Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
File:                     2263B33A6F6C2144A5A070C3383941C2821ED962.cer (raw, json)
Hash identifier:          C1GkjQKpqsFpcCrgP6fRZ65FBDdrJXY/VMRqWvtUtTc=
Subject key identifier:   22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       7D2BBE687ABB2B2791A9B4F6552B26E5A8856832
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:03:06 +0000
Certificate not after:    Sun 02 May 2027 02:08:06 +0000
Subordinate resources:    IP: 103.96.146.0/23
                          IP: 2001:df2:e9c0::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2b:be:68:7a:bb:2b:27:91:a9:b4:f6:55:2b:26:e5:a8:85:68:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:03:06 2026 GMT
            Not After : May  2 02:08:06 2027 GMT
        Subject: CN=2263B33A6F6C2144A5A070C3383941C2821ED962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:ca:3a:d6:a6:9c:d5:a3:40:bf:8b:b0:f0:
                    c4:69:00:69:d5:cc:16:c0:76:c0:f6:22:50:04:84:
                    90:b8:10:35:56:b5:0e:25:fe:82:c5:12:a5:e8:cd:
                    c8:de:1e:b4:e1:c1:52:cd:b8:ac:e4:f8:90:68:50:
                    01:1b:f2:65:79:de:1c:f0:16:c5:6c:95:31:78:9a:
                    dd:9c:ba:d5:bc:a6:53:45:cb:d0:ee:11:cd:74:64:
                    22:ce:a1:6d:f4:de:f3:a2:c1:a3:be:15:4f:d6:2d:
                    d0:9c:5e:ee:72:8f:22:94:29:cc:3b:34:d3:80:ad:
                    f5:2e:38:4b:86:ad:53:64:7f:f9:d2:37:a8:ab:70:
                    7e:39:56:48:b4:bf:ec:e4:85:11:fb:66:4b:87:f3:
                    8e:74:83:39:3f:fa:e0:aa:7a:db:bc:24:73:34:15:
                    9a:3e:28:6e:8e:d6:b6:1c:2b:12:ca:01:08:32:78:
                    02:b4:db:99:49:f8:5d:87:d8:ee:bc:76:67:91:f0:
                    b1:4f:1b:d8:b9:60:1b:2e:d7:c3:56:69:fb:62:26:
                    76:39:0b:a2:b0:4f:3a:92:e8:fe:5d:37:97:c2:a4:
                    8c:e2:23:a7:ef:60:df:4a:5c:57:1b:9d:07:0a:fc:
                    bb:fc:e1:b5:bd:56:e0:cc:85:71:41:95:9a:fd:c5:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.146.0/23
                IPv6:
                  2001:df2:e9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:4b:7c:18:07:1b:0f:87:41:ef:fc:65:a4:1a:05:3d:4e:5b:
         c2:41:fa:2a:a7:dd:e3:ed:3d:5e:a3:26:37:5e:8b:4f:08:d3:
         7d:09:0d:28:19:bc:02:62:a3:20:21:f3:02:d4:4b:c9:bf:68:
         86:5b:00:f9:b8:bc:7f:35:05:8e:20:6d:11:00:fd:8c:36:d5:
         25:88:b7:ed:11:1e:cd:58:c3:f7:1f:f8:59:df:5d:43:fa:31:
         8c:3b:86:e1:3e:e1:fb:e6:37:67:21:ed:56:e8:4b:b1:06:73:
         1b:a2:64:fb:51:18:bd:0d:f1:aa:68:75:78:b5:20:d3:42:10:
         37:be:98:a4:7b:4d:cc:70:cc:ce:6d:d3:83:a7:0d:e2:8c:35:
         bd:b8:4e:10:61:19:81:75:e8:36:a9:72:d1:93:b6:32:e6:da:
         ef:ba:32:49:29:a3:16:3b:66:6e:86:b5:31:6d:b5:ad:9e:fc:
         99:7b:8c:9c:89:bc:bd:77:b0:6a:8a:d0:4c:dd:b3:0b:b9:c0:
         81:ec:90:0b:1b:9b:b1:fb:4d:75:0e:df:12:b8:a9:1d:9a:b0:
         7c:fd:1c:79:f5:52:09:c7:c5:4b:9b:ce:1e:6d:03:c1:ae:64:
         f2:05:7a:96:9f:f5:3f:cd:f0:6c:ea:95:c6:fb:c8:8b:33:82:
         1d:65:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:39 2026 by rpki-client