Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer
File:                     9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer (raw, json)
Hash identifier:          /LK2yIX/0pE++txv5K/CApgde2UDs975y+mqj/oF6KU=
Subject key identifier:   93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       3DDCAF50E49D1739F434BCAE455ADFE743302B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:04:15 +0000
Certificate not after:    Sun 02 May 2027 02:09:15 +0000
Subordinate resources:    IP: 103.186.32.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dc:af:50:e4:9d:17:39:f4:34:bc:ae:45:5a:df:e7:43:30:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:04:15 2026 GMT
            Not After : May  2 02:09:15 2027 GMT
        Subject: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:7f:2e:24:ff:6f:35:88:64:4e:28:70:5f:
                    5f:44:ba:ba:20:88:f5:f9:5d:b2:a1:ad:09:ed:da:
                    bb:4d:eb:ec:81:42:24:b3:9b:18:f8:bd:be:69:92:
                    a1:ad:82:20:a3:f2:8d:6f:d7:7f:cd:dc:5e:ce:47:
                    a5:21:8b:8a:04:1d:54:e5:7d:3b:f4:1a:1d:21:3e:
                    e1:63:3b:60:99:ee:3e:68:64:65:7a:63:cd:e2:74:
                    26:5f:cc:6e:0b:ea:93:75:b9:41:c2:d9:67:b3:5b:
                    bc:2d:84:f3:b7:92:0c:55:69:a5:b8:a8:17:8d:1e:
                    1f:7b:bd:df:af:85:7e:f4:73:93:56:c6:67:cd:0b:
                    b4:7d:75:30:de:84:fa:87:39:1c:19:ab:5e:17:91:
                    10:da:32:e0:38:ce:57:ec:39:fe:a5:12:3c:17:40:
                    6a:8d:32:99:b3:9a:4e:e6:34:02:58:ae:68:0d:84:
                    a3:b5:d6:58:5a:ae:54:a1:12:51:a3:95:5c:51:69:
                    ab:4e:a9:9c:67:21:2b:46:75:2e:a4:7f:50:99:50:
                    2f:9b:4a:be:c4:55:3f:9a:37:3e:37:dc:4a:5c:9b:
                    73:7b:ff:0b:69:98:13:31:16:52:49:c6:a1:78:e1:
                    5a:a0:1d:d8:07:8b:7b:b6:b9:6b:8e:7c:0f:52:ce:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:3c:80:c8:59:75:0b:f9:55:1e:7b:32:62:32:b1:36:aa:de:
         26:41:64:6a:bc:48:6d:db:90:73:18:b4:79:e4:ad:ca:52:e8:
         fa:b0:61:5d:5b:75:72:47:91:8d:63:d9:21:f0:32:85:42:fe:
         41:c1:f7:63:79:db:b3:a1:54:e5:ad:9b:0d:f8:b0:50:02:af:
         9b:e2:a0:a0:da:62:c2:31:a0:10:21:a7:e7:a7:96:ff:c6:3b:
         7f:e5:d8:0a:dd:6e:8d:23:eb:b0:8b:e0:90:01:f3:de:90:d3:
         be:e8:47:db:87:9f:b2:70:ab:10:05:8c:28:a1:0e:d6:f9:64:
         3e:39:ff:9b:3c:db:3d:b1:c6:81:01:2b:00:66:f4:f1:bc:7e:
         19:c6:4e:91:f7:72:47:28:a5:c1:68:38:3d:bc:4f:99:7a:fe:
         20:53:af:e4:cb:4f:ae:c1:0c:e2:d3:37:20:aa:17:cf:01:db:
         78:95:8b:50:c6:d2:12:7e:de:09:6f:7d:75:f0:4e:cc:0d:d6:
         20:cf:ba:c7:44:5f:2c:5c:16:2c:81:67:6c:fa:2f:61:d5:1d:
         50:d8:17:ee:76:0a:63:5f:2c:fd:7b:28:58:35:60:4a:72:cd:
         10:24:e5:45:e6:ff:f5:ed:7e:bc:41:9b:61:95:94:94:53:fe:
         61:48:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:07 2026 by rpki-client