Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer
File:                     7A642EBA720716DAB552755544A2F1F74B4C87F0.cer (raw, json)
Hash identifier:          mtPjrKae1w2VoUM8nI602byrP60jZ6lTVOq8BPOgPmE=
Subject key identifier:   7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       0D597FCD5429DF9C5D8BBE1E7C29912DB49F8617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:16:51 +0000
Certificate not after:    Sun 02 May 2027 00:21:51 +0000
Subordinate resources:    IP: 103.50.24.0/22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:59:7f:cd:54:29:df:9c:5d:8b:be:1e:7c:29:91:2d:b4:9f:86:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:16:51 2026 GMT
            Not After : May  2 00:21:51 2027 GMT
        Subject: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:c3:a9:50:a0:6e:21:13:22:61:1d:c4:87:
                    da:1c:e2:1b:ec:6a:db:32:81:ad:46:5f:fc:95:f6:
                    6a:19:ba:54:b8:96:f8:e4:7e:a0:49:59:42:3a:77:
                    70:ca:c9:47:13:c8:2c:d3:ce:41:b4:dd:64:b2:bb:
                    6d:fa:1e:3f:88:de:7f:ab:34:8c:ab:18:aa:5a:b3:
                    a4:3b:18:b4:a7:62:00:ef:43:f5:a3:7d:01:7c:5a:
                    2f:ba:2e:c6:dd:2e:61:51:d6:91:8b:72:dc:98:7d:
                    e8:cd:c7:6c:00:2a:a0:5e:d4:8b:9a:7a:67:a9:c2:
                    86:4f:dd:7d:9f:d4:0a:eb:eb:40:f0:e7:e0:f5:fd:
                    24:d8:33:3b:82:69:8b:47:6d:24:f8:1a:64:b1:5f:
                    b5:ea:85:58:e3:8d:12:bb:35:b5:b0:8f:e4:8a:fd:
                    a0:df:11:a1:8b:a6:63:88:cf:6f:2e:8a:cd:34:91:
                    80:31:b4:75:9b:f6:1f:cf:25:5c:b5:e6:ae:e0:8a:
                    ff:6b:1c:5c:c5:75:1a:3d:cd:45:ec:b7:d9:59:0a:
                    6d:8b:6e:b0:4a:88:45:3d:a9:80:fd:2b:28:15:85:
                    72:1b:17:16:ad:ac:4e:67:3a:4e:a0:1c:3d:92:60:
                    0a:5c:fe:69:2c:c7:f1:3d:28:14:e8:3e:ff:d9:f2:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:eb:2c:29:dc:4e:a8:9f:a2:7e:0a:b2:65:4d:63:bd:9b:
         6f:1a:a2:72:15:dc:20:0e:51:8b:b8:56:d5:69:20:c7:72:14:
         e0:e7:29:93:dd:bf:72:68:d9:3d:f8:dd:0b:1f:12:fc:9c:1d:
         51:33:99:1a:d2:45:30:d4:52:c8:4e:48:20:d2:0a:62:c7:f6:
         f5:59:36:81:c3:3c:69:00:30:a0:31:28:cb:85:53:1b:95:12:
         6a:f8:60:79:ff:a6:6a:62:65:57:b7:3a:09:3e:8a:ef:f9:81:
         95:b1:35:7b:3e:54:54:a4:9a:19:6b:ce:74:e8:52:fc:78:b6:
         c5:bb:96:3e:45:4f:56:09:e0:0b:40:7c:b1:8c:40:d6:87:72:
         6c:91:d4:a3:fa:bf:29:74:b9:45:e5:c0:a0:11:65:d5:fa:3c:
         92:4c:4a:fd:3c:5e:7c:b3:07:79:3c:00:1a:0f:57:31:34:00:
         3d:94:e7:7a:46:24:dd:8f:de:0e:08:96:87:55:8a:dd:47:5e:
         02:57:a3:0d:29:b6:7e:68:f4:02:51:e6:c2:2f:7e:22:51:ed:
         e4:6c:0a:7f:8f:3d:0a:eb:87:d6:63:8a:d6:d4:7c:17:39:d5:
         d5:4c:df:cf:ff:b7:6a:e8:3c:c7:a6:06:a9:32:07:6b:6d:93:
         2a:61:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:01 2026 by rpki-client