Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
File:                     6259AAB8ACC12928C43A617CC9988F166C9AF024.cer (raw, json)
Hash identifier:          A0x5/KH6IzMUu9O+9fxmuy773tUgQaHY+LZxJ5Cmx3U=
Subject key identifier:   62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       37947B09D2EDF965306AB11221517F17BB8EBA29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:20:59 +0000
Certificate not after:    Sun 02 May 2027 01:25:59 +0000
Subordinate resources:    IP: 103.126.116.0/22
                          IP: 2404:ac0::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:7b:09:d2:ed:f9:65:30:6a:b1:12:21:51:7f:17:bb:8e:ba:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:20:59 2026 GMT
            Not After : May  2 01:25:59 2027 GMT
        Subject: CN=6259AAB8ACC12928C43A617CC9988F166C9AF024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:d4:5e:09:05:4c:b4:98:0b:b8:0e:ff:d7:
                    cd:05:91:e1:33:b5:7a:7e:cf:b7:83:8a:64:05:2b:
                    eb:29:b1:db:75:33:3b:e5:48:bc:b8:59:f8:58:86:
                    cf:8d:b3:c5:37:23:87:ee:ee:3e:ce:6d:ce:6b:11:
                    cb:e5:f2:88:d9:52:3e:c3:3d:1e:45:5a:63:36:8f:
                    e4:7d:ec:a8:c3:71:01:b4:2a:ff:80:42:6c:55:d0:
                    8d:24:0e:d0:78:84:89:a3:17:1e:88:59:24:e3:85:
                    1b:47:a7:f9:81:5e:74:26:c5:08:1f:54:49:73:69:
                    ef:3d:d0:fe:b0:01:b5:3c:06:2e:f4:9b:37:e9:8d:
                    9c:25:31:07:aa:56:0e:20:ae:5b:b8:98:bd:49:90:
                    a5:4a:f9:2f:de:dc:fd:c3:c5:bc:11:27:f6:b7:de:
                    14:58:65:a5:bc:3a:e4:19:cc:92:5f:6e:44:8e:dd:
                    0e:ed:41:16:80:39:fb:f0:f1:7d:4e:22:1f:b8:96:
                    87:c3:79:e6:28:2d:63:eb:70:86:57:bd:c4:64:b0:
                    76:54:7a:77:ba:8a:d0:d1:83:ba:62:cd:1b:7b:df:
                    c8:8c:fc:9d:fe:bf:8e:b5:93:e4:e2:d3:9b:43:b4:
                    18:f9:d7:e0:51:0f:f4:4a:a2:5b:b2:61:89:3f:fd:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.116.0/22
                IPv6:
                  2404:ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:e8:6f:d8:d5:fb:53:0c:5b:75:54:34:60:11:ca:a2:f3:3a:
         4e:bc:63:92:9a:e8:12:55:08:72:99:34:e6:e0:48:39:73:b7:
         d5:be:a4:96:c5:17:b0:36:6b:3f:17:10:d3:2b:29:59:fc:2f:
         6c:26:36:fa:26:ec:5f:74:8b:31:4d:8f:71:92:31:d6:1e:bb:
         be:da:2d:52:e0:d0:89:c5:f1:99:ef:4d:a3:41:68:22:f2:72:
         d0:83:89:5f:53:f6:e8:b7:cd:ad:91:dc:ee:a9:b9:d3:01:c2:
         6c:e7:de:2f:ba:37:8b:bb:b4:9f:44:01:f7:57:c3:d8:05:1c:
         1f:a0:c4:7a:14:8c:31:46:99:f2:9b:c4:61:b8:87:fe:f5:c7:
         1f:e9:ff:f3:c8:a5:6f:37:0a:29:a0:19:05:cd:95:fe:b0:ad:
         76:5b:f6:59:d2:9a:18:2f:9d:f2:54:40:19:bb:5d:f3:39:e7:
         e4:67:2c:41:2c:06:c6:36:6a:d4:b0:5e:24:ab:84:05:b1:5a:
         3f:38:9f:09:3c:d0:a2:eb:d7:de:b0:a3:ad:16:40:c7:d0:39:
         94:be:ef:56:21:74:5f:98:92:26:7c:78:18:75:44:e7:0a:dc:
         13:56:ee:5c:df:37:03:3e:49:02:ce:92:95:d7:db:d0:26:dc:
         03:f9:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:45:42 2026 by rpki-client