Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
File:                     6392804C8E02387641837CC130058F05667A805F.cer (raw, json)
Hash identifier:          1Y/CCEwc+qBNkTZ3wJyQsFgmcD6U3fAL23qUM+j8SFc=
Subject key identifier:   63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       5020E067E0ED471659F820F15A53B5D3660DD08E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:58:54 +0000
Certificate not after:    Sun 02 May 2027 01:03:54 +0000
Subordinate resources:    IP: 103.129.220.0/22
                          IP: 2001:df6:8900::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:20:e0:67:e0:ed:47:16:59:f8:20:f1:5a:53:b5:d3:66:0d:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:58:54 2026 GMT
            Not After : May  2 01:03:54 2027 GMT
        Subject: CN=6392804C8E02387641837CC130058F05667A805F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:37:d6:67:39:91:a1:55:4b:22:9d:c1:8b:
                    7e:cc:84:2e:ad:50:f6:19:0e:aa:8b:eb:fc:ef:00:
                    85:4f:51:41:d0:c2:e5:9e:b7:c9:34:24:75:64:ed:
                    46:82:0e:47:7a:6a:55:fd:0d:60:aa:8d:03:d7:b6:
                    30:aa:f7:6f:13:d1:3b:dd:ce:29:eb:ff:ca:c8:8e:
                    13:29:e3:4b:d6:64:e8:84:49:b4:cd:58:75:9d:9f:
                    d7:1c:4d:5a:da:c7:3a:c1:0d:c1:1e:7d:1f:64:56:
                    9b:88:49:ee:23:38:f2:ba:1a:71:41:6c:db:e1:69:
                    0c:d6:b2:91:f8:5f:11:04:4f:62:cf:dd:e4:0c:97:
                    6d:53:85:4b:2e:69:00:31:54:93:ee:79:df:40:29:
                    2d:1d:b7:10:fc:69:7d:bf:36:4d:12:58:f0:10:f8:
                    0b:de:e9:79:93:78:a7:9f:a8:c9:94:ea:94:86:7c:
                    05:9c:47:ce:21:40:ce:69:f0:22:f6:17:87:3e:6a:
                    5e:6f:99:30:0c:32:73:a0:bc:6b:4e:99:c2:d3:e8:
                    60:17:cc:46:f3:75:a6:6f:e2:18:64:c4:27:cd:bc:
                    e1:d2:4a:81:34:51:ea:65:bc:91:f8:5a:d3:d4:34:
                    eb:2b:a6:f7:c2:0c:09:3c:0c:62:ec:ee:ba:8d:0d:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.220.0/22
                IPv6:
                  2001:df6:8900::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:fa:f5:f2:3f:2d:f3:02:89:44:fc:72:71:9e:e4:6d:73:
         54:30:d7:3b:4d:8f:f9:04:4a:fc:dd:28:81:27:0b:6a:1a:89:
         b1:0e:82:8f:cf:75:30:57:7d:22:09:d8:af:f2:c0:8d:19:c4:
         77:b5:eb:44:0b:8d:06:77:10:77:d0:9b:7e:d7:99:7e:e2:98:
         96:6d:b5:d7:a0:e1:d4:0a:f9:51:fd:2a:d3:9b:44:13:8a:d4:
         20:3e:29:ed:d4:cb:1b:29:7e:f0:8b:61:0b:0d:25:4c:47:1f:
         da:c2:c8:10:ce:75:dc:d2:80:1a:04:92:13:8c:ef:b6:fb:a5:
         48:62:99:dd:ae:cf:44:53:31:b1:8a:3a:74:1c:be:62:3d:6c:
         aa:ed:64:db:5e:0c:fd:d1:fb:31:33:4a:84:d7:5e:13:3d:c8:
         85:76:d1:fe:4e:06:99:46:bb:f5:eb:23:fa:c1:53:35:41:91:
         a6:13:0e:aa:61:b0:c7:07:c3:61:89:d6:36:94:ab:73:bb:55:
         a4:b7:69:29:37:7e:25:c6:b5:9f:c7:e5:f8:b9:32:d3:92:39:
         72:cc:2c:eb:9b:5d:56:f4:ab:9d:97:e1:3e:7f:76:62:3e:84:
         f6:16:bc:c0:60:d2:f2:16:0e:c5:de:51:8c:80:64:d3:32:0d:
         b4:f7:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:22 2026 by rpki-client