d:42:68:a3:34:13:f7:4e:0f:61:78:a9:
         91:1a:d2:2c:7d:ba:c0:47:1b:62:47:5d:f3:6c:d4:0c:22:9d:
         96:01:48:f8:08:c0:33:84:42:4a:54:d0:63:d5:eb:11:c5:14:
         09:18:de:b4:b3:76:9f:ad:0a:23:ef:61:86:ed:74:79:1e:dc:
         fe:52:dc:5d:a6:cc:fa:36:c5:68:b6:e6:b9:1d:71:15:1e:0e:
         2a:e2:89:64:e9:c4:11:ad:3e:ab:44:9f:b5:f4:f0:19:8a:25:
         ec:55:2d:de:e8:08:24:f9:34:2c:51:0f:cc:58:e7:c6:97:b6:
         4f:00:1e:69:45:e9:ed:52:92:13:6c:3c:eb:19:6e:35:7b:b7:
         ec:84:ca:7c:fc:2b:2c:86:e5:ab:92:6e:df:59:2e:21:4c:55:
         ea:0d:6e:c9:99:e7:90:53:0b:de:0f:5b:93:d8:d0:e2:62:74:
         d0:8e:d7:1d:89:be:13:5c:06:04:d1:e8:3e:78:10:7a:d6:33:
         f5:dc:df:20
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUe8GoJpglRLdI4i57hVBD0VwmpkYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxOTA0NDgwMloX
DTI2MDkxODA0NTMwMlowMzExMC8GA1UEAxMoNkVEOTc0NDlBOTAxNzVGNDFDQTcx
MzlDNDNBQkRCMURFOTkyQzUxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKMA8zhyU0VHmHyS1LpOF26mNjgUioRNLVyaJ9sp8y8Ii35jaYEhC+xXmE3G
QrD7DnTFQzzrwzIycNYCKZ6qtZcl8nHKe6RUngX5XGGO/rYYycyks17VXa7GmtgG
MQMPxRTXLdhScRp+XciNlCUB2KEO2O8HNVJ+AX94ytsyC7zIHo6v7/EE3BwyI9RT
xRnp7qat37UDN+2wAHZis2aQg5vG0z9AtlBWsFrP99Qqbj6hPWnqqpH2RHlq9ER6
FKc7coHHr6JLlEEDvUzpSHVtzeP55m68yIqOHjK/QXytmEDNdYCMaLQQL5LN8JIX
50K6V63eXRDlVLDAGgWrB4mh1KkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFG7ZdEmpAXX0HKcTnEOr2x3pksUQMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by83Nzc0MjUxNi1iNDU5LTQ1MDYtYjRkZS1mNjllMTkzZDVjZGUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NzQyNTE2
LWI0NTktNDUwNi1iNGRlLWY2OWUxOTNkNWNkZS8wLzZFRDk3NDQ5QTkwMTc1RjQx
Q0E3MTM5QzQzQUJEQjFERTk5MkM1MTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFn/6IwDQYJKoZIhvcNAQELBQADggEBAHw1snA2VyjBKH8Y9DMaCbVYMqZlRvh4
cqdzprFan+E4plTFqxMCYu9txeDAuRnDhbUfcfPhaZliE1kcuX1CaKM0E/dOD2F4
qZEa0ix9usBHG2JHXfNs1AwinZYBSPgIwDOEQkpU0GPV6xHFFAkY3rSzdp+tCiPv
YYbtdHke3P5S3F2mzPo2xWi25rkdcRUeDiriiWTpxBGtPqtEn7X08BmKJexVLd7o
CCT5NCxRD8xY58aXtk8AHmlF6e1SkhNsPOsZbjV7t+yEynz8KyyG5auSbt9ZLiFM
VeoNbsmZ55BTC94PW5PY0OJidNCO1x2JvhNcBgTR6D54EHrWM/Xc3yA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:04 2025 by rpki-client