Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
File:                     A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer (raw, json)
Hash identifier:          62NAkirQ6q0FCO1KZUGbDJuENUj/sOsSV4l06l84I8o=
Subject key identifier:   A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       74B895F7698B077A15EB60D51B581D72FCC7315B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:57:20 +0000
Certificate not after:    Sun 02 May 2027 02:02:20 +0000
Subordinate resources:    AS: 137363
                          IP: 103.116.172.0/22
                          IP: 202.10.32.0/23
                          IP: 202.10.48.0/21
                          IP: 202.10.62.0/24
                          IP: 2402:fdc0::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b8:95:f7:69:8b:07:7a:15:eb:60:d5:1b:58:1d:72:fc:c7:31:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:57:20 2026 GMT
            Not After : May  2 02:02:20 2027 GMT
        Subject: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:53:36:9a:58:40:4e:dc:ad:ad:96:52:e0:
                    ee:92:82:69:bd:05:76:38:a3:94:49:d8:bc:61:39:
                    27:d1:d8:6e:c4:49:22:14:cc:ff:6b:2c:e5:ae:41:
                    37:c8:49:00:c7:79:e3:fd:5a:81:f7:70:a2:d3:1b:
                    b1:96:ed:6c:01:f7:af:0e:b4:27:30:e1:a4:89:f2:
                    8b:48:9b:55:28:09:25:86:84:e5:3f:f8:ae:4f:03:
                    d6:e8:d9:4a:0f:55:8c:c2:44:6f:25:d8:da:36:f6:
                    b4:8d:79:8c:bf:ad:39:58:b4:44:81:10:15:e5:30:
                    92:ca:9e:f9:73:c4:c4:de:2f:ae:ac:12:dd:5b:a3:
                    42:e4:f6:45:6e:32:f7:52:d1:8d:25:33:ce:a6:2f:
                    7d:f1:32:55:82:35:bd:35:3f:0a:77:3b:d1:81:13:
                    f3:d6:91:b3:a7:6c:63:95:fc:17:18:0b:48:f8:08:
                    13:cf:df:df:a7:c5:20:a5:c4:52:37:d9:11:37:88:
                    93:78:d0:48:5b:8a:b1:e9:5e:05:e1:8a:f3:1c:39:
                    5c:fc:30:c3:ba:2d:42:ea:5c:d0:0b:2a:97:d5:db:
                    ad:1f:78:68:e4:5b:49:1a:83:ee:b0:22:6a:46:75:
                    e1:01:a8:3a:92:37:e1:c6:c6:e9:39:62:e0:3e:72:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.172.0/22
                  202.10.32.0/23
                  202.10.48.0/21
                  202.10.62.0/24
                IPv6:
                  2402:fdc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137363

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:ba:ef:a4:1f:63:3f:a4:c8:0b:11:65:c8:2d:7d:08:97:
         f2:a9:0c:14:a7:66:84:b9:7f:99:5d:2d:ae:4e:5f:c7:1b:65:
         6a:6c:ff:32:03:08:a2:7c:5c:0e:cf:7c:cb:66:e5:e5:68:14:
         5e:1b:7f:8c:22:ae:29:df:cf:ab:92:1f:e5:fa:31:6d:67:ed:
         13:5f:31:9f:ed:ac:c0:08:c3:17:d5:e1:44:c4:e4:f7:65:41:
         a4:92:36:88:2a:45:87:60:36:5a:81:5f:46:17:fd:19:dc:15:
         17:dd:0e:0a:8d:89:a4:ec:2d:a0:25:ab:2b:a4:ce:12:b0:e9:
         fa:2c:01:f4:dc:67:41:9f:a7:74:9f:d3:23:80:cd:58:7f:dd:
         28:6e:5e:9b:fd:2c:99:5b:4a:3d:ae:53:aa:9e:04:9d:5f:bd:
         4f:17:25:35:cb:d4:39:60:df:4e:f3:b6:0f:96:44:3d:b0:18:
         7b:9e:df:7b:11:f3:e8:00:a4:4c:9c:4d:6f:02:46:c7:48:6d:
         c1:3f:db:ab:7c:ed:ff:ad:ec:d0:e1:a1:73:66:57:bb:97:a4:
         b2:34:31:8f:7c:9c:c9:7c:a7:59:2b:d4:53:d5:c1:62:8e:b2:
         e3:95:f2:df:2d:61:9e:82:9f:6f:df:11:fd:2b:c8:cf:4a:aa:
         d6:9c:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:01 2026 by rpki-client