Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer
File:                     5675AA245CEF919DAFAE165474D97FEABD97EF27.cer (raw, json)
Hash identifier:          pa4bO7GaATDpiKJjRoEWhwyJnE79xmsplu5yRsA9CTI=
Subject key identifier:   56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       57395F7A80547C7A006DE113782F21E6789A4B2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:00:46 +0000
Certificate not after:    Sun 02 May 2027 02:05:46 +0000
Subordinate resources:    IP: 103.18.232.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:39:5f:7a:80:54:7c:7a:00:6d:e1:13:78:2f:21:e6:78:9a:4b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:00:46 2026 GMT
            Not After : May  2 02:05:46 2027 GMT
        Subject: CN=5675AA245CEF919DAFAE165474D97FEABD97EF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:82:2f:d7:d1:3e:bc:d0:98:d0:cf:fc:a1:
                    7e:58:83:2c:ae:9e:7f:ec:84:36:20:e4:78:4f:c3:
                    9b:c1:75:a9:6a:60:88:8f:14:ec:2a:2b:f0:43:b6:
                    fd:59:42:44:e9:71:9d:74:06:45:77:06:5f:5d:b3:
                    d8:58:b3:a7:90:63:5f:c9:e5:98:8f:a5:b7:6a:71:
                    bb:fe:a8:50:46:ce:b0:da:45:6a:0b:c1:e5:2a:47:
                    b4:12:d9:f1:84:5d:08:f0:e7:2f:b9:eb:b4:87:8a:
                    14:b3:63:3b:18:8c:72:31:6e:70:06:92:84:86:46:
                    d0:06:b1:1a:b7:ef:8e:53:16:a0:f5:f8:ac:bc:60:
                    fd:77:ba:db:43:17:c4:d1:ce:18:57:57:5c:e1:50:
                    35:21:b9:69:dc:31:15:b4:d5:1b:24:c8:4e:db:9f:
                    9b:31:de:7d:4f:59:7b:99:69:d6:8e:d9:04:80:6b:
                    bb:df:ef:c3:76:1c:13:57:5d:93:52:a6:f2:54:6e:
                    64:81:4a:26:17:d7:bd:c3:32:78:1f:dd:2b:92:8a:
                    a5:63:36:e3:0d:56:1c:b4:d5:d5:32:2e:96:f3:06:
                    02:86:26:52:e9:24:c8:c1:43:19:23:ba:a1:59:8e:
                    71:23:e8:54:64:b2:39:5a:70:5d:a1:2d:18:64:9c:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:3e:10:25:a0:db:8f:82:c6:d9:c2:72:03:f4:22:81:2a:74:
         eb:94:76:16:30:ef:03:f0:c2:0f:98:21:fc:f0:b8:2d:ff:ac:
         6f:f9:c2:dc:77:40:57:06:4d:43:a0:47:fb:4f:40:7b:15:81:
         1a:d4:7f:d4:22:3a:8f:e5:92:2d:a8:d4:df:c3:7d:0b:5a:97:
         46:34:e1:07:2d:0d:2a:55:ce:41:04:0c:dc:48:d6:30:bf:37:
         a7:e0:30:69:b9:05:df:92:2a:74:6a:16:0b:b7:b8:fa:90:d9:
         df:41:23:eb:bf:88:0c:c1:b0:9b:d4:fc:63:4f:c3:e6:3b:ab:
         cf:4a:a3:8b:01:da:fd:0a:8a:cb:26:fb:8f:2b:a7:21:ac:6e:
         69:ba:7b:79:87:d5:29:b2:64:1e:d4:3b:9a:8e:20:25:62:b6:
         90:05:7a:22:4d:9c:3c:58:d5:b6:07:17:18:7b:a4:13:4b:fd:
         a1:08:d7:e1:cb:26:66:fa:4e:db:80:59:50:d9:d4:01:f4:d5:
         d1:b9:48:42:60:be:14:30:b2:07:20:65:a2:9a:25:7f:3c:b2:
         84:99:92:92:97:52:67:25:4d:fd:e8:1e:dd:5d:81:71:38:7b:
         ab:ad:20:1a:a1:8b:b9:f3:49:b8:54:55:aa:65:ff:44:2d:73:
         ed:6f:13:7f
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUVzlfeoBUfHoAbeETeC8h5niaSyowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDA0NloX
DTI3MDUwMjAyMDU0NlowMzExMC8GA1UEAxMoNTY3NUFBMjQ1Q0VGOTE5REFGQUUx
NjU0NzREOTdGRUFCRDk3RUYyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4Ggi/X0T680JjQz/yhfliDLK6ef+yENiDkeE/Dm8F1qWpgiI8U7Cor8EO2
/VlCROlxnXQGRXcGX12z2Fizp5BjX8nlmI+lt2pxu/6oUEbOsNpFagvB5SpHtBLZ
8YRdCPDnL7nrtIeKFLNjOxiMcjFucAaShIZG0AaxGrfvjlMWoPX4rLxg/Xe620MX
xNHOGFdXXOFQNSG5adwxFbTVGyTITtufmzHefU9Ze5lp1o7ZBIBru9/vw3YcE1dd
k1Km8lRuZIFKJhfXvcMyeB/dK5KKpWM24w1WHLTV1TIulvMGAoYmUukkyMFDGSO6
oVmOcSPoVGSyOVpwXaEtGGSc8KECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFZ1qiRc75Gdr64WVHTZf+q9l+8nMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2Q3MjI0MTkxLWJmZjAtNDgxNS1iZTBlLWEyYWE4ZDM4ZDVhMC8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNzIyNDE5
MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC81Njc1QUEyNDVDRUY5MTlE
QUZBRTE2NTQ3NEQ5N0ZFQUJEOTdFRjI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZxLoMA0GCSqGSIb3DQEBCwUAA4IBAQB5PhAloNuPgsbZwnID9CKBKnTrlHYW
MO8D8MIPmCH88Lgt/6xv+cLcd0BXBk1DoEf7T0B7FYEa1H/UIjqP5ZItqNTfw30L
WpdGNOEHLQ0qVc5BBAzcSNYwvzen4DBpuQXfkip0ahYLt7j6kNnfQSPrv4gMwbCb
1PxjT8PmO6vPSqOLAdr9CorLJvuPK6chrG5punt5h9UpsmQe1DuajiAlYraQBXoi
TZw8WNW2BxcYe6QTS/2hCNfhyyZm+k7bgFlQ2dQB9NXRuUhCYL4UMLIHIGWimiV/
PLKEmZKSl1JnJU396B7dXYFxOHurrSAaoYu580m4VFWqZf9ELXPtbxN/
-----END CERTIFICATE-----
Generated at Wed May 13 01:07:01 2026 by rpki-client