Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
File:                     A178C6332DA881B104F0F93428812E41FBC50469.cer (raw, json)
Hash identifier:          myutPv5FRDCx0Rf72qK56bQFs8bGq+PXdzd2fN3LkXs=
Subject key identifier:   A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       69FB9782BC62879580A858A786CA8ABEF76AA36B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:17:21 +0000
Certificate not after:    Sun 02 May 2027 01:22:21 +0000
Subordinate resources:    IP: 103.130.60.0/22
                          IP: 2403:b440::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fb:97:82:bc:62:87:95:80:a8:58:a7:86:ca:8a:be:f7:6a:a3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:17:21 2026 GMT
            Not After : May  2 01:22:21 2027 GMT
        Subject: CN=A178C6332DA881B104F0F93428812E41FBC50469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:47:e0:7f:d6:e7:c6:58:89:f8:83:50:41:
                    65:49:2c:15:e1:2e:5c:2a:1a:42:01:58:61:6c:0a:
                    60:13:98:63:b5:54:5a:cf:2a:e6:3d:9e:da:e7:c8:
                    14:da:25:04:64:68:13:fa:d9:9b:99:56:d2:4b:f8:
                    83:8a:19:f9:9b:79:91:8a:fc:3b:39:7e:54:f8:95:
                    b8:b9:d1:f5:04:3a:88:8b:a8:7c:58:76:46:1f:67:
                    08:ec:8f:27:23:1c:ad:06:0f:1b:e3:27:97:44:62:
                    7c:e4:ba:35:60:46:16:c4:24:e5:d7:3d:1b:b0:7c:
                    5e:fe:87:a8:ae:3e:ed:2b:70:5f:3c:d2:7a:be:1d:
                    5a:f2:8f:c7:1c:0d:9e:34:5c:5d:04:58:d0:76:ac:
                    d3:3d:f4:7c:c6:eb:7f:20:44:19:23:cd:36:62:6a:
                    44:ed:43:c7:b7:bd:59:66:3d:c2:d1:0a:7e:0b:63:
                    99:85:08:d9:db:48:1d:f2:cb:6b:8c:af:b3:fc:da:
                    7f:ee:fb:14:82:68:68:b7:aa:23:1a:06:97:a5:c7:
                    e5:0e:80:40:f9:bd:12:f5:78:c0:b9:3a:37:2e:e4:
                    43:20:42:df:1b:cf:02:86:1e:ed:ae:d4:e4:c1:b2:
                    f4:e2:f3:34:8b:24:2a:3e:ff:b4:ad:d8:40:52:c9:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.60.0/22
                IPv6:
                  2403:b440::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:e8:1b:36:42:22:e8:8d:ab:fc:20:88:1b:60:75:e9:65:28:
         dc:0b:e9:d3:66:b4:b8:1e:f7:34:91:30:1b:29:c6:e4:3e:88:
         d4:c7:2e:7b:99:e5:8e:36:6a:d9:b0:b1:37:2c:d0:c0:ce:25:
         c0:a8:85:3a:e7:38:20:41:df:1c:02:c5:f5:16:6b:b2:ca:cd:
         f7:fc:a0:2f:ea:f6:f1:9d:c9:2d:10:37:34:6a:03:4a:fd:a5:
         4e:a1:50:66:8f:4a:b1:d6:a4:d2:20:29:30:59:89:f5:ed:c7:
         7b:c2:bd:5d:d9:24:52:1c:95:cf:24:43:83:46:0e:b6:67:52:
         c0:ab:ae:6f:bf:09:2a:5b:81:6a:ae:37:8a:17:b0:23:7a:85:
         c8:04:9c:fc:a1:6d:3b:8c:b9:ff:24:68:0a:36:c1:4a:88:f6:
         94:f6:bc:7b:f4:64:cf:1c:33:45:33:27:b8:c5:7d:2d:1d:9d:
         53:40:62:48:8c:25:6d:86:86:64:14:b5:43:f9:76:56:3d:ce:
         f6:01:fb:23:90:bc:51:2f:66:17:b9:be:22:ff:35:7b:1c:93:
         48:70:a3:85:d4:dd:4c:f6:35:c0:4b:d2:b2:a9:c5:76:23:01:
         67:c1:4f:cf:19:11:9b:17:2e:61:62:b2:95:83:30:14:d3:20:
         9a:6c:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:05 2026 by rpki-client