Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer
File:                     E16393AC88E5DBEEB9429903B2E0EB729C677B05.cer (raw, json)
Hash identifier:          1kjYhYf5WWo6V/lZO/knN80BkHXm4tfBEbN6m68yWZE=
Subject key identifier:   E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       3977B946CD71D09E215577F890734C3B84300CC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:51:13 +0000
Certificate not after:    Sun 02 May 2027 00:56:13 +0000
Subordinate resources:    IP: 103.160.212.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:77:b9:46:cd:71:d0:9e:21:55:77:f8:90:73:4c:3b:84:30:0c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:51:13 2026 GMT
            Not After : May  2 00:56:13 2027 GMT
        Subject: CN=E16393AC88E5DBEEB9429903B2E0EB729C677B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:42:03:db:54:fe:1d:fe:b8:ab:3b:9c:3c:
                    61:40:fc:c1:c2:50:1b:1d:c6:b6:27:73:39:9b:86:
                    45:1a:1f:5e:71:8f:13:49:8d:f6:91:a0:58:37:2a:
                    58:a0:0e:ce:0c:72:c1:cb:8e:cf:84:2c:46:b6:6d:
                    2e:98:2d:f3:c6:fd:95:0f:8d:5b:9a:f8:9c:81:31:
                    69:ce:5f:bc:ca:70:dc:f1:89:e3:73:e1:ff:3a:f6:
                    63:a1:56:41:a5:0c:95:4f:55:c0:54:e0:62:95:45:
                    7b:7d:fe:a8:fb:23:5a:11:f4:3a:9f:b7:89:d7:b3:
                    e8:19:3c:d3:33:b1:3d:ad:56:b1:93:c4:07:2a:7d:
                    67:98:e1:f5:71:b7:da:2c:78:68:1d:23:f7:ea:a7:
                    17:26:5c:1d:9b:51:52:dc:7a:a6:1d:e6:f9:d1:70:
                    d7:59:2e:9f:84:e9:fb:ca:ce:73:b0:7e:25:6b:fd:
                    30:00:c2:55:b5:ea:a1:bc:70:bc:35:e7:ae:b4:9f:
                    ce:1e:a0:34:14:5f:5f:4a:74:4d:54:01:b1:0b:09:
                    da:b6:2c:ae:09:8d:65:d3:39:d3:6a:eb:27:ae:67:
                    19:1f:af:b1:d5:09:3f:bc:e0:c7:b8:ac:f7:ae:a6:
                    d1:b5:ff:18:aa:92:ab:fb:6c:bf:6a:fd:62:83:ba:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:63:93:AC:88:E5:DB:EE:B9:42:99:03:B2:E0:EB:72:9C:67:7B:05
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/E16393AC88E5DBEEB9429903B2E0EB729C677B05.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:9d:30:72:fd:a8:b0:57:2f:10:c5:22:e8:3a:3f:ae:c9:
         61:d5:a1:6c:0e:02:3b:9c:5f:ff:52:1b:a8:03:2b:b4:38:2d:
         14:aa:47:55:ce:79:55:d0:08:55:90:9d:76:fb:ab:8b:21:d7:
         da:c8:f4:5d:6c:9d:57:bf:7a:56:9a:b8:2c:63:38:cf:06:f2:
         f3:0d:0d:08:9c:64:76:06:43:3d:5b:86:90:0b:cb:1a:c2:d2:
         e7:19:b5:62:0a:c7:68:b5:88:f6:1e:53:29:5a:65:4b:74:8a:
         b8:b9:a4:cc:a5:ec:c5:64:ac:8d:d5:cb:e7:ee:99:bb:ae:c7:
         99:6d:87:c8:e0:ca:e3:c4:63:f6:84:66:90:82:28:c4:8b:05:
         4c:eb:e4:7b:0b:58:c0:1b:17:4d:61:d2:af:80:c5:f3:f0:19:
         b1:26:79:bc:60:0e:71:87:c9:f4:69:61:d4:7d:a9:11:b8:a5:
         5c:68:b9:2f:77:58:48:93:54:3f:24:21:4e:5a:8f:a6:05:fd:
         d4:d0:5d:a6:f5:52:b8:3a:64:91:96:54:6b:c3:87:d4:bb:61:
         26:b0:82:b4:28:ba:62:62:ac:7b:7d:4a:0a:c2:d1:cf:84:47:
         c8:0c:51:c0:5b:60:b5:91:2c:ac:dc:98:ed:d9:dd:a5:32:43:
         73:ba:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:58 2026 by rpki-client