Certificate

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/702706031F0BA961D078CB8442CEE42A524611E0.cer
File:                     702706031F0BA961D078CB8442CEE42A524611E0.cer (raw, json)
Hash identifier:          /59hUounGFAxfM+B3tFtM0wubu5I2SNRCHbxvu5Qc/g=
Subject key identifier:   70:27:06:03:1F:0B:A9:61:D0:78:CB:84:42:CE:E4:2A:52:46:11:E0
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       2B389DF5837C41B75D42121FC641995B7E201E75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
CRL Distribution Point:   rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Manifest:                 rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/702706031F0BA961D078CB8442CEE42A524611E0.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Nov 2026 12:58:25 +0000
Certificate not after:    Thu 04 Nov 2027 13:03:25 +0000
Subordinate resources:    IP: 160.236.4.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 18:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:9d:f5:83:7c:41:b7:5d:42:12:1f:c6:41:99:5b:7e:20:1e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: Nov  5 12:58:25 2026 GMT
            Not After : Nov  4 13:03:25 2027 GMT
        Subject: CN=702706031F0BA961D078CB8442CEE42A524611E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:96:e7:4f:d2:d2:b6:07:94:8a:bb:b2:2c:
                    6e:54:86:18:68:a9:2a:4a:cb:a0:ba:fa:cb:16:2c:
                    a6:d1:46:08:94:0b:d0:19:6a:c7:ea:08:14:bc:d1:
                    bd:03:e0:b5:52:1b:de:dc:73:37:1b:ad:00:a4:7a:
                    c4:3f:13:87:80:dc:3c:f9:66:9c:12:a5:1f:c9:ba:
                    89:58:dd:ce:28:73:29:0c:75:f4:61:8a:d4:1c:cd:
                    0d:61:b9:19:24:ec:ec:e3:45:a1:47:60:36:cd:e4:
                    6d:ab:c5:c7:f3:ff:e0:a9:ea:74:57:b8:94:f8:4a:
                    da:15:ab:c5:b8:81:1e:c2:9e:94:5b:6f:aa:05:91:
                    63:02:54:a1:2d:34:a8:25:56:be:9d:79:08:8b:98:
                    04:8f:0b:8f:54:cc:60:5d:b1:b0:a8:0d:f9:84:16:
                    6d:23:07:fd:61:24:1a:b9:fa:a1:b0:c1:50:49:97:
                    50:8d:b9:ce:a7:1c:a9:5e:4b:3e:9a:0d:14:23:a7:
                    d9:20:3e:4d:aa:93:63:5a:0a:8d:00:3e:30:92:3e:
                    f1:ad:b5:ad:04:93:ff:77:69:7f:8d:2c:40:cc:0d:
                    68:8f:ae:fd:6a:cd:90:47:6c:9f:12:56:ba:c9:47:
                    1d:61:85:cf:f3:95:97:63:0a:79:4a:47:ec:d4:40:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:27:06:03:1F:0B:A9:61:D0:78:CB:84:42:CE:E4:2A:52:46:11:E0
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/1/702706031F0BA961D078CB8442CEE42A524611E0.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:11:64:e6:c0:85:86:78:ea:dd:b9:5d:71:0a:7e:0e:ec:
         eb:51:4e:b3:7c:29:84:82:aa:5d:6e:28:cb:00:d5:ca:a4:ca:
         a7:bf:2b:7b:10:bb:89:d8:41:e4:72:74:63:39:24:bb:a4:7a:
         48:12:fe:3b:2b:4f:06:e0:ee:95:ba:ec:1a:33:e4:ea:e5:a4:
         54:e7:99:dd:23:84:01:3a:47:8a:21:8a:95:84:a0:e2:18:b8:
         b0:01:88:39:9e:92:5d:7a:1e:9e:4b:f4:00:ac:33:77:40:68:
         12:57:da:a1:25:7d:9e:29:c9:0d:ef:3c:40:83:25:67:98:e4:
         85:b6:c5:d6:8c:ed:21:af:fa:fb:03:5c:24:d8:c7:65:d6:b9:
         bc:c7:bf:81:34:49:18:93:32:5e:71:33:5b:29:eb:08:ac:e1:
         f4:46:3d:b7:e5:80:11:a8:4f:a5:1f:1d:dc:af:18:af:02:89:
         05:e4:00:31:d1:46:3c:c5:7d:3f:15:3c:7f:d9:84:c3:91:05:
         c4:13:c4:c9:1b:82:6a:59:f0:75:17:3f:70:37:4a:63:26:f8:
         4e:46:42:76:58:1b:e9:18:ff:4e:de:e5:4c:62:fd:1b:6c:8c:
         86:46:df:5a:29:6a:68:60:ab:f8:aa:68:21:2c:03:1f:3b:30:
         f8:1e:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:57 2026 by rpki-client