Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer
File:                     EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer (raw, json)
Hash identifier:          U11NHl0ZsdzY4vGspT4CcijaY9xCVFCRC1unL5zaKUE=
Subject key identifier:   EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       13A861DA6C0DAA13177E8ACF7FC658E18641AD3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:03:42 +0000
Certificate not after:    Sun 02 May 2027 02:08:42 +0000
Subordinate resources:    IP: 103.153.134.0/23
                          IP: 2406:4540::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a8:61:da:6c:0d:aa:13:17:7e:8a:cf:7f:c6:58:e1:86:41:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:03:42 2026 GMT
            Not After : May  2 02:08:42 2027 GMT
        Subject: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:e0:26:cd:5d:29:84:55:10:f9:a0:45:da:
                    cc:10:c6:58:72:7b:c8:55:b9:a4:7e:cb:76:8a:ab:
                    8a:0b:a3:ff:48:14:c9:72:99:02:da:75:ba:ba:5f:
                    b9:c5:27:b9:ba:75:05:8e:6c:98:41:e8:9d:1d:41:
                    af:2d:f4:45:2a:82:b9:c1:a9:43:5c:f5:f1:3a:01:
                    51:0e:a5:50:93:9c:b5:df:d7:b0:14:28:c4:92:d3:
                    f3:39:75:1f:2e:2f:3b:e1:0b:e3:23:61:ca:bd:4e:
                    8f:5e:fd:9d:7e:a3:c9:38:a0:33:08:45:3e:43:c0:
                    c2:dc:e9:76:8d:fd:d1:85:65:63:e2:96:9a:89:42:
                    3f:95:a0:4a:3c:93:d7:dc:61:09:80:f8:c2:fb:3d:
                    a3:51:cb:d4:46:56:6b:4c:5e:d6:94:a0:48:31:41:
                    1b:7e:49:c3:eb:ca:11:92:36:a4:ec:fe:c7:88:0c:
                    ff:a5:ff:ee:9c:be:1a:62:ab:a0:5b:30:64:c1:1a:
                    d5:2b:5c:77:6b:43:4c:90:d2:a6:5d:c6:15:ce:a2:
                    03:0e:0e:8c:36:60:09:02:56:1f:72:b3:67:e6:8d:
                    c9:eb:6b:8f:9b:b6:ba:f9:6e:8b:c1:ad:a9:11:72:
                    ef:fc:0d:91:ac:03:60:a1:6a:85:4c:79:2a:19:01:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.134.0/23
                IPv6:
                  2406:4540::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:de:7d:b1:02:a7:04:a5:19:62:7b:45:cd:1d:ec:ca:c4:
         30:e8:a9:cc:c0:6c:ea:a4:06:0c:04:47:f1:bf:37:87:70:da:
         dc:ef:be:25:ee:69:35:33:00:96:6f:e9:80:a4:96:3a:d4:da:
         c0:b5:1f:d8:be:ea:5d:38:6d:25:0c:69:76:34:fa:1b:ce:78:
         97:40:13:05:1b:55:34:3d:13:91:08:14:5d:e9:ac:96:f6:95:
         b9:df:63:61:d9:98:b2:ac:eb:7b:b2:29:36:c7:56:70:bc:42:
         fb:6b:5c:ff:e4:4c:34:ac:1e:b6:09:d6:81:b3:bf:80:2f:a9:
         c7:e0:9f:bb:4a:00:3c:54:ab:de:70:03:54:5f:89:ac:0c:92:
         71:cf:26:bb:6a:22:70:cc:1b:47:f3:f8:4d:5e:10:98:35:54:
         7b:cb:9a:17:f8:72:d2:2a:cc:1a:1c:96:5e:d2:19:bd:24:60:
         66:0d:44:c8:1f:ef:39:f2:1b:fb:df:32:b8:a6:21:77:b2:6e:
         cb:d4:b8:a2:72:c2:4e:98:60:89:6b:fe:a2:90:46:1e:09:49:
         d8:e1:66:f8:23:29:31:dc:26:20:fd:b2:e0:65:7f:c7:de:3a:
         1d:1b:92:d1:05:da:e3:d5:36:3b:ff:2d:48:b3:f2:19:ad:c0:
         b8:2c:e0:54
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIUE6hh2mwNqhMXforPf8ZY4YZBrT8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDM0MloX
DTI3MDUwMjAyMDg0MlowMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1
MTAyNDk1RUNFMzNFOTMzMEQwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJBk4CbNXSmEVRD5oEXazBDGWHJ7yFW5pH7Ldoqriguj/0gUyXKZAtp1urpf
ucUnubp1BY5smEHonR1Bry30RSqCucGpQ1z18ToBUQ6lUJOctd/XsBQoxJLT8zl1
Hy4vO+EL4yNhyr1Oj179nX6jyTigMwhFPkPAwtzpdo390YVlY+KWmolCP5WgSjyT
19xhCYD4wvs9o1HL1EZWa0xe1pSgSDFBG35Jw+vKEZI2pOz+x4gM/6X/7py+GmKr
oFswZMEa1Stcd2tDTJDSpl3GFc6iAw4OjDZgCQJWH3KzZ+aNyetrj5u2uvlui8Gt
qRFy7/wNkawDYKFqhUx5KhkBij0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOpBP7y+K/c2UthRAklezjPpMw0PMB8GA1UdIwQYMBaAFEGa
hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg
WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80
MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr
BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv
cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG
emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB
GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv
L2RiOGJlOTA1LWYyOTYtNDVkMS1hODc5LTRhNGRlNTJjYjJkNi8wLzCBgQYIKwYB
BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYjhiZTkw
NS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9FQTQxM0ZCQ0JFMkJGNzM2
NTJEODUxMDI0OTVFQ0UzM0U5MzMwRDBGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG
AwQBZ5mGMA0EAgACMAcDBQAkBkVAMA0GCSqGSIb3DQEBCwUAA4IBAQATtd59sQKn
BKUZYntFzR3sysQw6KnMwGzqpAYMBEfxvzeHcNrc774l7mk1MwCWb+mApJY61NrA
tR/YvupdOG0lDGl2NPobzniXQBMFG1U0PRORCBRd6ayW9pW532Nh2ZiyrOt7sik2
x1ZwvEL7a1z/5Ew0rB62CdaBs7+AL6nH4J+7SgA8VKvecANUX4msDJJxzya7aiJw
zBtH8/hNXhCYNVR7y5oX+HLSKswaHJZe0hm9JGBmDUTIH+858hv73zK4piF3sm7L
1LiicsJOmGCJa/6ikEYeCUnY4Wb4Iykx3CYg/bLgZX/H3jodG5LRBdrj1TY7/y1I
s/IZrcC4LOBU
-----END CERTIFICATE-----
Generated at Tue May 12 22:03:40 2026 by rpki-client