Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer
File:                     83B5C37E9FBCC271373337B3F35E92BE81C88790.cer (raw, json)
Hash identifier:          JlbVMm0jGwFvDqPDBZagH7ktU7F/B1UFgX327TwQA4w=
Subject key identifier:   83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       71A9928F0269C7E856352428AC8B14DDE29D7897
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:40:36 +0000
Certificate not after:    Sun 02 May 2027 00:45:36 +0000
Subordinate resources:    IP: 103.83.176.0/23
                          IP: 2001:df7:f200::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a9:92:8f:02:69:c7:e8:56:35:24:28:ac:8b:14:dd:e2:9d:78:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:40:36 2026 GMT
            Not After : May  2 00:45:36 2027 GMT
        Subject: CN=83B5C37E9FBCC271373337B3F35E92BE81C88790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:d9:71:73:bd:71:3d:5a:99:c6:d9:fd:1e:
                    5f:f8:7f:63:fd:3a:40:b0:b2:12:f9:4b:20:ad:e6:
                    92:16:e0:cf:8d:d8:1b:75:7e:cd:30:cc:c6:62:f3:
                    d0:b6:19:a2:ab:32:0b:85:3b:7b:bf:fe:6e:9e:c0:
                    ed:d9:ef:60:98:78:27:36:95:d6:4d:87:31:7b:53:
                    c0:01:6d:99:8b:ae:be:6c:41:9e:df:29:a5:b4:f6:
                    0d:8b:ca:73:2e:52:0f:a9:e4:ec:76:54:b9:b6:60:
                    66:9f:06:6e:dd:e4:e3:ed:9e:6f:5a:5c:1e:56:01:
                    a1:f1:b3:52:03:5c:20:c6:34:2a:d1:de:4e:2a:58:
                    22:aa:af:af:02:f6:f4:e9:84:92:c7:4f:05:ec:78:
                    15:27:3a:06:45:f0:31:eb:72:67:c5:12:f1:e0:c4:
                    44:b0:a3:22:c5:20:72:d3:f9:60:82:32:5c:d5:69:
                    1f:45:85:84:1c:53:3e:6d:12:28:12:d3:3d:5f:5a:
                    75:9b:99:ed:bc:a2:df:6d:ce:86:85:90:2f:de:b6:
                    3e:64:62:3c:cb:9d:96:97:6d:9d:62:4b:93:12:ad:
                    05:fa:b8:03:61:8e:8c:e9:e2:84:71:af:eb:e5:5f:
                    12:d4:79:44:20:6e:0e:47:21:0e:7e:19:41:47:2f:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.176.0/23
                IPv6:
                  2001:df7:f200::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:df:24:13:c9:e9:3f:fa:c2:db:4a:89:64:91:47:bb:69:be:
         52:64:8a:c9:eb:da:62:4b:7e:67:5c:f8:ed:8d:74:8c:8f:2c:
         5c:7e:51:f3:45:19:34:a8:e1:ec:42:9f:50:44:2c:a4:8c:58:
         f0:3b:c4:fe:51:03:1f:29:e1:ae:40:c9:dd:6e:4e:b2:56:f1:
         65:97:ab:00:e9:0a:14:42:11:c2:9d:91:3c:87:a1:4f:a6:67:
         06:1e:bc:a1:dd:3a:7b:d2:8d:cd:52:34:2f:80:81:93:ee:13:
         e2:1f:dc:a7:8a:d7:54:e8:17:c6:f5:dd:a2:9f:66:2b:23:19:
         31:e1:63:61:24:e6:0a:35:75:91:a5:96:91:53:dd:d5:97:19:
         bf:65:cc:9e:e4:22:04:22:68:df:a7:3a:ed:91:ad:4c:bc:e6:
         01:2f:25:a5:c4:f5:67:f1:a2:87:fb:da:98:8d:6c:fd:66:96:
         50:44:48:88:0e:d1:7f:41:c7:76:34:1b:52:92:37:70:b0:93:
         80:ad:d0:9b:2e:59:37:e6:14:43:79:9d:2b:b4:17:a4:8a:e3:
         ff:fb:96:ec:cf:09:9a:b1:6c:2e:33:d8:d7:73:ea:85:aa:85:
         4f:45:e4:fb:e6:01:b0:db:3a:69:ec:20:cf:12:11:81:67:60:
         52:19:b5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:47 2026 by rpki-client