Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
File:                     731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer (raw, json)
Hash identifier:          vXGWrT+Roa3ij0DGdEUC4QwOZEMNAzdHwCOWrdMqXf8=
Subject key identifier:   73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       058FC6AB3D50CC1F3E2AD8B729C419748DC95EBB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:59:12 +0000
Certificate not after:    Sun 02 May 2027 02:04:12 +0000
Subordinate resources:    IP: 103.151.140.0/23
                          IP: 2001:df3:c480::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8f:c6:ab:3d:50:cc:1f:3e:2a:d8:b7:29:c4:19:74:8d:c9:5e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:59:12 2026 GMT
            Not After : May  2 02:04:12 2027 GMT
        Subject: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:de:ec:0a:1c:94:ee:60:9b:c5:08:6a:ef:
                    f0:ee:b5:d5:9f:03:38:4d:db:75:35:48:ee:fa:62:
                    35:4c:6c:3d:4f:e1:72:55:1f:3a:3c:1c:1a:c3:7f:
                    bf:0e:f5:a3:e7:c2:38:db:28:97:b6:2d:dc:ac:d7:
                    48:c1:69:b1:df:5a:fd:e7:ce:e8:b4:02:ea:92:e0:
                    ee:fc:cf:2a:81:6b:8f:42:11:de:0c:09:a5:13:be:
                    20:10:d7:7e:b4:6d:3e:7d:9b:f9:3a:a7:a4:cf:f5:
                    64:85:09:23:ff:99:81:3a:76:42:f8:56:95:00:03:
                    ca:86:53:1f:ad:99:cd:7c:4e:50:25:93:47:27:8e:
                    cc:62:86:b8:59:5c:a3:08:d5:ce:11:51:71:98:33:
                    f9:71:c0:35:0e:d0:ed:88:d1:35:da:91:36:8f:10:
                    54:5c:c5:0e:19:ae:a6:f1:80:39:2d:de:bd:0d:0a:
                    be:40:b9:af:a5:26:9c:29:72:88:0b:ab:4c:ad:3d:
                    8e:2e:1c:33:28:cf:1a:97:b3:1f:8c:3f:33:80:06:
                    e8:d3:28:e3:c5:87:f3:32:76:5b:2d:d7:ab:4b:02:
                    7e:b6:77:04:c8:06:48:6f:09:9c:25:2a:6c:17:7c:
                    9f:a5:ec:f4:9c:c1:31:a6:b1:2e:4b:c1:5b:19:76:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.140.0/23
                IPv6:
                  2001:df3:c480::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:82:37:3a:0a:17:ec:88:9d:71:83:8c:f9:6c:56:47:c7:
         cc:d2:58:57:c5:8c:61:be:a3:45:ee:53:6a:b6:42:0d:ca:e9:
         79:ff:6c:41:2f:8f:ae:9a:32:50:16:9d:55:96:59:22:ee:bd:
         55:cf:ab:f8:c8:f3:68:07:73:c1:66:bf:2d:75:8e:47:9e:98:
         f0:14:8f:e1:f0:0a:35:78:3b:3b:b8:f7:c1:5e:31:dd:68:71:
         b0:50:70:0d:63:82:8a:41:09:15:35:89:f4:ba:96:68:f4:ee:
         01:5c:d8:e4:99:fe:c6:1f:60:fe:0e:2c:be:6d:02:98:5e:76:
         bb:45:42:a3:3c:a6:59:0d:dd:09:77:4c:c3:36:58:bb:2e:31:
         21:bc:be:93:db:52:bb:0e:d8:15:42:40:38:98:86:b1:23:88:
         10:48:f4:3e:b8:5e:29:be:e5:70:cc:0b:e2:f8:5b:7c:58:b2:
         e4:ba:dc:51:9d:dd:a9:2d:b2:e9:8a:30:52:86:41:91:eb:fd:
         90:51:6b:0d:65:35:6d:c0:e2:f9:0c:dd:e5:ac:2b:42:7c:bf:
         2f:fd:de:69:b5:d5:44:31:55:9b:b1:a1:32:f7:e5:a5:a7:9a:
         0c:da:c8:91:ef:42:d8:e5:5c:25:81:d0:ef:06:7c:73:6c:7d:
         51:49:37:70
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUBY/Gqz1QzB8+Kti3KcQZdI3JXrswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTkxMloX
DTI3MDUwMjAyMDQxMlowMzExMC8GA1UEAxMoNzMxRDVENTlBOTIzOEY3OUU4RTQ1
NDBCN0JGODgzOUY4MjRBQTJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOuI3uwKHJTuYJvFCGrv8O611Z8DOE3bdTVI7vpiNUxsPU/hclUfOjwcGsN/
vw71o+fCONsol7Yt3KzXSMFpsd9a/efO6LQC6pLg7vzPKoFrj0IR3gwJpRO+IBDX
frRtPn2b+TqnpM/1ZIUJI/+ZgTp2QvhWlQADyoZTH62ZzXxOUCWTRyeOzGKGuFlc
owjVzhFRcZgz+XHANQ7Q7YjRNdqRNo8QVFzFDhmupvGAOS3evQ0KvkC5r6UmnCly
iAurTK09ji4cMyjPGpezH4w/M4AG6NMo48WH8zJ2Wy3Xq0sCfrZ3BMgGSG8JnCUq
bBd8n6Xs9JzBMaaxLkvBWxl2VgUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHMdXVmpI4956ORUC3v4g5+CSqLmMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2Q0NzAyNmE5LTBjOWEtNGQ3OS1hZDY3LTJjOWRiZDM2NmQwYi8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNDcwMjZh
OS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC83MzFENUQ1OUE5MjM4Rjc5
RThFNDU0MEI3QkY4ODM5RjgyNEFBMkU2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG
AwQBZ5eMMA8EAgACMAkDBwAgAQ3zxIAwDQYJKoZIhvcNAQELBQADggEBAIiMgjc6
ChfsiJ1xg4z5bFZHx8zSWFfFjGG+o0XuU2q2Qg3K6Xn/bEEvj66aMlAWnVWWWSLu
vVXPq/jI82gHc8Fmvy11jkeemPAUj+HwCjV4Ozu498FeMd1ocbBQcA1jgopBCRU1
ifS6lmj07gFc2OSZ/sYfYP4OLL5tAphedrtFQqM8plkN3Ql3TMM2WLsuMSG8vpPb
UrsO2BVCQDiYhrEjiBBI9D64Xim+5XDMC+L4W3xYsuS63FGd3aktsumKMFKGQZHr
/ZBRaw1lNW3A4vkM3eWsK0J8vy/93mm11UQxVZuxoTL35aWnmgzayJHvQtjlXCWB
0O8GfHNsfVFJN3A=
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:37 2026 by rpki-client