Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer
File:                     45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer (raw, json)
Hash identifier:          Qo5J51TXTn3/lUCGB3R5RPZ2oojEjvJ3mS3ViTDv0j0=
Subject key identifier:   45:AB:46:F2:FD:63:1F:73:2A:BD:2C:A6:40:2F:2C:D6:70:4A:93:0A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       182E4321C2797DB682EA174051CBD2C9E8C850C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:42:24 +0000
Certificate not after:    Sun 02 May 2027 02:47:24 +0000
Subordinate resources:    IP: 103.117.56.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:43:21:c2:79:7d:b6:82:ea:17:40:51:cb:d2:c9:e8:c8:50:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:42:24 2026 GMT
            Not After : May  2 02:47:24 2027 GMT
        Subject: CN=45AB46F2FD631F732ABD2CA6402F2CD6704A930A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e3:27:0a:ce:53:ab:17:b4:ea:f0:d1:ab:b6:
                    6f:3f:42:8d:5a:6a:f6:dd:b9:fb:e7:74:6e:64:c4:
                    74:b2:a9:5e:41:f9:d9:6b:55:78:d3:12:5d:07:df:
                    c5:6a:a2:21:bc:84:88:83:fe:b8:8d:47:47:1d:be:
                    51:51:4f:7c:85:f8:2f:75:7b:d9:69:13:3a:dd:a8:
                    9d:59:06:e9:81:54:97:a1:d1:f2:69:96:25:03:76:
                    1c:87:63:6e:db:ad:ce:ee:df:87:5c:85:f4:6c:6f:
                    1c:4a:61:5e:48:06:a6:56:ee:52:c1:32:ec:d9:3c:
                    b4:24:9b:06:de:69:d7:36:82:83:b6:ff:fa:0a:f5:
                    0f:d9:9f:61:fb:c1:b3:97:3d:75:e3:d8:a0:e2:32:
                    6b:b9:ce:54:5e:ea:bc:e6:30:7f:c3:06:65:ca:35:
                    d6:9b:57:a3:4d:77:c9:49:4a:41:3a:be:bc:84:87:
                    2d:74:4f:4a:4e:37:c5:61:87:af:b8:4c:5e:8d:b4:
                    ff:31:9b:2d:c0:e4:8f:6f:aa:50:2f:84:d8:06:56:
                    6c:c7:74:59:ec:4f:af:93:d0:a5:32:28:2e:4c:94:
                    22:8b:1d:2d:28:71:90:06:fe:ff:57:6a:fc:b5:e9:
                    7b:66:52:14:70:37:b6:da:3b:6c:ff:86:25:ff:89:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:AB:46:F2:FD:63:1F:73:2A:BD:2C:A6:40:2F:2C:D6:70:4A:93:0A
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:77:c4:ef:31:78:d5:23:bc:e9:a0:66:ab:38:d0:ac:e0:36:
         20:4d:03:a6:c5:87:f4:9e:bb:6a:45:16:df:5b:ab:4e:5f:39:
         e1:ff:00:04:ec:80:fa:18:08:40:ec:6c:3b:b0:96:12:1e:6d:
         94:8d:26:a1:6a:94:b7:ac:c1:5c:c7:a2:f0:10:f2:cf:8e:fa:
         db:e8:73:62:70:2d:73:71:fa:76:6b:1f:a2:e6:83:67:06:bf:
         78:c2:92:09:31:af:5c:56:50:54:fe:3d:9b:4e:c4:1c:7e:4a:
         ce:be:43:9f:b9:22:00:b3:85:6d:fb:18:14:9e:1d:61:00:e6:
         22:8f:60:f4:41:66:ba:34:1a:78:15:48:e8:a3:1e:a8:6e:14:
         be:68:d3:d9:79:64:e6:27:b5:ff:a6:92:9a:ca:be:67:6d:0b:
         f6:33:ee:54:c4:bf:9e:ec:48:20:e5:46:cc:b7:06:0e:25:b0:
         0f:99:28:fe:8b:d3:79:8b:3a:84:97:d3:0b:d5:97:f0:d7:07:
         94:11:4a:a8:71:c9:33:07:b7:3d:2c:26:17:e2:69:ec:ea:f9:
         1e:27:b0:27:d3:47:97:53:9f:0c:26:3c:72:5b:0f:15:f2:f0:
         90:f8:48:92:92:7f:fc:9d:50:83:8c:1e:48:fe:e5:76:ff:51:
         2f:a1:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:36 2026 by rpki-client