Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/081E7DC86D1EA2C8BA31D5D2B00F72730B7967BC.cer
File:                     081E7DC86D1EA2C8BA31D5D2B00F72730B7967BC.cer (raw, json)
Hash identifier:          m9JPDJhYo79rdwPfpg9zfq6kcs3j8sDL9UHiVZf4bkc=
Subject key identifier:   08:1E:7D:C8:6D:1E:A2:C8:BA:31:D5:D2:B0:0F:72:73:0B:79:67:BC
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       5C4FF5BBC931130C15BD214C93E36AB253A47C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/081E7DC86D1EA2C8BA31D5D2B00F72730B7967BC.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:43:38 +0000
Certificate not after:    Sun 02 May 2027 00:48:38 +0000
Subordinate resources:    IP: 163.128.88.0/23
                          IP: 2001:df6:d740::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4f:f5:bb:c9:31:13:0c:15:bd:21:4c:93:e3:6a:b2:53:a4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:43:38 2026 GMT
            Not After : May  2 00:48:38 2027 GMT
        Subject: CN=081E7DC86D1EA2C8BA31D5D2B00F72730B7967BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:e2:26:66:b1:99:b2:ea:7b:14:b5:8c:55:
                    43:5a:4b:60:60:c9:ac:e6:be:24:d7:f2:e1:82:8c:
                    9a:a4:3b:0d:4c:0f:57:93:77:13:a3:8c:51:03:a6:
                    37:ca:b5:15:8d:0a:77:d4:56:12:87:fd:3f:1e:9c:
                    22:62:3c:27:29:40:8a:68:53:46:21:e3:aa:4e:06:
                    e1:f7:75:a1:65:37:2e:2b:88:44:12:06:23:b9:b8:
                    98:b9:b6:00:05:ec:d5:bb:4d:71:e5:b4:7f:a3:6d:
                    96:db:2e:e1:78:c5:b7:dd:54:32:b9:49:fc:1c:e5:
                    35:5d:cb:37:d1:18:ca:c4:03:9c:f0:c1:6a:53:86:
                    dd:ed:f8:27:95:fd:c1:5f:4d:7d:d8:49:87:87:fe:
                    10:bc:5c:0a:26:25:73:d8:5e:6c:ac:43:e6:85:e2:
                    5d:7c:13:60:c4:80:62:22:9e:ef:de:a0:d9:95:e9:
                    bc:51:d1:d9:ae:35:33:e3:f0:f4:64:50:b4:2d:d8:
                    12:cd:32:b8:a8:01:d5:68:ce:b1:97:74:fd:ad:65:
                    d8:08:f2:57:5e:bf:75:f6:eb:56:25:5a:2f:3e:b7:
                    64:e1:16:aa:5d:d0:bb:3f:82:ac:85:a1:85:5c:73:
                    17:6c:a8:9e:ad:e5:0d:50:ed:98:45:99:de:0e:7d:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:1E:7D:C8:6D:1E:A2:C8:BA:31:D5:D2:B0:0F:72:73:0B:79:67:BC
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5f57f21f-ac05-4750-a18f-bde5f69aa65a/0/081E7DC86D1EA2C8BA31D5D2B00F72730B7967BC.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.88.0/23
                IPv6:
                  2001:df6:d740::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:92:71:f6:ee:04:82:ed:a5:98:a2:6c:cf:62:9b:df:98:
         00:9c:74:a8:8b:84:7b:6a:51:27:52:2a:da:45:fd:7a:f3:0d:
         7e:ba:34:6c:78:92:0f:be:92:a7:c8:4e:2e:f8:12:56:59:f7:
         5d:e9:a8:f3:67:77:4f:d7:2a:28:d2:75:a6:d7:92:ac:47:40:
