Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
File:                     C7281E70CDFFA77145134C1424E6A649EA797D8A.cer (raw, json)
Hash identifier:          VP0GLCLo2M5+gltKTy5Hy69PcB52MVrA2OgZjP/IjPs=
Subject key identifier:   C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       18B5364910337B6026ADE2EFE9EB0E85103B7198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:20:20 +0000
Certificate not after:    Sun 02 May 2027 02:25:20 +0000
Subordinate resources:    IP: 103.80.236.0/22
                          IP: 2001:df7:1a00::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b5:36:49:10:33:7b:60:26:ad:e2:ef:e9:eb:0e:85:10:3b:71:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:20:20 2026 GMT
            Not After : May  2 02:25:20 2027 GMT
        Subject: CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d0:13:42:95:33:67:e4:20:6b:31:3b:66:fe:
                    df:d6:aa:b2:ae:e0:6c:ac:9f:a8:69:b6:d2:7c:dd:
                    29:ee:a0:4d:9e:47:41:12:cd:5f:83:ee:c8:d7:b3:
                    01:c9:56:cb:e8:97:da:dc:94:04:f2:68:b1:73:2d:
                    45:fa:91:e1:36:50:b3:38:03:77:ec:f9:8b:f6:01:
                    8a:dc:41:ca:c4:19:41:5e:df:e3:86:2e:74:15:47:
                    f4:db:a3:80:d7:f4:e1:5a:7b:b3:a3:ec:e4:82:99:
                    89:93:b4:20:a9:c9:5d:55:56:c9:ff:23:d4:55:a8:
                    1f:54:55:4e:da:a2:e1:f4:b1:0c:48:32:e0:72:95:
                    fc:73:55:1f:26:f5:3c:c6:80:32:a0:30:cd:06:3d:
                    0d:90:57:0a:46:38:0c:9d:7c:23:84:13:f6:d5:b0:
                    01:74:f9:87:a8:b6:8c:08:54:6b:45:54:95:72:40:
                    a1:00:c3:d1:97:4c:fa:85:20:d4:6b:d3:53:8b:8b:
                    0d:94:4c:d8:2c:92:64:97:32:06:6b:74:18:9b:94:
                    e9:6a:a1:89:27:97:f1:52:e4:59:e3:4e:5c:2a:a2:
                    0a:52:90:67:a5:59:db:0b:35:f4:e9:96:c3:39:1a:
                    21:a8:70:7a:4d:c5:e4:a3:73:2d:5a:32:22:e0:69:
                    bd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.236.0/22
                IPv6:
                  2001:df7:1a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:cb:82:1a:ac:11:11:a4:62:76:38:2d:b8:3c:85:3d:65:
         0c:50:81:d8:d3:c1:87:e9:47:4a:8b:3b:d5:38:86:2e:9a:13:
         1a:a3:e4:11:5a:16:41:bf:1a:b9:77:8d:7c:8e:6f:9f:46:80:
         c0:ef:6d:73:95:b2:46:10:b4:39:5b:00:39:3a:7c:e9:96:2b:
         c5:71:51:d4:66:04:62:fe:35:ce:fb:05:24:b9:9e:33:57:26:
         a2:df:c8:ca:ff:93:a7:70:c0:c6:2a:95:43:14:7c:88:a4:a6:
         c7:c7:0b:8c:8e:f0:b7:d2:cd:f5:e2:87:3a:11:0a:3a:97:58:
         32:73:d6:dc:aa:3f:6d:4d:63:7c:ad:98:27:4d:93:e2:a0:49:
         f3:a2:92:f1:6e:4c:d6:70:6a:40:ca:8a:b7:e2:20:22:a6:b2:
         c2:48:7c:5e:74:7c:55:fe:2a:3f:4f:1f:a4:61:8e:2c:32:c1:
         ac:c5:55:69:26:ae:bf:d5:a2:bd:9a:ce:0d:61:86:8c:99:48:
         a3:b5:91:05:f6:86:c1:59:9a:be:d5:5b:28:1d:b3:74:7b:ee:
         13:54:97:0a:b0:e7:75:c2:49:1e:b3:49:35:bf:37:8e:9a:6f:
         1c:e5:3a:19:d3:79:34:e9:1d:c1:d3:8a:e5:0b:a1:48:73:14:
         cc:0d:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:09 2026 by rpki-client