Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
File:                     8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer (raw, json)
Hash identifier:          JQEH3wSjAPFidk58p4Kbsg8NAfJPODkbI8ViqAifYi4=
Subject key identifier:   81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       04ADEE958267F4DF8E5445F3FF11BE9A41C6EF17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:12:44 +0000
Certificate not after:    Sun 02 May 2027 01:17:44 +0000
Subordinate resources:    IP: 103.84.192.0/22
                          IP: 2001:df0:3500::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ad:ee:95:82:67:f4:df:8e:54:45:f3:ff:11:be:9a:41:c6:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:12:44 2026 GMT
            Not After : May  2 01:17:44 2027 GMT
        Subject: CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:03:a6:03:78:18:e4:8d:d2:51:23:e4:56:
                    79:d8:0f:44:23:ce:db:69:ce:be:12:20:00:2d:2e:
                    93:9e:f2:f6:08:eb:15:dc:b2:63:f2:c2:3f:f1:a8:
                    5b:7b:09:6a:a6:0e:12:f1:46:c4:90:8d:13:48:33:
                    d8:73:ee:dc:60:d2:e5:f2:28:da:16:ca:c1:60:bd:
                    02:b9:b4:28:32:67:2b:68:aa:ad:97:60:93:6c:d0:
                    94:5d:19:48:8d:ee:17:92:89:8d:92:70:0a:f8:96:
                    9b:f5:4f:4f:03:97:72:b0:44:cf:17:93:af:ea:f2:
                    4c:4e:7f:8f:a9:90:08:60:f4:5b:4c:09:eb:61:5b:
                    be:5f:aa:4a:88:c8:f1:0d:13:cd:57:b8:38:7f:a3:
                    4f:6b:c9:ed:ca:42:c3:39:00:c8:0b:3e:48:6f:87:
                    4e:7c:82:fd:56:cd:01:49:0d:00:8d:70:25:6f:63:
                    1a:22:b8:fe:03:ff:57:74:c1:b9:00:9b:e4:41:26:
                    fe:12:ea:56:9b:d3:3b:ec:3c:43:87:7f:5f:b6:24:
                    c3:2c:73:c5:a9:82:69:8a:3a:f7:fb:36:3e:f2:04:
                    16:28:2a:11:db:49:53:f4:0c:d9:8a:a8:e8:9e:ee:
                    6c:42:83:5f:a3:c1:bd:c2:1e:7b:a5:33:e8:50:87:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.192.0/22
                IPv6:
                  2001:df0:3500::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:c1:07:ac:5f:a0:8a:89:f4:2c:f8:f4:3b:59:0e:4f:8a:3a:
         74:60:d0:5a:9b:ba:6c:6d:4f:d0:cd:79:0f:4a:7b:f6:80:35:
         97:aa:d1:60:92:21:40:6e:28:b0:f2:da:9b:a1:99:84:68:7b:
         f0:13:d0:2c:0a:de:07:ff:1c:3e:2b:6f:53:4a:c2:3a:c0:8d:
         2c:2c:cd:27:93:12:25:36:5b:44:32:d6:1d:02:14:e4:2e:bf:
         24:15:96:0c:e5:60:6c:1e:30:d8:4b:1c:cb:7e:13:86:71:4f:
         91:67:23:d8:9d:79:ae:93:3e:49:df:e7:f6:7b:b7:2c:11:67:
         9e:95:11:82:3f:35:30:9f:8d:19:34:9d:7a:a9:0c:07:6d:ac:
         f4:3d:36:7b:97:2d:37:5f:5e:82:40:89:2d:27:08:41:0a:22:
         dc:95:4f:0c:a2:9a:a7:a3:af:b0:50:7a:67:2a:d5:ae:28:15:
         14:32:d8:b6:e0:98:bf:23:b9:4c:c0:55:74:85:38:0d:68:32:
         08:0c:56:71:5f:d0:5f:48:ed:e3:1b:3d:b3:11:ab:f0:43:1f:
         94:92:43:66:de:08:6b:c6:9f:1c:16:8b:de:0a:b5:c2:da:19:
         0b:49:72:8f:43:21:c9:f1:b4:53:18:cd:f9:09:2b:7d:c5:61:
         15:69:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:38:50 2026 by rpki-client