Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer
File:                     AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer (raw, json)
Hash identifier:          P1ySzxKT05li652Zg+e7iW1eJid67Eg4l75ZI6oZy3I=
Subject key identifier:   AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       58AF4ED57DF1815BF869D94D2AB85FDCC3EF5CF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:38:02 +0000
Certificate not after:    Sun 02 May 2027 01:43:02 +0000
Subordinate resources:    IP: 103.190.112.0/23
                          IP: 2001:df0:f9c0::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:af:4e:d5:7d:f1:81:5b:f8:69:d9:4d:2a:b8:5f:dc:c3:ef:5c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:38:02 2026 GMT
            Not After : May  2 01:43:02 2027 GMT
        Subject: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:35:29:66:b8:22:0a:fc:8d:71:b0:38:bd:
                    d3:d4:40:58:fc:59:cb:5b:06:cf:aa:ee:6f:7d:40:
                    48:3d:80:17:1c:52:70:37:53:8e:e6:a1:bf:e3:bc:
                    ec:5f:de:89:b3:d4:2b:2c:9d:2b:ef:37:50:09:32:
                    ac:3e:56:3e:dc:60:4d:38:07:5c:0e:ad:2c:1e:71:
                    8a:36:55:47:d0:b8:b4:bb:09:39:6e:42:20:85:46:
                    67:2e:94:16:87:77:f3:7c:41:7c:35:c9:a5:55:d4:
                    63:6b:f2:9c:e1:d8:33:c1:74:a6:76:8f:8b:e3:f5:
                    a3:10:b3:5f:f7:24:f6:7e:3d:1c:0b:3c:49:8e:aa:
                    c2:8e:0f:a3:93:24:eb:22:1c:a4:2e:9b:90:3d:50:
                    3d:51:6c:78:3c:5c:7c:16:6c:26:44:b1:a9:d4:3b:
                    8a:1d:9e:b2:fb:b2:25:04:f8:b6:73:10:7f:3d:bc:
                    bc:2e:4f:59:ab:e2:20:2f:ec:89:09:ef:47:bc:d8:
                    64:0c:13:0a:47:77:3f:4e:fb:68:33:20:9b:26:fb:
                    ea:fe:5e:2c:29:d6:01:69:e2:69:8a:1c:38:aa:5c:
                    09:43:8c:15:58:f7:53:d9:d3:f1:ea:25:92:23:62:
                    c2:e6:9d:1a:ef:52:81:19:8e:a3:4d:d3:d3:c3:09:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.112.0/23
                IPv6:
                  2001:df0:f9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:99:1a:f3:80:31:0b:7f:45:f7:3a:c8:2b:0e:ec:d6:24:
         d9:29:0d:53:7c:6e:81:62:76:12:a6:33:54:2e:10:31:0e:50:
         01:c2:f2:56:ea:59:1f:11:c8:57:e5:af:02:9b:fe:2a:5b:70:
         e0:fe:ba:c0:46:46:61:99:fb:6a:09:e1:de:80:09:6a:5e:04:
         d5:d8:9f:06:a2:1b:bc:aa:b7:7b:e6:59:18:f7:e5:c5:6a:04:
         12:5f:0f:4d:87:8a:0b:27:f3:54:9e:71:3f:8d:84:15:e0:06:
         3f:d1:4e:5d:21:62:c6:1f:30:0f:ad:ae:14:1a:89:89:d1:7e:
         b2:43:17:e2:81:aa:17:b7:55:e1:b4:20:3c:a1:ae:97:94:57:
         98:0f:31:3a:12:73:21:88:98:b0:36:34:c2:86:e8:7e:55:94:
         4b:9f:c9:72:1f:be:d1:f4:2b:f2:83:82:86:b4:28:a7:1f:75:
         3d:8c:d8:51:ce:5b:19:e6:5f:dc:32:91:56:10:42:a5:6e:81:
         be:ae:ba:b6:a2:ad:5a:3b:1f:72:4b:86:4e:2f:0d:6e:24:07:
         87:c7:2e:49:f2:62:41:01:ae:7a:b2:ee:02:57:9a:56:d4:e2:
         ae:79:54:8d:76:37:ec:39:4f:57:3e:21:cf:99:40:a3:af:d9:
         32:a6:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:24 2026 by rpki-client