Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer
File:                     6FBD1F05CFD81D40960E84596F61608A5408054A.cer (raw, json)
Hash identifier:          fXnhJ8QktHE228+LRegyCo8jPVAgXOemctdqdjgv5N4=
Subject key identifier:   6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       51495288BCBABBE30D4204B17704BBBDB42C9DD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:21:13 +0000
Certificate not after:    Sun 02 May 2027 02:26:13 +0000
Subordinate resources:    IP: 103.165.252.0/24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:49:52:88:bc:ba:bb:e3:0d:42:04:b1:77:04:bb:bd:b4:2c:9d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:21:13 2026 GMT
            Not After : May  2 02:26:13 2027 GMT
        Subject: CN=6FBD1F05CFD81D40960E84596F61608A5408054A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:86:e7:e0:0b:cc:18:96:d1:a4:1a:f3:01:
                    50:66:e8:af:06:a9:79:7d:4c:b8:d6:ef:28:38:d6:
                    42:22:96:cf:07:b1:b6:23:bb:e1:5f:c1:14:de:18:
                    09:57:b1:bc:6a:a0:a9:8a:39:e9:4c:79:c0:33:ff:
                    2e:94:a1:25:06:db:f3:ef:1b:e8:e5:65:83:41:da:
                    c3:8c:ac:bc:57:55:2c:e2:68:e6:9e:c9:3e:73:13:
                    ff:ae:84:3c:83:07:00:10:4d:c2:17:10:70:ae:99:
                    fd:47:93:4b:37:d0:35:1f:25:20:7b:29:f9:0b:38:
                    fa:e6:84:ba:19:f6:a3:3b:6a:4a:0f:0c:70:08:e2:
                    56:ee:f4:b5:3d:1c:0d:bd:e6:a0:7e:2e:44:f0:ed:
                    da:64:d3:47:3b:00:c0:c9:71:22:eb:0f:aa:01:d6:
                    e1:e1:62:b0:ab:e8:f1:c3:c4:0a:8b:9d:19:aa:27:
                    f3:b0:d1:7f:a4:78:22:88:fd:bc:e2:66:88:38:fd:
                    44:3b:fb:99:0f:5b:3b:64:5d:11:9e:93:88:1c:b6:
                    89:57:d8:ef:6e:9e:90:52:7f:86:13:db:68:ea:25:
                    bb:48:61:05:f9:94:88:46:d2:48:2b:96:c3:29:ce:
                    a1:f5:38:22:72:b9:6a:ea:5f:9d:f3:02:de:ff:05:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:7d:ec:d7:b8:4a:ff:e7:08:9b:4e:1a:83:db:a6:11:fa:
         5f:75:2a:5b:1b:09:13:7d:19:c0:e4:2c:3c:f5:b0:08:c7:3e:
         4d:ae:d5:f6:c4:6f:6c:31:48:b7:9d:44:2f:2c:9f:92:21:af:
         9e:8a:01:e2:e0:a5:52:51:c8:1a:75:e4:8e:d6:a4:e1:85:e2:
         f5:9f:43:f8:83:31:ed:80:68:29:45:b6:82:c3:e3:2c:2e:6e:
         83:5b:1c:d6:1d:7b:2d:23:0f:ef:fd:ac:4e:8c:e6:2b:3b:3a:
         de:ee:7f:33:ed:f4:b9:01:cd:ed:70:7c:a2:7f:74:9a:33:80:
         11:9f:88:00:ce:8e:db:7f:81:73:e2:46:d5:01:eb:e3:47:44:
         37:37:5e:51:bc:d1:0c:78:ee:9b:ec:f7:f5:46:99:9d:61:d0:
         b9:0c:39:0b:c1:11:82:0b:41:f1:10:bf:32:30:79:2b:9b:d1:
         35:56:a4:67:44:ab:e0:38:41:28:f6:1e:d5:9f:9d:4d:e7:2e:
         8e:f0:17:31:60:f2:81:49:d3:fe:3f:72:8f:49:c0:6c:b5:5d:
         7a:d7:79:15:91:02:ae:1f:16:25:26:59:78:66:0e:06:98:40:
         83:ec:ff:30:a3:a0:4d:38:a9:7e:72:df:ce:cc:26:3f:88:b9:
         fb:fe:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:22 2026 by rpki-client