Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
File:                     EA69EE1870C74C4198176D679D2040962AA65EE5.cer (raw, json)
Hash identifier:          KneYOCUq5vAPQU7n7WcbecavBZQyZtTrUCtnrhw6gZk=
Subject key identifier:   EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       42C7A75BA65A4F99D0566F2C1B218599CAC4C714
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:40:21 +0000
Certificate not after:    Sun 02 May 2027 01:45:21 +0000
Subordinate resources:    IP: 103.146.128.0/23
                          IP: 2405:9840::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c7:a7:5b:a6:5a:4f:99:d0:56:6f:2c:1b:21:85:99:ca:c4:c7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:40:21 2026 GMT
            Not After : May  2 01:45:21 2027 GMT
        Subject: CN=EA69EE1870C74C4198176D679D2040962AA65EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:b6:95:15:6d:50:27:57:83:6b:ca:e1:97:
                    1d:09:33:1b:2c:a5:42:4e:b2:64:77:e0:1b:c5:26:
                    f3:39:a4:11:89:8d:21:44:ad:33:af:5d:b3:89:d8:
                    a5:41:52:a9:d6:7a:32:c1:cb:18:ba:7f:32:03:61:
                    1b:62:3b:50:49:8e:c2:53:5d:e8:e2:0f:9c:70:97:
                    24:27:07:09:21:32:04:40:2a:7c:13:df:a4:2b:59:
                    03:73:27:9f:8c:8f:3a:69:df:83:47:d3:45:67:f8:
                    75:01:01:8c:43:46:e1:87:91:59:46:d0:8b:49:86:
                    5c:54:b3:a6:c1:87:8a:a9:40:d6:6a:9f:a0:f4:59:
                    3b:b8:32:e9:07:52:78:d7:82:f2:03:5b:c1:04:30:
                    97:61:c7:d9:04:af:80:fd:48:4b:a3:1b:69:e5:ea:
                    97:ed:5a:14:df:c0:3d:6e:89:64:26:a4:46:24:96:
                    f6:df:29:0c:27:87:39:59:3d:4b:1d:b8:60:56:98:
                    1a:97:b5:8e:0a:53:ba:c1:2f:4b:d0:cd:ab:83:8e:
                    48:f2:80:0d:e7:3c:9f:7f:6b:1c:cc:1f:5b:93:28:
                    ef:ff:7a:f7:83:29:c6:8a:46:9d:f9:7c:55:df:09:
                    69:f2:56:e1:f4:df:03:ac:76:ca:fe:d0:22:1e:d7:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.128.0/23
                IPv6:
                  2405:9840::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:47:04:3b:4c:e2:16:70:ba:7b:d0:aa:38:4e:e0:09:fc:
         68:40:5a:44:c4:c5:ed:4c:e0:fd:6a:a7:ec:3c:7a:97:b9:f9:
         be:2b:f4:51:ea:6a:bf:fc:45:41:88:b7:9a:9b:9c:f5:a3:4c:
         80:36:d7:bf:d4:ab:14:3a:39:79:a3:e0:b5:2e:30:f5:8d:10:
         2a:93:bc:b1:ae:d0:ea:c1:01:3e:67:e8:ad:ea:a7:36:1e:22:
         10:16:a0:b7:22:9a:a2:15:5d:55:a6:79:0f:0e:a5:f9:ea:0c:
         45:98:5b:74:ba:79:b2:eb:3d:7e:a4:d4:7f:49:a8:b0:a8:53:
         b5:55:85:17:df:5d:e0:2a:b8:1d:58:19:76:1f:ab:67:7e:f3:
         81:90:57:f1:2d:43:86:23:a8:d0:de:db:ca:12:8b:70:8d:34:
         23:5c:a7:62:d6:0e:5a:5d:22:b4:98:28:54:97:6a:56:d1:21:
         4e:10:df:23:9d:da:1c:0a:bf:91:03:5e:42:54:9f:af:62:55:
         4a:01:12:af:51:25:e2:62:87:0a:fd:93:06:c3:34:5b:d1:a6:
         69:57:69:d3:68:fa:77:16:2b:af:7d:6c:6a:05:4e:5a:17:2e:
         86:1e:0d:df:65:20:11:68:f1:8b:81:f1:b2:75:9c:25:7e:ed:
         89:03:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:46 2026 by rpki-client