Certificate

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/E2F42EE6108075DBB8BB507BC010954A910BD079.cer
File:                     E2F42EE6108075DBB8BB507BC010954A910BD079.cer (raw, json)
Hash identifier:          Gx0yAvosoMdgQn/I0yc1vZsCADPRX9/1M6xIu4YM4MI=
Subject key identifier:   E2:F4:2E:E6:10:80:75:DB:B8:BB:50:7B:C0:10:95:4A:91:0B:D0:79
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       24309E8A7601F3AC0882295DF74327DD6735AD3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/E2F42EE6108075DBB8BB507BC010954A910BD079.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Sep 2026 16:30:27 +0000
Certificate not after:    Wed 22 Sep 2027 16:35:27 +0000
Subordinate resources:    AS: 136381
                          IP: 163.128.238.0/23
                          IP: 2001:df6:efc0::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 03:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:30:9e:8a:76:01:f3:ac:08:82:29:5d:f7:43:27:dd:67:35:ad:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Sep 23 16:30:27 2026 GMT
            Not After : Sep 22 16:35:27 2027 GMT
        Subject: CN=E2F42EE6108075DBB8BB507BC010954A910BD079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:93:32:69:61:9c:ce:e0:38:ff:57:35:56:
                    1b:af:08:f2:94:88:54:48:83:c7:d6:1c:d0:25:13:
                    51:b2:63:e8:08:f4:bd:a8:67:8a:c8:5e:5b:aa:09:
                    a5:ae:2b:19:e6:57:4f:80:01:b5:da:48:bd:f7:12:
                    b0:fa:01:03:12:b7:af:dd:35:ed:a8:1a:55:21:43:
                    57:dc:a7:ea:92:c0:3b:4a:96:60:7d:73:0a:7d:d7:
                    ce:8a:14:d8:b9:0c:58:d3:c6:a8:09:3f:ad:e9:d9:
                    e4:13:b8:22:7d:5d:d8:8e:f7:1c:0b:ef:f5:2f:00:
                    05:14:a1:2e:bd:96:8d:b7:7c:8f:a8:b8:c6:b3:63:
                    2f:34:5f:20:01:87:b7:63:aa:79:16:7c:58:48:39:
                    7f:0f:86:38:91:7d:45:4b:df:77:1f:3d:69:f4:00:
                    29:f7:77:2b:20:86:44:d9:6d:ef:95:38:d9:00:e1:
                    4a:07:3e:cd:64:7d:82:d2:f3:a6:33:e7:ea:5d:76:
                    d9:f6:05:a4:9f:f2:8f:aa:cb:60:96:b8:4c:23:28:
                    78:00:f4:22:3c:0a:c8:78:1e:b2:39:e4:53:40:83:
                    90:bb:96:24:45:5d:b8:fd:0d:24:9d:89:80:5b:55:
                    4a:e5:30:e5:97:eb:16:81:f2:ac:a9:51:8a:80:4d:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:F4:2E:E6:10:80:75:DB:B8:BB:50:7B:C0:10:95:4A:91:0B:D0:79
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/E2F42EE6108075DBB8BB507BC010954A910BD079.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.238.0/23
                IPv6:
                  2001:df6:efc0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136381

    Signature Algorithm: sha256WithRSAEncryption
         14:44:89:4f:b0:d1:b4:3a:27:c9:96:62:b4:49:09:45:b1:17:
         4f:7b:d4:63:52:17:b4:04:57:d1:4d:52:b4:3b:05:18:8e:ad:
         61:d6:b0:4b:b8:bb:92:df:90:64:61:7c:ae:b5:d9:75:6c:d5:
         8d:ee:d0:78:c2:a5:4a:52:b4:2c:83:04:3d:ef:e6:3d:5d:50:
         6d:f7:b8:bb:f6:67:c1:7a:3b:ac:08:20:cc:99:58:77:a8:71:
         7b:01:2e:22:f3:43:7a:be:10:f7:52:bc:78:17:9e:e8:b5:1b:
         b3:40:51:4e:21:10:a2:7e:9c:80:8e:8b:e5:b7:e6:a7:76:59:
         0f:e9:0b:cc:10:db:ae:50:6b:3c:c8:2a:6a:e7:63:15:6f:65:
         20:4f:6a:cb:b6:c8:45:58:0d:57:8e:34:e1:96:46:a9:e4:54:
         17:0d:b9:6c:0a:c9:3a:97:34:85:38:02:91:97:8b:d2:44:97:
         84:0c:20:c9:f4:79:de:08:23:10:b9:1b:ea:b6:10:f7:09:82:
         66:77:af:89:e6:bc:24:86:83:f8:c6:7f:ce:98:af:44:d8:fe:
         cf:43:a9:67:7d:69:9f:3f:89:f4:7b:fe:a4:53:2c:df:ab:5c:
         c8:c4:5c:e4:1e:86:ab:e0:6a:c8:c0:34:17:2a:7f:92:8c:27:
         c6:b8:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:10:05 2026 by rpki-client