Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0E274BF6680396133EAD61666AD7FF960EAD50D2.cer
File:                     0E274BF6680396133EAD61666AD7FF960EAD50D2.cer (raw, json)
Hash identifier:          CDHwNiiRRuDlZvu3ynWtgwm82PjUkturyKGsyDTqn0w=
Subject key identifier:   0E:27:4B:F6:68:03:96:13:3E:AD:61:66:6A:D7:FF:96:0E:AD:50:D2
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       6A02B5853FD6CB01A6581ED374BFDDEB4C803C5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:19:54 +0000
Certificate not after:    Sun 02 May 2027 02:24:54 +0000
Subordinate resources:    IP: 103.187.90.0/24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:02:b5:85:3f:d6:cb:01:a6:58:1e:d3:74:bf:dd:eb:4c:80:3c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:19:54 2026 GMT
            Not After : May  2 02:24:54 2027 GMT
        Subject: CN=0E274BF6680396133EAD61666AD7FF960EAD50D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:09:6b:93:3a:30:5d:35:ee:89:04:fe:a8:
                    84:86:ec:07:1f:98:8f:fb:8f:62:8c:cb:7a:28:c4:
                    fa:61:61:2d:56:b6:74:22:b7:be:d0:0c:d3:d6:16:
                    21:ae:15:f3:8c:33:60:ae:b2:1d:d9:ec:91:72:96:
                    ef:6e:98:30:b9:5a:ce:37:ab:15:d6:b0:a5:e4:3b:
                    af:f3:6a:f8:2e:0d:2d:5c:af:3e:96:7d:28:ac:64:
                    bc:ad:87:9b:9f:b3:71:a8:ed:04:75:26:64:1e:96:
                    03:64:5b:b7:2a:51:0b:6c:36:0f:27:da:ba:b9:89:
                    8a:9a:6a:8f:30:7e:f8:66:3c:13:52:00:ee:0a:a7:
                    9b:02:e0:ad:90:b9:dc:c8:30:df:45:c4:de:4a:a9:
                    1e:ba:94:17:de:4d:6b:05:18:ab:b7:db:67:f3:51:
                    c5:4f:60:96:b2:88:b9:eb:0f:bd:34:29:05:c5:e5:
                    3b:c9:28:e1:b3:b5:04:04:c3:4d:c2:4a:de:ef:e5:
                    c1:77:5a:39:ad:15:a4:8c:1d:06:29:f2:f3:28:6c:
                    f9:11:22:d3:45:4e:e7:6e:ca:a5:ad:11:ea:ad:1e:
                    73:50:6a:7e:4b:63:8a:ea:f2:48:a6:5c:df:93:62:
                    a9:f8:7a:12:b4:a1:f7:d8:b0:04:3e:da:5b:32:a3:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:27:4B:F6:68:03:96:13:3E:AD:61:66:6A:D7:FF:96:0E:AD:50:D2
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:37:5e:4d:85:05:ad:7c:fd:fd:19:51:1a:c0:fc:49:b4:f5:
         57:e3:6c:67:dd:80:58:3c:7b:cc:37:dd:86:04:28:a1:f0:8b:
         61:a5:18:75:7c:af:dd:6e:64:7d:b6:08:22:52:07:0c:62:a6:
         45:42:c9:cd:d6:27:84:59:7e:5b:4b:43:63:04:ce:a2:94:30:
         20:cc:12:3e:f4:42:3e:4e:11:44:e9:dd:7b:69:35:73:d2:de:
         f5:cb:36:d0:5f:10:2d:89:0c:13:8a:78:6d:e6:53:25:f2:65:
         8f:c6:2d:cf:aa:7d:8f:1a:d4:62:de:a7:4e:d6:e9:ca:30:7d:
         dd:2b:2f:b0:f7:ed:55:f3:ee:b2:ae:84:07:cc:dc:0f:da:ad:
         65:ea:26:5e:78:46:05:b1:10:44:2c:4e:bf:5d:86:38:a8:77:
         ae:52:d4:be:13:e0:ed:2a:84:6a:55:8d:f0:9e:d6:e7:88:40:
         79:1b:19:23:ab:4b:3d:8e:10:77:9d:42:37:28:b4:5c:0f:39:
         4a:8a:0b:4b:a8:57:44:73:4f:ce:16:e5:98:5c:ae:0f:4e:89:
         8e:bc:92:83:07:2f:2e:5c:74:8c:52:cf:07:e6:8e:d2:fe:b1:
         c1:bd:48:4a:38:f5:67:86:c9:7c:a0:c2:26:e4:0e:59:84:12:
         2f:83:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:44 2026 by rpki-client