Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer
File:                     62531E8BF877F9190055D7D857C21ECBDCFAC237.cer (raw, json)
Hash identifier:          kFg+W4iO/gco9wxss5hFEmnDdyUbOVVu5Lh7Wzmhj2I=
Subject key identifier:   62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       0C53B18D48B88A8CEFFAAB3A9530CFB2719DDAB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 02 May 2026 23:56:51 +0000
Certificate not after:    Sun 02 May 2027 00:01:51 +0000
Subordinate resources:    IP: 103.153.60.0/23
                          IP: 2001:df4:3680::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:53:b1:8d:48:b8:8a:8c:ef:fa:ab:3a:95:30:cf:b2:71:9d:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 23:56:51 2026 GMT
            Not After : May  2 00:01:51 2027 GMT
        Subject: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6d:0e:aa:b2:00:ed:b1:ce:ee:44:8a:90:26:
                    99:f6:96:3b:0b:ed:74:3d:2a:56:b9:da:e5:e8:ef:
                    4e:f7:6e:b4:7b:ca:79:35:4c:96:6a:e9:e6:83:8c:
                    6b:16:51:cb:92:25:c9:5b:74:b4:03:06:5e:12:70:
                    39:7c:86:fe:86:c9:db:cc:72:fa:c6:4a:70:05:65:
                    6c:98:e4:6d:ce:2b:2e:5e:f0:c9:ee:6b:9f:fb:bf:
                    64:61:0e:07:5b:28:1b:33:5d:82:61:c4:6c:47:f8:
                    7d:50:0d:4d:db:bb:dd:2e:37:97:87:fe:f9:70:1c:
                    3a:92:33:9e:04:71:1b:b0:99:54:6e:e3:9d:50:29:
                    a0:cf:1c:8d:3c:87:d2:c1:47:f3:50:93:18:d8:05:
                    e9:0e:85:ea:fd:07:f8:28:99:8d:09:b2:fb:a5:8b:
                    6d:29:87:cc:e4:27:b3:fc:e1:15:eb:a7:6c:8c:0d:
                    53:62:6a:03:b3:0a:27:a9:84:a6:0c:f6:c8:1d:66:
                    40:63:5d:aa:e8:66:eb:df:4b:4a:37:66:09:7b:40:
                    3a:d3:5c:2c:c7:ce:51:13:8d:17:37:61:d3:6f:ec:
                    30:c3:2d:c5:49:49:b2:4a:5b:7e:00:8b:4e:72:80:
                    75:36:4d:26:d5:e0:37:e7:e4:d4:54:83:f9:d4:1f:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.60.0/23
                IPv6:
                  2001:df4:3680::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:9c:d0:13:b3:e2:a7:d5:3a:0c:a5:9c:ba:00:b2:52:fb:50:
         0b:e4:2d:ca:e6:b4:f2:46:93:c2:1f:be:4f:d8:ec:eb:cd:53:
         c2:f7:93:ab:35:4f:17:17:c0:f0:7d:b5:c3:bf:b1:98:ad:a3:
         65:f1:b4:91:69:56:57:48:55:aa:7d:8e:12:e2:bd:6c:e4:2b:
         a1:6b:03:20:f6:f7:0e:f7:91:11:45:52:46:03:27:f6:2d:3e:
         e0:53:d6:f4:27:cd:48:de:f6:85:e4:eb:52:22:1d:47:5e:c0:
         bb:15:d0:a0:c6:21:91:0a:3e:7b:84:e4:44:24:15:af:9c:67:
         37:11:37:e5:c6:bf:bb:c0:16:60:47:bd:bf:5b:79:42:19:ce:
         fc:91:ed:9a:67:16:9d:b9:db:89:ef:5a:d5:56:04:6e:1c:d9:
         e2:d2:96:df:69:2b:33:35:47:16:fd:ca:ad:f3:a1:f6:f9:23:
         f4:64:b4:0b:19:e6:88:16:ab:f4:11:16:95:6a:a9:5d:91:b1:
         ff:19:bb:c7:32:78:fc:c2:ef:ef:fc:03:2e:21:a8:86:ee:e1:
         e3:b6:0b:d1:84:f2:56:30:c0:bb:5d:67:c3:4d:1b:a5:d5:cc:
         fa:32:d5:e2:15:6c:32:b2:bf:fd:0c:09:b1:92:b0:b4:d8:15:
         12:69:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:47 2026 by rpki-client