Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
File:                     06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer (raw, json)
Hash identifier:          7X8zv5wrLwgURpitwuChVb4bTfBKuxjmw8lL+Krxogk=
Subject key identifier:   06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       5FEE48B8537BC337B12D4F950D8BDDD0F4B63904
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:11:07 +0000
Certificate not after:    Sun 02 May 2027 02:16:07 +0000
Subordinate resources:    IP: 103.113.3.0/24
                          IP: 103.219.112.0/24
                          IP: 2001:df2:3a00::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ee:48:b8:53:7b:c3:37:b1:2d:4f:95:0d:8b:dd:d0:f4:b6:39:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:11:07 2026 GMT
            Not After : May  2 02:16:07 2027 GMT
        Subject: CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:8e:47:30:45:dc:74:dd:fc:4f:a5:f6:57:
                    31:c4:db:c8:23:9f:4a:3e:b9:37:c2:27:a4:50:f8:
                    9e:b3:2c:60:51:3d:94:4f:90:50:e3:d8:01:62:4f:
                    e5:93:db:cd:34:4f:b1:d4:3e:28:75:48:90:8e:83:
                    c4:de:65:c8:98:a5:e0:aa:5e:df:46:1f:37:71:b8:
                    23:05:9b:cf:65:56:c3:39:fa:99:59:f8:a6:b6:4b:
                    65:07:ce:91:49:a9:29:a3:08:cd:2e:20:fb:7e:ff:
                    ec:c7:d9:21:b7:7a:89:75:9e:d4:e9:8e:31:29:a2:
                    4a:62:a1:05:0f:5a:10:5e:d2:c4:bd:6f:c8:ed:55:
                    ec:1f:ea:08:5a:7c:6e:8d:3a:4d:38:58:3e:0a:e1:
                    c0:b0:b1:69:c8:d3:53:c6:47:68:b5:84:88:f7:7a:
                    fb:da:47:28:8f:56:e3:30:5f:49:4d:33:e4:97:59:
                    87:79:85:b7:dc:ba:4f:24:3f:33:b9:b6:f3:57:6a:
                    ad:3e:dc:b1:49:54:06:14:78:cc:16:ec:ba:93:96:
                    67:fb:ac:b0:8e:93:92:5e:05:0d:88:c6:2d:60:e2:
                    fb:2c:4a:b3:b3:39:ef:38:ea:0b:02:31:36:88:1d:
                    c8:81:7c:f4:7b:40:d0:c8:59:26:2e:d7:3e:04:68:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.3.0/24
                  103.219.112.0/24
                IPv6:
                  2001:df2:3a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:6e:c7:0d:21:b6:c8:a6:01:35:d8:69:84:04:a7:3e:d4:4a:
         ab:b6:f9:da:7c:99:ab:ad:22:42:e9:de:da:8e:30:cd:07:71:
         4b:e2:9a:4f:99:8b:27:3f:23:28:a4:ea:d8:9d:37:5e:0f:23:
         b9:e8:58:05:31:58:18:77:ac:57:44:82:95:4b:9b:6c:a3:1d:
         33:1c:d4:f1:ba:75:21:2c:e9:9d:85:65:70:ba:a0:9e:51:aa:
         04:25:9c:03:59:05:39:26:c2:8e:ea:65:47:c7:8b:4d:65:28:
         a7:7d:64:c2:4f:e2:4a:ea:ff:41:2a:72:72:ed:5c:b9:d8:1f:
         39:1b:f1:3d:60:fd:e6:70:43:ed:f2:dd:31:22:bd:39:78:40:
         6d:2c:f5:e4:87:dc:d8:0a:8e:4e:ec:80:3d:6b:4a:c1:2d:89:
         f0:23:4c:cb:f1:19:6a:45:a8:c9:6b:b7:25:71:55:b9:d4:c7:
         d1:61:15:45:f9:ce:8f:25:2c:76:09:e5:de:f2:dc:81:a1:94:
         ea:6b:0f:6b:f1:ae:8f:ac:50:fa:fe:d3:79:65:53:f7:31:97:
         af:d8:06:17:f0:63:e5:3f:80:91:b6:83:51:43:67:08:fe:12:
         cc:94:b3:8a:a6:39:41:4a:62:33:93:c6:97:f8:2e:26:b0:4c:
         f4:ca:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:17 2026 by rpki-client