Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
File:                     1F79347E34F3842F873687AE47DBBF7766D07A56.cer (raw, json)
Hash identifier:          72CXWgCy7thg3QcpwdF1m024SmUcaFsZ+NwoWwN2rE0=
Subject key identifier:   1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       26BCF74CA5496EC26C5687ECFB06C920A456940D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:56:34 +0000
Certificate not after:    Sun 02 May 2027 01:01:34 +0000
Subordinate resources:    IP: 103.110.120.0/22
                          IP: 2402:8ac0::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:f7:4c:a5:49:6e:c2:6c:56:87:ec:fb:06:c9:20:a4:56:94:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:56:34 2026 GMT
            Not After : May  2 01:01:34 2027 GMT
        Subject: CN=1F79347E34F3842F873687AE47DBBF7766D07A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:5e:9d:41:b0:75:8f:fb:47:27:74:f5:fd:
                    dc:79:dc:d4:4f:a1:04:f4:dc:06:4e:6f:64:6c:da:
                    ac:57:cc:e9:83:4b:84:f1:fd:01:7c:b0:b4:e4:43:
                    56:af:df:06:2e:54:e8:3e:97:bb:e1:cd:08:4c:d9:
                    53:3f:3f:3c:4a:d1:9a:f3:6a:2f:91:3c:c2:31:02:
                    e4:11:65:2b:8b:2b:6e:93:77:34:6e:6e:0c:3e:9b:
                    1d:fa:f8:90:df:fe:4b:20:e0:ac:7e:d5:88:c4:93:
                    15:08:b0:dc:b6:12:c0:03:ac:19:55:71:6c:e0:8b:
                    54:44:23:c8:c7:20:5c:01:20:35:5a:b2:97:e3:6d:
                    60:0b:a4:e8:bf:8b:0f:ad:b2:89:2d:04:5f:f3:d7:
                    77:43:36:9f:15:db:47:92:82:7f:a0:14:c7:6b:15:
                    04:50:29:a1:12:df:ad:3a:b1:68:67:fb:4b:c4:98:
                    f2:64:58:33:ba:a6:a1:e3:12:69:4c:fd:5d:f2:71:
                    15:fa:6a:84:b4:6d:6c:82:47:6c:96:90:2e:72:53:
                    0f:ad:81:17:60:4d:55:2c:7e:27:8c:f0:20:23:b8:
                    60:7b:0b:d1:c7:13:5a:62:f3:19:5e:37:90:84:c0:
                    54:db:40:b2:2a:37:a7:84:6d:31:b6:41:a7:6b:15:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.120.0/22
                IPv6:
                  2402:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:71:f9:06:15:8a:2c:62:94:d7:7d:04:81:c1:02:c6:6e:f4:
         4c:13:b0:18:56:5e:3b:69:ca:3d:91:5f:34:33:cb:34:f5:d3:
         db:22:76:31:35:11:51:a7:45:68:44:4c:37:2d:c8:e5:0e:10:
         4c:e2:07:9a:73:fc:9b:f1:28:42:03:cd:b5:fe:ce:49:21:d2:
         f9:4b:04:f5:44:4c:ad:5a:18:f3:14:18:ea:2b:0d:5a:51:c5:
         ff:58:7d:4c:3a:48:57:3d:40:b5:a9:f7:3b:35:fe:37:5d:ca:
         37:3e:9b:9b:e0:87:f4:d1:39:16:24:42:7c:70:5c:50:3d:75:
         79:26:fc:fe:e8:b2:38:7e:52:9d:a8:2c:94:4e:1f:eb:7c:82:
         7b:63:f3:2d:c1:a1:3f:b3:9a:d1:64:93:b9:f0:2c:f5:c1:bc:
         a2:ea:5c:ed:3b:8d:3b:3d:e8:3e:7d:40:fa:ce:44:ff:bb:71:
         31:7b:76:a0:ac:51:d5:27:a7:60:08:bf:cd:ee:74:4c:fd:d8:
         a1:cf:5a:44:5d:1b:d9:02:a4:02:dd:20:67:e9:25:22:46:dc:
         26:c5:c6:fa:40:9e:5f:3f:0a:b3:cc:af:d0:a3:32:72:2d:88:
         7b:bd:62:13:5f:6c:42:6d:9d:4f:7a:0e:5c:ac:71:22:c2:aa:
         6d:18:9c:38
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIUJrz3TKVJbsJsVofs+wbJIKRWlA0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTYzNFoX
DTI3MDUwMjAxMDEzNFowMzExMC8GA1UEAxMoMUY3OTM0N0UzNEYzODQyRjg3MzY4
N0FFNDdEQkJGNzc2NkQwN0E1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALOVXp1BsHWP+0cndPX93Hnc1E+hBPTcBk5vZGzarFfM6YNLhPH9AXywtORD
Vq/fBi5U6D6Xu+HNCEzZUz8/PErRmvNqL5E8wjEC5BFlK4srbpN3NG5uDD6bHfr4
kN/+SyDgrH7ViMSTFQiw3LYSwAOsGVVxbOCLVEQjyMcgXAEgNVqyl+NtYAuk6L+L
D62yiS0EX/PXd0M2nxXbR5KCf6AUx2sVBFApoRLfrTqxaGf7S8SY8mRYM7qmoeMS
aUz9XfJxFfpqhLRtbIJHbJaQLnJTD62BF2BNVSx+J4zwICO4YHsL0ccTWmLzGV43
kITAVNtAsio3p4RtMbZBp2sVsM8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB95NH4084QvhzaHrkfbv3dm0HpWMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
Lzc0MDg4M2YzLTQ1N2EtNGMxNC05NTc3LTY3ZTE1MGEyYjEyYS8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NDA4ODNm
My00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC8xRjc5MzQ3RTM0RjM4NDJG
ODczNjg3QUU0N0RCQkY3NzY2RDA3QTU2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG
AwQCZ254MA0EAgACMAcDBQAkAorAMA0GCSqGSIb3DQEBCwUAA4IBAQAccfkGFYos
YpTXfQSBwQLGbvRME7AYVl47aco9kV80M8s09dPbInYxNRFRp0VoREw3LcjlDhBM
4geac/yb8ShCA821/s5JIdL5SwT1REytWhjzFBjqKw1aUcX/WH1MOkhXPUC1qfc7
Nf43Xco3Ppub4If00TkWJEJ8cFxQPXV5Jvz+6LI4flKdqCyUTh/rfIJ7Y/MtwaE/
s5rRZJO58Cz1wbyi6lztO407Peg+fUD6zkT/u3Exe3agrFHVJ6dgCL/N7nRM/dih
z1pEXRvZAqQC3SBn6SUiRtwmxcb6QJ5fPwqzzK/QozJyLYh7vWITX2xCbZ1Peg5c
rHEiwqptGJw4
-----END CERTIFICATE-----
Generated at Tue May 12 22:04:11 2026 by rpki-client