Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
File:                     B3243760262DFCFB318CB7BD106063FABC13BAA1.cer (raw, json)
Hash identifier:          vpsLdLx7dh2qh4BPTUSTlUwMxv0QLXvycZ4HLT1gUKA=
Subject key identifier:   B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       789B4FDD1A3308DDE8CF492B7245820CB04CC3C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:43:04 +0000
Certificate not after:    Sun 02 May 2027 00:48:04 +0000
Subordinate resources:    IP: 103.135.4.0/22
                          IP: 2001:df7:d900::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9b:4f:dd:1a:33:08:dd:e8:cf:49:2b:72:45:82:0c:b0:4c:c3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:43:04 2026 GMT
            Not After : May  2 00:48:04 2027 GMT
        Subject: CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:61:a9:63:11:93:04:f5:8a:71:5e:21:0e:
                    30:8d:87:bf:a8:db:72:c3:42:4b:1b:f9:ab:09:f2:
                    a5:5c:70:06:8c:f4:6c:0d:1a:af:bf:5b:57:fc:50:
                    4a:85:95:69:ab:c6:f3:4d:9b:0d:a5:2e:c9:5c:ba:
                    c9:f6:84:ee:60:3a:dd:cf:37:26:c6:50:bf:b0:13:
                    16:b6:49:b1:8f:61:e8:f4:b5:13:e1:f4:f1:cd:ce:
                    1b:34:dd:9a:9b:23:4f:23:0f:a1:44:58:e5:bf:67:
                    8d:e0:f3:60:02:6b:2c:52:6d:b6:11:94:39:77:70:
                    c9:ca:60:a9:30:97:3c:38:8e:89:1a:60:63:31:7e:
                    26:4e:fc:b1:2c:93:e6:e0:78:08:c9:e2:c8:95:23:
                    67:95:e7:0a:b0:80:54:98:10:c4:35:3f:af:f1:99:
                    8f:a9:f5:0e:9f:82:b9:44:07:fd:27:bf:a2:b1:b4:
                    67:13:de:72:a9:9b:70:82:8a:91:73:6c:9e:6f:98:
                    b5:21:eb:39:44:61:3a:82:8c:83:c7:0a:31:4e:b2:
                    71:b1:d2:10:8f:87:d3:d6:4f:51:16:8c:50:bf:df:
                    57:2a:8c:59:db:c2:4f:7a:0c:59:79:49:df:41:d3:
                    d5:d3:27:bd:a4:d4:83:77:bd:5b:cf:18:09:a1:bb:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.4.0/22
                IPv6:
                  2001:df7:d900::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:10:e3:7d:19:6b:71:e1:ac:4c:da:e5:da:88:f1:50:c2:5d:
         be:37:43:3e:81:bd:eb:b5:e0:d6:a2:33:7a:3b:ec:ea:56:00:
         03:98:cb:a6:0e:9e:f8:6b:f7:be:56:ef:63:84:79:61:94:8b:
         80:51:63:ac:a5:5a:3f:0d:91:84:04:ac:db:6a:f1:e1:ad:6f:
         51:7f:d6:8a:1e:8b:51:2e:8a:5d:98:cb:82:e2:e6:79:6c:a4:
         f5:fa:cc:bf:52:f6:8f:33:aa:bd:d6:c2:53:16:d3:5d:6f:d3:
         c9:90:be:c6:a2:15:cf:96:c0:1a:32:50:cd:91:eb:27:84:2c:
         8c:ab:7e:1d:fa:42:ac:a1:57:29:e2:13:59:a2:3c:e1:75:44:
         54:f9:52:d8:76:a7:59:02:80:3a:fb:c5:d4:8f:03:de:32:97:
         7d:b1:e9:3d:ed:a3:52:ea:9e:bc:77:4a:51:df:73:51:37:ea:
         00:34:a1:56:71:a2:e1:b4:b6:7d:c8:87:34:4d:81:d0:c2:aa:
         f5:25:c2:af:eb:dc:d5:43:78:4f:48:85:2f:ee:81:ab:47:73:
         85:d9:ed:fd:72:75:8b:44:31:6b:2e:96:0a:01:97:01:90:28:
         07:49:82:4b:cf:cd:e3:77:5d:2f:50:99:e2:b3:e3:67:2a:c5:
         a0:a8:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:29 2026 by rpki-client