Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
File:                     F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer (raw, json)
Hash identifier:          HbllZrv/uzg/NisAV6GvKPhFvkx/6Tu9eP2JCOnbgAI=
Subject key identifier:   F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       5D62808A44D36EF8D7EBA66D504F6E94DDA65E58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:47:28 +0000
Certificate not after:    Sun 02 May 2027 02:52:28 +0000
Subordinate resources:    IP: 160.19.178.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:62:80:8a:44:d3:6e:f8:d7:eb:a6:6d:50:4f:6e:94:dd:a6:5e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  3 02:47:28 2026 GMT
            Not After : May  2 02:52:28 2027 GMT
        Subject: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:7c:fa:49:7d:b1:ee:15:99:dd:8e:e1:2a:
                    a4:ed:da:cf:e5:f1:cc:c2:3e:d9:2c:66:d4:21:a4:
                    2b:85:cf:ef:2f:19:44:b3:f1:9f:34:d1:e0:73:2c:
                    cd:de:e1:97:0a:8e:30:d6:52:0c:f4:79:c8:bf:d7:
                    67:9a:4a:ef:5d:40:e3:44:e6:cc:0b:bd:b3:a3:14:
                    57:65:e2:d3:a3:a6:cf:49:7e:48:41:8d:41:e3:8b:
                    6b:3b:ea:0e:0a:d6:9a:70:e1:e8:bc:bc:2b:35:30:
                    af:d2:0b:e8:98:31:a4:c4:db:ad:7d:4f:8c:29:d3:
                    ca:be:1d:00:26:7e:ed:d5:c3:b7:cf:ca:89:e4:c7:
                    8c:78:ec:1c:38:d2:5f:98:b4:d3:39:ee:46:a3:f4:
                    18:d0:ef:33:64:91:85:28:75:24:6a:90:4a:e5:08:
                    b5:c7:11:05:cb:d5:68:d0:2d:25:07:92:93:29:9f:
                    e4:3d:1f:cd:0d:f4:68:93:e2:0c:4a:cf:6d:b2:0c:
                    ed:1e:6e:73:d9:62:2a:2c:7f:00:80:cc:09:5a:4c:
                    4a:f9:c1:fa:32:69:a1:ca:21:09:70:89:38:dc:a7:
                    45:67:ec:08:25:16:ac:7a:74:17:b6:37:a3:20:a3:
                    12:c0:1c:87:f7:64:75:7f:37:ac:3b:9d:67:cb:9f:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:af:b2:57:8f:12:dc:f8:d7:8d:53:21:2d:96:df:2e:d9:d7:
         88:bf:67:26:ed:06:a5:a2:b1:49:70:43:06:ad:6c:63:53:fc:
         80:52:7b:04:45:81:8d:ff:62:3f:4b:38:28:ee:93:ee:53:4f:
         55:91:e4:c6:a7:3c:66:b0:7c:40:32:52:78:e4:11:44:e2:43:
         a7:bd:e6:39:00:f8:99:ad:5d:d1:d1:db:68:36:70:d7:15:d0:
         a2:0f:04:bb:b9:35:15:3d:98:e5:c6:60:c0:b8:2e:79:22:34:
         89:64:1b:22:5f:40:78:ba:f8:e4:3b:6f:91:c4:25:9d:a5:6a:
         45:87:a3:0e:5f:ea:7a:31:30:b9:af:97:a9:a0:dd:b4:3f:ce:
         35:97:28:75:49:5d:a7:80:60:64:89:45:0e:27:0d:f9:a2:18:
         12:ff:55:ee:63:df:e3:f4:cc:22:82:95:4c:3b:d9:bf:76:7e:
         5f:3f:d1:a6:64:2a:c3:8a:06:64:25:47:bc:69:c5:c0:27:e4:
         2e:56:d3:df:0b:61:cf:1c:81:27:1c:af:da:8f:08:22:4a:03:
         a9:5f:47:43:97:d1:1a:ec:a5:20:74:8c:0f:f2:d2:0b:c4:f3:
         b8:8f:ac:a0:1a:bf:59:63:da:b6:f1:9f:90:4b:89:01:fc:ce:
         45:6a:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:27 2026 by rpki-client