Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer
File:                     7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer (raw, json)
Hash identifier:          mq9fCim/0HmOlv/43wKDTGArRG1H7WeijrmATHA4vEc=
Subject key identifier:   7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       726B8804907331DE6A4CCD374D5726D26508F793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Sep 2025 18:01:40 +0000
Certificate not after:    Mon 21 Sep 2026 18:06:40 +0000
Subordinate resources:    IP: 103.213.230.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 14:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6b:88:04:90:73:31:de:6a:4c:cd:37:4d:57:26:d2:65:08:f7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 22 18:01:40 2025 GMT
            Not After : Sep 21 18:06:40 2026 GMT
        Subject: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:73:3d:1c:94:81:94:fe:3c:35:f6:cc:66:
                    93:0c:18:7a:85:a7:87:b7:cb:2a:14:c2:80:9d:6e:
                    66:37:e2:d0:bb:fc:b8:ee:07:ca:76:80:98:52:b8:
                    3c:d2:93:be:a9:84:fa:18:fb:11:f1:08:09:43:2a:
                    fc:c8:cb:8e:5d:59:aa:f4:16:c3:81:1c:43:c9:06:
                    dc:28:7d:05:a3:a8:f0:3f:6e:04:84:b0:90:49:77:
                    b7:5f:15:d5:e4:b6:36:6e:3b:3e:3e:ac:ff:64:2a:
                    23:c5:e1:ff:d7:50:b5:94:fc:7e:85:b4:79:7d:2a:
                    57:1d:32:aa:45:5e:43:1b:8d:b6:3d:2c:53:77:a1:
                    10:67:65:71:33:24:fd:6a:68:96:cd:48:d7:35:7c:
                    33:fb:c0:83:2f:cd:fe:31:35:a5:df:ae:cc:93:21:
                    77:72:da:dc:47:b2:f7:7c:2c:34:ad:c8:b5:56:9a:
                    86:da:cc:86:be:70:b8:ee:f5:71:59:c2:c5:8d:d9:
                    b9:e1:9b:d5:d6:07:8f:68:e4:a1:31:58:55:98:5c:
                    9d:3e:2e:44:f4:ed:3f:50:6c:46:98:b2:7d:96:27:
                    3e:dd:0f:b6:4b:51:83:24:9b:5b:c1:5c:04:f5:7c:
                    4f:4d:6a:c4:04:3d:8a:e1:63:5e:fc:d8:61:56:4d:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:af:03:a5:76:52:1c:3a:89:81:1d:3f:dc:b4:a1:48:40:ac:
         6f:41:3c:20:ef:b7:66:d1:8a:0c:c4:15:dc:9e:60:99:0d:e6:
         00:61:07:f5:56:d6:18:31:73:3f:f9:8b:6c:c7:d8:fb:9c:e3:
         39:f6:5a:6f:50:30:be:57:9d:5e:72:b2:9c:d0:35:a5:4a:71:
         f1:ab:b3:bd:d9:1e:71:14:e0:44:b8:62:73:12:80:b8:69:c2:
         ed:08:8d:b4:b9:49:b8:ee:cb:f5:c1:49:cf:0b:76:a7:f8:7d:
         93:aa:75:51:b9:78:ac:dd:86:60:1f:21:02:24:3c:ae:ad:2a:
         65:d5:6e:d7:d4:f3:a0:b8:aa:b1:2e:32:2a:16:8f:cf:67:26:
         c6:e6:b1:4e:bc:c3:2f:cf:29:be:13:4b:f4:d0:a9:52:f6:f0:
         75:22:9a:7e:76:62:a5:f9:b5:57:8e:4e:91:4f:cf:bf:2e:c7:
         3f:ab:25:f1:97:5d:e0:5e:72:85:47:7c:49:71:a6:39:68:a8:
         75:09:f8:02:38:35:1e:98:d4:ae:3d:b0:34:1b:d9:89:b9:8f:
         a9:4e:1e:b2:b6:4e:82:40:73:38:44:0f:b6:22:e1:11:14:aa:
         25:5d:ec:67:f0:db:50:b4:42:4a:03:f3:17:69:f4:25:1c:3a:
         f2:92:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:26:12 2025 by rpki-client