Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
File:                     51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer (raw, json)
Hash identifier:          TWDfIWjqqrqt7NJluo+D+OY51nZ9QWUUljM6rAFvS6Q=
Subject key identifier:   51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       12A70F9E33A0E584BD874D6CF2DAE0DE811909DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:41:10 +0000
Certificate not after:    Sun 02 May 2027 01:46:10 +0000
Subordinate resources:    IP: 103.42.242.0/24
                          IP: 2001:df3:4b40::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a7:0f:9e:33:a0:e5:84:bd:87:4d:6c:f2:da:e0:de:81:19:09:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:41:10 2026 GMT
            Not After : May  2 01:46:10 2027 GMT
        Subject: CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:d1:e7:b8:c3:98:5a:0d:93:78:95:7c:27:
                    7b:a9:a3:9b:f7:f9:4c:12:d2:27:e9:85:73:c0:d7:
                    55:32:f4:6f:f9:b1:07:e8:97:80:e9:69:01:60:e3:
                    e0:9b:f0:8e:52:af:f9:b2:f2:af:f4:45:e4:c6:e6:
                    5f:c0:ca:3e:05:cf:c9:d2:73:30:a8:fa:8c:33:b3:
                    6d:45:b4:27:2d:01:62:92:da:e0:a3:30:16:61:26:
                    57:8c:2e:85:e6:8a:a0:a2:89:37:f6:dd:ca:88:12:
                    cd:56:52:af:07:ac:b6:22:b4:a7:b9:9c:25:2b:04:
                    5e:0d:b8:9b:70:78:d8:12:d5:ae:ad:2c:f2:7a:66:
                    4c:19:fc:11:3c:96:e0:02:c9:b3:12:39:6f:5b:25:
                    93:4a:37:6b:76:dd:e5:54:91:11:b6:7c:58:ff:88:
                    98:b7:ba:88:c6:84:ee:e9:5c:27:82:df:f4:f7:f0:
                    f3:6d:ba:bf:38:61:94:f1:02:12:75:15:38:e4:0d:
                    4a:e4:67:02:8f:e9:b3:18:18:1b:af:6c:7a:10:2e:
                    8e:36:68:45:81:69:6f:c2:d8:93:e9:8d:20:41:00:
                    69:7e:e7:93:6f:16:95:74:33:15:c9:a2:4d:70:6d:
                    4c:0e:91:64:21:be:03:c6:cb:fe:ac:44:3a:ea:c4:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.242.0/24
                IPv6:
                  2001:df3:4b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:72:75:7c:69:d2:38:cb:04:6e:d5:a5:9f:2e:c4:56:a7:
         98:49:57:b9:d9:ac:33:59:69:0a:22:1c:6e:a1:03:39:96:9c:
         de:0c:15:9c:80:f0:24:af:c7:6d:9d:7c:c6:df:59:9e:e4:db:
         37:b5:8d:33:93:ad:3b:65:e7:35:a1:9e:aa:6b:99:ee:55:87:
         44:4e:e6:b9:c8:f6:14:34:66:fb:79:97:3c:7c:40:93:67:1a:
         7d:bd:b6:7b:f4:b2:9d:52:b4:52:6f:9c:cf:53:f8:9e:dc:56:
         a0:80:53:2d:d0:dc:94:1d:d7:3c:2a:24:e8:7a:35:92:bf:be:
         7f:50:0c:a4:18:5d:a8:42:28:b9:ed:01:4a:21:04:38:90:7d:
         55:89:e8:14:19:87:c5:3b:03:f9:9c:c0:98:18:9f:17:1a:fd:
         3c:fd:53:0d:42:f1:ac:8a:df:3b:9f:32:ce:dc:d4:3d:85:67:
         08:56:07:3b:e3:d8:5f:df:17:26:b7:9b:99:e3:96:5d:22:8e:
         1d:f9:f1:9e:39:b0:a8:40:ba:fe:a5:3f:0d:3c:2e:02:6e:66:
         38:3d:f4:25:d6:3a:71:7c:2f:7e:82:cc:2c:07:e4:5b:15:bb:
         2e:b7:c3:39:1e:8a:2b:79:b7:20:6e:f6:e2:8e:10:3a:d1:aa:
         2f:34:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:42 2026 by rpki-client