Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9F6CD463AF90E46AF9F4F3579338A83988879D90.cer
File:                     9F6CD463AF90E46AF9F4F3579338A83988879D90.cer (raw, json)
Hash identifier:          a7uglTzO7OR/krSzWACVfVBadT06qKk6iu9h/u9yINw=
Subject key identifier:   9F:6C:D4:63:AF:90:E4:6A:F9:F4:F3:57:93:38:A8:39:88:87:9D:90
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       71706A34D8A7542B180E340FE030433D31CB3C92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:07:12 +0000
Certificate not after:    Sun 02 May 2027 01:12:12 +0000
Subordinate resources:    IP: 103.71.44.0/23
                          IP: 2001:df3:e200::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:70:6a:34:d8:a7:54:2b:18:0e:34:0f:e0:30:43:3d:31:cb:3c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:07:12 2026 GMT
            Not After : May  2 01:12:12 2027 GMT
        Subject: CN=9F6CD463AF90E46AF9F4F3579338A83988879D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:e4:dc:7a:64:23:f1:c2:39:2e:34:b5:f6:
                    08:47:da:2f:7d:87:0c:6f:ab:39:c1:42:3c:56:a1:
                    62:ad:06:95:31:f3:9e:57:e1:6d:52:54:f9:33:35:
                    36:e9:ad:bf:3c:a9:8b:ec:3d:25:96:e2:c3:45:fc:
                    af:7d:01:a6:f9:4f:f1:be:ac:8a:3d:ab:ee:03:0c:
                    e0:c9:35:6b:2f:a4:de:43:9a:fd:59:dc:1c:64:0b:
                    bd:87:c6:3a:e6:b3:82:70:fb:0b:4b:5f:78:3e:d5:
                    f0:68:2e:39:1e:ee:41:81:47:ad:48:7f:bb:01:e6:
                    8c:c1:9a:fa:e1:e3:e6:e3:ab:54:3a:4e:22:40:97:
                    39:8b:94:01:ec:9f:a6:c0:e9:f6:5a:cd:5e:19:84:
                    9f:8f:d9:8b:e6:c3:33:65:65:50:16:bb:08:1c:b8:
                    44:3b:0a:e4:9b:bb:4f:12:dc:ac:a0:d3:31:2d:f7:
                    24:94:50:31:0b:aa:a3:6d:23:54:f3:c0:53:36:46:
                    eb:d0:09:3e:be:bb:0b:a4:14:32:f7:8d:af:1c:41:
                    d5:ba:38:b6:36:95:cb:ab:de:6a:87:42:54:c8:2c:
                    c5:1d:ac:56:cd:9c:64:28:ca:cc:78:3f:da:19:9f:
                    2f:d0:1f:22:26:12:b1:8a:5a:38:03:39:14:46:21:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:6C:D4:63:AF:90:E4:6A:F9:F4:F3:57:93:38:A8:39:88:87:9D:90
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.44.0/23
                IPv6:
                  2001:df3:e200::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:50:32:f1:5b:14:d5:b9:a7:e9:e0:6d:91:5a:93:30:2a:09:
         d7:d9:22:68:54:55:5c:ea:f8:71:fc:b6:86:0e:8a:1f:e6:67:
         ba:25:3a:40:ef:98:f5:d8:b1:e9:75:2e:3a:b9:c6:ab:50:07:
         12:6a:51:c5:85:64:61:24:7e:8c:9e:e5:6c:20:46:5a:de:24:
         ec:40:fd:00:ad:d9:94:3a:bb:46:84:11:27:36:6b:63:f3:0f:
         80:54:27:1a:93:4a:a6:9c:73:2e:34:4a:ff:27:97:35:e9:38:
         72:10:bb:2b:8a:f4:0f:2d:51:f4:e5:ee:d9:09:23:28:43:c7:
         f1:cb:82:f7:e4:da:e8:bc:db:8d:5b:a6:dc:03:ea:b8:bc:b2:
         09:95:43:71:c4:61:20:02:a3:3d:bc:98:58:ae:51:8f:5f:5d:
         1f:6c:a8:c4:f3:78:39:7b:ed:37:14:45:7c:64:5c:4d:fa:b7:
         8f:0d:ad:f0:94:7e:53:f8:4b:4e:87:21:5f:5e:8c:73:87:38:
         61:ef:4f:95:79:6c:46:6c:0c:02:22:00:79:9b:2c:a7:b1:e5:
         af:f1:93:a6:c8:90:f2:f3:43:2d:24:90:1f:d5:7b:45:24:c9:
         36:57:59:2c:b0:16:36:62:0f:9e:32:12:d8:7e:6b:9d:95:e0:
         80:5d:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:07 2026 by rpki-client