Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer
File:                     6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer (raw, json)
Hash identifier:          zH13DavC2fY+kx4Bbyvy9/mXtNKPucnWP9+CzI7Gmtg=
Subject key identifier:   6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       29A5984AD4DE219C0E6487118137123ABD93B3DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:15:05 +0000
Certificate not after:    Sun 02 May 2027 02:20:05 +0000
Subordinate resources:    IP: 103.160.147.0/24
                          IP: 2001:df5:a680::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a5:98:4a:d4:de:21:9c:0e:64:87:11:81:37:12:3a:bd:93:b3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:15:05 2026 GMT
            Not After : May  2 02:20:05 2027 GMT
        Subject: CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:84:e9:e2:fd:bb:9c:20:f0:d5:67:93:54:
                    de:b7:cc:bf:fb:77:d1:ea:3e:a8:3c:28:1a:8e:80:
                    00:0a:9b:ae:a7:36:66:3e:40:fa:55:ce:37:a9:3d:
                    0c:00:b8:a3:75:fd:d9:dd:ac:01:b7:68:f5:d6:f1:
                    d8:a3:81:8c:da:6a:32:f4:44:c3:4c:d8:a3:12:7e:
                    b4:93:99:b8:a0:dc:01:c4:60:17:6d:0b:05:f1:76:
                    ef:ef:29:18:16:2a:de:85:71:4e:bf:e6:cd:6e:b7:
                    fd:d3:0b:8f:0f:8e:a4:65:b2:a3:6f:86:3c:dc:ef:
                    df:63:2c:60:56:8c:ad:75:e3:80:a1:3a:a1:ce:a3:
                    65:12:ea:d6:17:70:e7:51:38:ce:d1:e4:f4:80:25:
                    97:b4:ad:7f:3c:a6:b1:ed:48:b7:a7:da:4a:ec:63:
                    8d:9a:7f:bd:84:8a:3b:9f:20:75:21:76:d0:b7:2b:
                    c2:1a:a5:bf:ea:08:ae:0c:0e:6f:7b:03:2e:32:72:
                    26:72:5a:0c:c2:4d:b5:17:71:58:bb:26:9d:53:2f:
                    15:67:4f:34:91:5e:ef:39:60:30:98:27:14:b7:82:
                    34:38:28:f1:e4:0c:86:2d:35:06:f4:3f:4b:09:4b:
                    ef:d5:94:20:e8:bd:19:8d:46:13:16:fc:a1:ba:9d:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.147.0/24
                IPv6:
                  2001:df5:a680::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:33:70:4c:ce:0c:b2:32:8d:16:74:48:b2:92:88:4a:d4:
         da:89:13:5c:12:af:34:fd:ff:d0:a6:c7:79:83:e5:31:e4:79:
         5a:80:00:ba:fa:85:24:03:08:0f:f3:00:1f:c5:9d:be:ec:5e:
         17:07:3c:22:fb:e5:6e:3c:7c:08:c5:7c:71:b7:2e:64:1a:f3:
         c8:10:e5:50:05:9f:65:bc:48:57:fb:40:0b:3e:03:5a:2d:38:
         f0:a8:24:21:f7:60:c4:09:85:75:57:18:50:1d:a7:01:ba:60:
         12:07:06:7a:67:d9:5d:43:f7:31:73:48:39:1d:a8:fd:dd:6f:
         05:b0:f1:a3:aa:d3:5d:8c:cc:42:84:6a:ca:33:3f:e2:e2:f9:
         88:f6:37:39:6b:11:0b:1b:7b:a7:fe:ad:17:9c:88:14:e2:dc:
         a0:04:85:ca:c2:1f:2a:c0:b9:ab:3b:fe:4e:12:28:fd:64:4a:
         a2:94:97:b1:a1:cc:3b:8d:5a:c8:e3:8d:79:24:2c:a9:a7:68:
         a7:91:2e:ec:fd:a7:bb:8d:05:a3:5a:2a:30:9e:c2:8f:34:e2:
         3b:5f:f8:b5:d5:27:f5:78:63:65:6f:d5:2d:54:ed:e0:f2:96:
         ce:fa:ee:87:d0:7c:85:16:dd:a8:11:17:4c:8b:49:f2:62:15:
         16:06:bc:77
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUKaWYStTeIZwOZIcRgTcSOr2Ts90wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTUwNVoX
DTI3MDUwMjAyMjAwNVowMzExMC8GA1UEAxMoNkRDMEI3RTE0QjQxMjY4RUI1MDlD
OEQ1NDhDOUFBMDUyRUMxNzcxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMT8hOni/bucIPDVZ5NU3rfMv/t30eo+qDwoGo6AAAqbrqc2Zj5A+lXON6k9
DAC4o3X92d2sAbdo9dbx2KOBjNpqMvREw0zYoxJ+tJOZuKDcAcRgF20LBfF27+8p
GBYq3oVxTr/mzW63/dMLjw+OpGWyo2+GPNzv32MsYFaMrXXjgKE6oc6jZRLq1hdw
51E4ztHk9IAll7Stfzymse1It6faSuxjjZp/vYSKO58gdSF20Lcrwhqlv+oIrgwO
b3sDLjJyJnJaDMJNtRdxWLsmnVMvFWdPNJFe7zlgMJgnFLeCNDgo8eQMhi01BvQ/
SwlL79WUIOi9GY1GExb8obqdYpUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFG3At+FLQSaOtQnI1UjJqgUuwXcXMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2U1NDI2MTI0LTA1OWMtNDNhZC1hMTUwLTgyMmI5ZDVmYjNmMy8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNTQyNjEy
NC0wNTljLTQzYWQtYTE1MC04MjJiOWQ1ZmIzZjMvMC82REMwQjdFMTRCNDEyNjhF
QjUwOUM4RDU0OEM5QUEwNTJFQzE3NzE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG
AwQAZ6CTMA8EAgACMAkDBwAgAQ31poAwDQYJKoZIhvcNAQELBQADggEBAHpQM3BM
zgyyMo0WdEiykohK1NqJE1wSrzT9/9Cmx3mD5THkeVqAALr6hSQDCA/zAB/Fnb7s
XhcHPCL75W48fAjFfHG3LmQa88gQ5VAFn2W8SFf7QAs+A1otOPCoJCH3YMQJhXVX
GFAdpwG6YBIHBnpn2V1D9zFzSDkdqP3dbwWw8aOq012MzEKEasozP+Li+Yj2Nzlr
EQsbe6f+rReciBTi3KAEhcrCHyrAuas7/k4SKP1kSqKUl7GhzDuNWsjjjXkkLKmn
aKeRLuz9p7uNBaNaKjCewo804jtf+LXVJ/V4Y2Vv1S1U7eDyls767ofQfIUW3agR
F0yLSfJiFRYGvHc=
-----END CERTIFICATE-----
Generated at Tue May 12 22:39:26 2026 by rpki-client