Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/69B77CAB9072D68BBE83893A641426388C0EE20B.cer
File:                     69B77CAB9072D68BBE83893A641426388C0EE20B.cer (raw, json)
Hash identifier:          X7rfnqm2n/m09VaC3mO4kd22coMH97/JzidFb4fZuNQ=
Subject key identifier:   69:B7:7C:AB:90:72:D6:8B:BE:83:89:3A:64:14:26:38:8C:0E:E2:0B
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       54794C9403B7258B38447571D559C61EB42E673C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:48:20 +0000
Certificate not after:    Sun 02 May 2027 02:53:20 +0000
Subordinate resources:    IP: 103.105.114.0/23
                          IP: 2001:df3:7700::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:79:4c:94:03:b7:25:8b:38:44:75:71:d5:59:c6:1e:b4:2e:67:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:48:20 2026 GMT
            Not After : May  2 02:53:20 2027 GMT
        Subject: CN=69B77CAB9072D68BBE83893A641426388C0EE20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:e0:e0:de:92:16:60:54:cf:94:63:01:a4:
                    c8:23:52:06:35:8e:00:d6:6f:d2:a5:66:99:b0:fe:
                    fa:71:fe:81:ee:29:61:b1:39:16:b4:18:89:55:9b:
                    cb:2f:5a:3d:27:01:eb:c2:aa:c4:b9:65:0e:dc:16:
                    70:6f:7b:4e:c6:4b:9c:df:32:86:98:83:1a:08:d1:
                    53:5e:f4:1b:96:cb:6d:2a:6f:e6:7f:65:52:dc:1e:
                    89:58:1b:f1:17:f1:e5:50:1f:6d:02:4e:09:53:a5:
                    bb:d6:5b:df:62:7f:d5:f7:02:6d:aa:02:b7:9a:92:
                    2c:1d:de:9c:38:a8:6c:d1:ca:e2:43:a6:2d:dc:96:
                    3e:3f:ea:d5:29:f4:56:6e:93:17:72:b6:d4:ec:5d:
                    53:37:e1:04:ad:a4:bc:09:d9:96:ce:3d:82:97:c7:
                    17:79:b7:7d:73:fe:ce:48:d9:05:82:6c:2a:81:14:
                    c7:94:00:03:f2:90:ff:f2:23:cc:1f:9b:e4:bd:8d:
                    3d:c4:4b:e6:27:00:2a:08:ab:d0:f6:59:50:5b:45:
                    6e:17:92:a2:7c:3f:f0:02:8d:48:df:ae:04:4d:4c:
                    ba:81:a6:e6:34:0c:4d:07:ba:1e:96:77:11:65:25:
                    d7:9b:52:e4:54:51:cd:dd:fb:ee:95:8c:f1:cf:c9:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:B7:7C:AB:90:72:D6:8B:BE:83:89:3A:64:14:26:38:8C:0E:E2:0B
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.114.0/23
                IPv6:
                  2001:df3:7700::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:32:17:40:80:af:47:9a:f9:85:ef:96:4d:4b:40:6c:62:c2:
         f3:fb:93:35:40:a4:f2:87:c6:08:19:c7:7c:21:3c:af:3b:6b:
         45:03:56:0f:61:e9:8b:a6:53:8c:18:08:be:87:78:ec:d2:67:
         14:0d:a0:a2:00:50:df:49:45:2d:27:42:92:cb:da:f0:38:81:
         0f:b4:b7:2a:c2:a5:5d:89:52:ae:63:aa:fc:03:c2:c6:ab:db:
         dc:93:27:81:ec:b4:53:29:66:41:5d:be:de:2f:41:5f:f3:dd:
         d1:d7:79:a0:3e:9d:af:7b:02:33:76:16:cc:3e:35:6e:0f:1e:
         11:52:ee:89:31:e6:2a:d4:1e:e1:c5:11:a1:ac:a3:7e:70:37:
         60:0b:af:2d:93:42:d7:63:fa:55:05:ae:80:95:41:62:25:26:
         a5:a4:e3:f6:c1:c4:9e:32:13:a3:7f:91:e2:2c:07:99:6e:f1:
         df:0b:1c:dd:9c:3b:c2:1a:1e:8a:12:c5:c5:11:98:74:bc:24:
         50:b6:e8:75:b3:c6:ac:c0:bf:89:c1:fe:d3:cc:7e:92:e1:2a:
         e0:b4:b4:72:35:c3:68:be:a7:ac:c5:00:b9:dd:78:b0:ef:fc:
         59:43:ef:fd:dd:fb:4c:67:a1:d8:53:10:be:fa:95:e8:17:1b:
         0d:34:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:06 2026 by rpki-client