Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
File:                     330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer (raw, json)
Hash identifier:          65PncPRX+nI8nggGi8dVr8OK6j9zc+6jILXfbKwy+5w=
Subject key identifier:   33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       590C27AB1090337AE22FA509676002EC14E7E17C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:42:09 +0000
Certificate not after:    Sun 02 May 2027 01:47:09 +0000
Subordinate resources:    IP: 103.155.250.0/23
                          IP: 2001:df4:df80::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0c:27:ab:10:90:33:7a:e2:2f:a5:09:67:60:02:ec:14:e7:e1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:42:09 2026 GMT
            Not After : May  2 01:47:09 2027 GMT
        Subject: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:db:e0:b7:9d:74:a7:99:a3:b4:6f:dd:76:
                    90:26:7b:d5:13:fc:41:74:5d:96:5b:9f:2e:cf:3b:
                    14:ff:23:d1:6f:8e:be:41:6e:38:cf:06:17:c2:8c:
                    e0:a4:39:29:5b:a6:18:cd:18:e5:f9:d0:c6:15:06:
                    6d:ed:c8:3f:5b:a2:0f:60:40:9f:93:5a:34:71:7c:
                    9b:1a:7f:23:d7:1d:fb:9e:17:49:e2:f4:4a:26:c8:
                    6d:59:43:ee:3e:f4:28:3c:4c:c8:6b:99:27:48:85:
                    31:c1:81:60:f5:1e:95:ea:04:5a:c9:6e:43:88:27:
                    21:23:53:52:86:9f:48:9f:3b:38:87:5c:3d:35:14:
                    62:4a:25:16:e2:ff:cc:fc:8a:80:53:67:2f:b8:d8:
                    fa:06:e6:a6:e2:e2:91:1b:f2:00:08:f2:28:c4:fe:
                    52:52:53:ee:50:e0:07:61:8d:ce:75:82:9e:78:dd:
                    ad:af:02:26:40:14:01:6d:7d:00:b3:7a:04:8b:18:
                    c8:e3:09:b5:80:34:89:25:c3:18:c6:db:2d:ca:97:
                    72:85:fd:10:7d:02:08:2b:b9:59:2e:2e:3a:06:7a:
                    e0:c8:d0:7c:a2:90:74:0e:1f:bb:90:4d:b2:1c:9b:
                    e0:e6:92:58:37:04:6b:c1:49:01:33:2c:1f:7d:40:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.250.0/23
                IPv6:
                  2001:df4:df80::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:64:bc:67:0b:02:6f:64:5d:26:72:85:2f:44:4e:9a:13:4b:
         29:65:38:e9:28:ff:41:eb:01:8a:b5:18:b0:e2:a2:88:55:fb:
         53:70:34:57:e1:d4:9d:75:d9:de:9c:58:da:5d:04:c8:b6:5c:
         f2:66:bb:1b:a5:f7:8d:d8:a1:67:6b:80:bd:3f:b9:00:91:48:
         33:41:22:5c:4d:32:ad:fa:05:18:31:d9:93:cd:9f:b8:b2:02:
         16:b7:e2:86:3d:ab:ad:a0:71:8c:15:be:72:76:a4:33:10:73:
         77:55:aa:49:33:9e:2a:6d:75:4e:94:30:7e:97:ad:7a:f9:d7:
         1a:25:fc:78:20:09:4a:0a:7c:a7:24:32:83:a6:97:fb:2a:4b:
         b6:a8:99:95:b9:6d:2a:6e:71:7c:49:e8:50:61:6c:c1:ce:f5:
         37:9c:11:37:0f:18:49:f0:35:70:ad:88:60:3e:4e:d0:9c:50:
         9b:89:9b:1b:25:21:0f:a5:83:a6:f2:b7:75:38:02:72:e0:76:
         e1:3f:46:ab:73:34:1e:88:ed:a4:33:eb:53:f8:85:75:92:53:
         36:45:a6:e5:07:80:7a:69:99:94:ef:fa:7f:e7:c7:c0:b7:88:
         f6:c7:45:4a:f0:30:28:a0:18:b5:fc:20:67:3b:f5:3e:91:40:
         bd:58:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:06 2026 by rpki-client