Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1F0051B886C24E93822687732688E26A670CE6EF.cer
File:                     1F0051B886C24E93822687732688E26A670CE6EF.cer (raw, json)
Hash identifier:          cfpbnnnzvKGtEmdt61i2ZHxrnw3R8787by+rwd29/RA=
Subject key identifier:   1F:00:51:B8:86:C2:4E:93:82:26:87:73:26:88:E2:6A:67:0C:E6:EF
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       67390D2220E8B6CF1F0132056292136E2B45C800
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/1F0051B886C24E93822687732688E26A670CE6EF.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:20:18 +0000
Certificate not after:    Sun 02 May 2027 02:25:18 +0000
Subordinate resources:    IP: 103.159.198.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:39:0d:22:20:e8:b6:cf:1f:01:32:05:62:92:13:6e:2b:45:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:20:18 2026 GMT
            Not After : May  2 02:25:18 2027 GMT
        Subject: CN=1F0051B886C24E93822687732688E26A670CE6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c7:7a:82:f2:ae:ba:d2:de:86:3d:73:e8:ad:
                    4e:10:35:dd:d4:5e:e0:d3:26:5e:94:d3:f7:e1:70:
                    bf:bc:f0:c1:a9:30:84:3d:bd:d9:42:45:44:24:27:
                    0e:9e:5f:a0:89:f1:fb:71:4e:23:59:ba:14:66:5a:
                    6f:cb:73:8c:4c:b9:ec:61:12:d8:87:c9:55:0a:75:
                    45:56:c2:8b:0e:35:64:32:a0:4f:09:ec:5b:3b:13:
                    ec:a0:11:4a:fc:51:84:93:f7:bf:2e:98:30:52:0a:
                    77:55:2a:c5:d1:9f:17:88:86:b7:7d:fe:5a:80:5c:
                    aa:8c:cb:c4:4d:04:58:c4:53:4d:f0:25:13:b6:54:
                    e4:1d:29:b4:3b:b4:40:4c:a3:17:51:be:b9:16:6e:
                    ad:34:e9:60:38:46:e9:95:58:33:66:99:2e:7b:11:
                    05:d1:79:1c:5d:e6:9a:ad:2d:4c:ff:09:14:b6:1e:
                    80:07:89:b7:54:d4:1f:19:08:b3:ba:af:5a:60:39:
                    52:19:a7:67:30:b3:63:74:78:ab:99:e0:38:68:59:
                    4a:5e:59:e1:1b:e2:3d:f9:3e:18:cd:ae:db:7b:15:
                    4b:cc:5a:93:73:c0:8f:73:b0:38:04:5f:a6:f1:8c:
                    da:64:a1:e5:00:14:af:de:d1:ef:78:6a:a6:81:0b:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:00:51:B8:86:C2:4E:93:82:26:87:73:26:88:E2:6A:67:0C:E6:EF
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/1F0051B886C24E93822687732688E26A670CE6EF.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:41:16:42:e9:61:29:5f:6d:78:f1:42:d8:cb:f1:1d:bd:
         86:23:e1:da:be:41:ea:58:11:eb:2d:c5:27:2b:fd:81:6f:b3:
         2e:36:71:45:38:89:69:7d:37:3a:a9:68:1d:b4:0d:2f:b8:b3:
         f3:23:70:f3:eb:cc:c9:9d:1b:cf:22:5e:17:38:c8:b6:a1:28:
         86:68:49:f3:22:55:db:47:4c:c1:2f:fd:06:3f:f3:a0:5b:c3:
         08:3c:b2:79:33:9e:fc:a6:82:60:00:ff:36:1f:74:08:dd:e2:
         a1:25:8e:f3:3a:c1:c9:fb:fa:cb:7d:1d:c4:67:ee:08:ad:9b:
         ad:13:33:e3:d9:c9:58:df:d2:0e:96:3e:b2:af:14:ac:8c:be:
         ce:e4:a8:a8:43:59:9e:db:41:05:a9:cd:72:e6:06:d9:94:62:
         eb:49:8e:8d:47:49:39:2f:a0:5a:ce:21:f9:9e:e8:3b:df:7b:
         2e:91:2a:8d:c1:46:3d:bf:3d:65:44:91:0a:6e:81:87:19:05:
         6c:6e:b2:a4:5c:a3:7f:d4:6c:46:ed:57:fb:2b:57:9c:c0:87:
         7d:9d:67:39:00:eb:31:a4:42:c0:73:12:87:a1:6c:b2:7b:db:
         91:70:00:ae:7e:9c:59:9b:55:e0:86:d8:36:7b:fb:e6:5f:14:
         a3:d3:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:53 2026 by rpki-client