Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
File:                     6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer (raw, json)
Hash identifier:          W/sGeJdgCUwuF+mD4G6fSMOIUlA78WzG8YkVzXHUhQk=
Subject key identifier:   63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       642067F493E2590D6BDCEA92EEBDCA2F5E798CB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:07:58 +0000
Certificate not after:    Sun 02 May 2027 02:12:58 +0000
Subordinate resources:    IP: 103.96.54.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:67:f4:93:e2:59:0d:6b:dc:ea:92:ee:bd:ca:2f:5e:79:8c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:07:58 2026 GMT
            Not After : May  2 02:12:58 2027 GMT
        Subject: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:c8:d6:9a:aa:46:c2:e4:df:fc:99:a2:a9:
                    a5:7a:f6:b0:71:a6:8b:cb:26:39:04:94:c1:18:c8:
                    90:06:fe:b4:29:8f:6c:01:6e:76:94:0f:22:1a:f6:
                    b5:56:4c:c6:b3:c4:e8:52:79:98:5b:d3:be:ae:e7:
                    b8:8b:1a:35:98:89:c2:3a:00:66:8f:5b:05:3a:1f:
                    0c:0a:e0:5c:48:34:d1:60:c1:de:a3:7e:92:e5:ce:
                    79:7c:6c:2a:6e:ec:dc:1c:a8:d7:76:68:32:d2:f4:
                    8a:84:c0:81:d2:d7:a3:7c:a2:4d:fb:26:f4:db:7e:
                    75:91:1b:32:81:fb:49:63:94:d2:36:31:d1:3a:a7:
                    ed:26:17:26:8e:a5:0c:b4:00:88:62:c0:b4:9c:bb:
                    7b:f3:a6:e6:86:b9:50:36:ed:3d:7b:47:a9:3b:08:
                    02:6e:18:12:b4:14:ed:b9:2b:0d:a1:1f:a8:42:c5:
                    a9:2b:b4:56:9b:ea:05:9e:3e:c8:32:21:e3:e0:f5:
                    6b:16:69:fe:a3:e0:37:2c:09:e0:a9:f0:33:77:49:
                    4e:5b:cf:3e:6d:7f:85:85:e1:e1:2e:8b:ac:90:60:
                    3e:82:b5:82:47:89:62:63:d5:22:a1:0e:16:0e:b0:
                    ad:32:a6:ec:02:1c:3e:77:10:69:b2:92:fa:12:3c:
                    03:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:2e:7f:38:9d:3f:57:0b:c6:42:a4:72:1c:e7:99:45:61:08:
         ac:ca:5f:0e:56:0d:ef:4a:8e:f4:66:e6:07:41:c8:73:f4:56:
         98:4b:f1:dd:b5:23:66:dc:78:06:7b:07:58:be:eb:41:a9:d8:
         3c:03:17:24:8f:7f:e8:c8:a0:e4:c0:41:31:be:9e:f5:13:2a:
         95:9c:ee:ef:df:a8:8d:df:cc:7f:7d:60:4f:a2:d9:ec:15:24:
         c7:61:55:b7:10:b0:c1:46:df:79:30:c4:0c:65:fb:dd:30:df:
         44:46:0a:66:9c:c9:1f:8c:55:2c:57:f9:51:cc:5d:b7:4c:49:
         ae:a5:c3:d9:1f:72:e7:0a:83:b4:5e:61:16:b5:0f:47:ed:24:
         bd:30:e1:56:87:03:48:77:f7:44:ef:63:29:ae:a0:a0:17:af:
         0c:d6:09:b4:b8:8c:62:cd:6a:16:53:3e:ad:c8:2e:cc:1a:58:
         ab:d1:8a:d9:9e:1b:bc:b1:57:4c:2a:51:68:ea:75:01:3b:50:
         cc:2b:32:23:55:91:5c:64:51:5c:8c:fa:51:cb:86:ad:b4:9c:
         97:cc:dc:a6:8a:81:b1:b2:26:6e:01:21:38:e2:ac:57:ea:f9:
         29:b7:fc:82:d6:ec:f7:55:ff:4b:9e:e7:2f:c0:99:7f:8e:e4:
         15:d8:19:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:40 2026 by rpki-client