Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
File:                     C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer (raw, json)
Hash identifier:          0hbX59d9vUXifmPOLuJstAGD7PRt/AC0UnLFAJ2wjdM=
Subject key identifier:   C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       552B032F162C3ED79538B84BF043937E8E8A29C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:49:39 +0000
Certificate not after:    Sun 02 May 2027 01:54:39 +0000
Subordinate resources:    IP: 103.106.76.0/22
                          IP: 2001:df3:9f00::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2b:03:2f:16:2c:3e:d7:95:38:b8:4b:f0:43:93:7e:8e:8a:29:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:49:39 2026 GMT
            Not After : May  2 01:54:39 2027 GMT
        Subject: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:f1:03:40:cd:42:d9:61:ee:9d:c0:cb:f3:
                    4b:33:db:b4:1b:65:56:51:78:33:25:80:56:15:77:
                    c8:50:43:ec:0a:4f:21:71:47:ff:91:85:00:e3:dc:
                    c3:77:d6:ea:d6:ff:89:af:68:35:e3:72:61:5b:d7:
                    4d:fc:be:5c:c0:dc:2e:62:1a:d6:28:92:18:4e:9d:
                    70:8b:36:27:53:1b:03:c7:37:ee:73:77:ae:72:91:
                    48:23:ae:ee:82:31:a6:65:49:68:78:74:72:70:7e:
                    80:a9:1e:70:45:b4:24:e9:f3:08:68:ef:d2:b9:b9:
                    c2:49:47:a7:5e:16:a4:41:b3:46:5e:b9:b3:fc:79:
                    a3:85:82:aa:fb:14:41:e6:ae:09:ed:bf:ef:f5:62:
                    d0:ff:0d:0e:c1:f5:43:ac:2a:63:2e:2c:49:4c:33:
                    12:47:67:37:ee:92:16:60:da:94:4c:9a:d9:f4:3e:
                    91:d5:ad:8f:26:de:4a:7e:80:8b:46:48:ca:79:0e:
                    59:07:33:cf:b0:f9:6a:34:8c:2f:13:14:18:a2:e8:
                    c6:cb:7a:3e:94:76:cc:ba:d0:82:c0:a3:51:2a:a4:
                    d5:50:8e:b7:59:1c:be:6d:30:dd:51:53:ca:e4:3d:
                    85:ee:ee:a5:49:b3:fd:70:79:dd:12:67:99:1d:ab:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.76.0/22
                IPv6:
                  2001:df3:9f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:64:d5:62:74:51:94:b3:48:d3:77:1e:72:73:57:b5:66:
         17:f8:ec:0c:96:f7:05:30:bc:d1:3b:c2:41:f4:e1:18:fc:5f:
         d9:39:27:e2:f1:db:f2:38:42:77:56:13:cb:62:19:34:88:2e:
         46:73:6b:dc:48:b3:b7:bc:6c:2c:71:53:a7:21:82:b0:ee:d4:
         ea:d3:b8:6f:5f:96:3d:9c:dd:79:7a:5a:b9:9b:86:12:11:34:
         15:1b:24:f1:4b:3a:49:84:f1:55:53:f2:2d:ec:66:d9:89:43:
         43:3d:98:bf:7a:ac:57:30:25:9f:a0:8e:c0:b9:eb:bb:8c:2d:
         f3:d4:20:b3:2b:7d:d8:76:e4:f6:e0:67:6e:8c:83:c7:30:d3:
         79:db:1c:ff:6a:15:8e:db:34:5f:8a:74:84:1d:ad:cb:7c:c3:
         a8:6d:79:86:8d:9d:75:9e:71:08:30:75:e7:c3:7c:c4:8d:d3:
         c8:5f:58:da:39:0d:43:a7:53:f0:c2:90:5c:28:fd:0d:03:49:
         c0:62:9d:84:85:9d:6b:bd:e2:ac:38:9a:1d:71:54:9e:f5:e0:
         28:ab:6b:b0:ab:a2:fb:41:71:b0:d3:7d:86:34:c4:a5:40:a0:
         a6:1f:2f:20:9b:61:b7:90:91:01:79:06:22:ae:e4:dd:d2:a2:
         04:30:b3:5f
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUVSsDLxYsPteVOLhL8EOTfo6KKcYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDkzOVoX
DTI3MDUwMjAxNTQzOVowMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIz
QzcyM0Y0MTZBMTFFQURCNjhEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKB/8QNAzULZYe6dwMvzSzPbtBtlVlF4MyWAVhV3yFBD7ApPIXFH/5GFAOPc
w3fW6tb/ia9oNeNyYVvXTfy+XMDcLmIa1iiSGE6dcIs2J1MbA8c37nN3rnKRSCOu
7oIxpmVJaHh0cnB+gKkecEW0JOnzCGjv0rm5wklHp14WpEGzRl65s/x5o4WCqvsU
QeauCe2/7/Vi0P8NDsH1Q6wqYy4sSUwzEkdnN+6SFmDalEya2fQ+kdWtjybeSn6A
i0ZIynkOWQczz7D5ajSMLxMUGKLoxst6PpR2zLrQgsCjUSqk1VCOt1kcvm0w3VFT
yuQ9he7upUmz/XB53RJnmR2ri98CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFMaoTYtlRfyRqSs8cj9BahHq22jQMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2MzZGQ2MTM1LTU0OGMtNDg4MS1hZjc4LTkzYWY5ZjJhMjUxNi8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jM2RkNjEz
NS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC9DNkE4NEQ4QjY1NDVGQzkx
QTkyQjNDNzIzRjQxNkExMUVBREI2OEQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG
AwQCZ2pMMA8EAgACMAkDBwAgAQ3znwAwDQYJKoZIhvcNAQELBQADggEBABXzZNVi
dFGUs0jTdx5yc1e1Zhf47AyW9wUwvNE7wkH04Rj8X9k5J+Lx2/I4QndWE8tiGTSI
LkZza9xIs7e8bCxxU6chgrDu1OrTuG9flj2c3Xl6WrmbhhIRNBUbJPFLOkmE8VVT
8i3sZtmJQ0M9mL96rFcwJZ+gjsC567uMLfPUILMrfdh25PbgZ26Mg8cw03nbHP9q
FY7bNF+KdIQdrct8w6hteYaNnXWecQgwdefDfMSN08hfWNo5DUOnU/DCkFwo/Q0D
ScBinYSFnWu94qw4mh1xVJ714Cira7CrovtBcbDTfYY0xKVAoKYfLyCbYbeQkQF5
BiKu5N3SogQws18=
-----END CERTIFICATE-----
Generated at Tue May 12 22:02:32 2026 by rpki-client