         8a:ab:d7:6a:ea:3a:ba:4e:b1:dc:0b:32:54:03:7e:4b:56:0b:
         1b:73:89:25:69:9f:8b:fe:31:8d:3f:77:fc:3f:8e:b3:a5:6a:
         08:30:20:bb:8f:1a:45:25:7b:90:51:87:72:7a:85:a5:12:dd:
         71:05:11:8f:de:0c:be:f8:de:a1:f5:75:52:3e:23:c7:65:b8:
         d0:64:c5:f3:64:f9:7e:20:bc:40:f3:10:05:34:28:50:11:0d:
         2e:30:e0:50:5b:9f:12:97:7a:3b:ec:69:a1:43:22:e0:40:aa:
         56:33:45:88:a1:d4:00:4c:56:38:dd:5e:3f:e4:be:41:dc:e5:
         b4:01:42:18:b4:c8:cf:93:b6:2b:d2:dc:27:bd:de:a3:69:7c:
         c1:4a:ca:4d:1e:3d:6f:a5:4c:5a:d2:d9:62:05:35:55:37:7a:
         f4:0f:0a:08:45:08:09:5f:64:23:1f:65:dd:50:df:16:6d:10:
         6d:b0:7f:1c
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgITXE/1u8kxEwwVvSFMk+NqslOkfDANBgkqhkiG9w0BAQsF
ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDQxOUE4NUNERjhB
NDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUwHhcNMjYwNTAzMDA0MzM4WhcN
MjcwNTAyMDA0ODM4WjAzMTEwLwYDVQQDEygwODFFN0RDODZEMUVBMkM4QkEzMUQ1
RDJCMDBGNzI3MzBCNzk2N0JDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0biJmaxmbLqexS1jFVDWktgYMms5r4k1/LhgoyapDsNTA9Xk3cTo4xRA6Y3
yrUVjQp31FYSh/0/HpwiYjwnKUCKaFNGIeOqTgbh93WhZTcuK4hEEgYjubiYubYA
BezVu01x5bR/o22W2y7heMW33VQyuUn8HOU1Xcs30RjKxAOc8MFqU4bd7fgnlf3B
X0192EmHh/4QvFwKJiVz2F5srEPmheJdfBNgxIBiIp7v3qDZlem8UdHZrjUz4/D0
ZFC0LdgSzTK4qAHVaM6xl3T9rWXYCPJXXr919utWJVovPrdk4RaqXdC7P4KshaGF
XHMXbKiereUNUO2YRZneDn1zGQIDAQABo4ICyjCCAsYwDwYDVR0TAQH/BAUwAwEB
/zAdBgNVHQ4EFgQUCB59yG0eosi6MdXSsA9ycwt5Z7wwHwYDVR0jBBgwFoAUQZqF
zfikMFFpRoadHEkgN9a8bp4wDgYDVR0PAQH/BAQDAgEGMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xLzQx
OUE4NUNERjhBNDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUuY3JsMH4GCCsG
AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y
ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FacUZ6
ZmlrTUZGcFJvYWRIRWtnTjlhOGJwNC5jZXIwggEsBggrBgEFBQcBCwSCAR4wggEa
MFUGCCsGAQUFBzAFhklyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWY1N2YyMWYtYWMwNS00NzUwLWExOGYtYmRlNWY2OWFhNjVhLzAvMIGBBggrBgEF
BQcwCoZ1cnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmNTdmMjFm
LWFjMDUtNDc1MC1hMThmLWJkZTVmNjlhYTY1YS8wLzA4MUU3REM4NkQxRUEyQzhC
QTMxRDVEMkIwMEY3MjczMEI3OTY3QkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3Jwa2ktcnJkcC5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAGjgFgwDwQCAAIwCQMHACABDfbXQDANBgkqhkiG9w0BAQsFAAOCAQEAPZiScfbu
BILtpZiibM9im9+YAJx0qIuEe2pRJ1Iq2kX9evMNfro0bHiSD76Sp8hOLvgSVln3
Xemo82d3T9cqKNJ1pteSrEdAiqvXauo6uk6x3AsyVAN+S1YLG3OJJWmfi/4xjT93
/D+Os6VqCDAgu48aRSV7kFGHcnqFpRLdcQURj94MvvjeofV1Uj4jx2W40GTF82T5
fiC8QPMQBTQoUBENLjDgUFufEpd6O+xpoUMi4ECqVjNFiKHUAExWON1eP+S+Qdzl
tAFCGLTIz5O2K9LcJ73eo2l8wUrKTR49b6VMWtLZYgU1VTd69A8KCEUICV9kIx9l
3VDfFm0QbbB/HA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:42 2026 by rpki-client