Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
File:                     F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer (raw, json)
Hash identifier:          11VuyxjmjcIV0lwpUOTt9pBtGsaufi2Z6zb86EM+onc=
Subject key identifier:   F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       4E8ECC17E51309B29F24AE73ACFA0980C099A578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 01:36:43 +0000
Certificate not after:    Sun 02 May 2027 01:41:43 +0000
Subordinate resources:    IP: 182.255.0.0/21
                          IP: 2001:df0:b5::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8e:cc:17:e5:13:09:b2:9f:24:ae:73:ac:fa:09:80:c0:99:a5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:36:43 2026 GMT
            Not After : May  2 01:41:43 2027 GMT
        Subject: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:d9:09:d4:58:61:49:3b:82:27:0e:ae:72:
                    53:67:68:f9:0b:54:06:b9:5f:77:ee:7d:22:7f:10:
                    2c:bf:79:17:1f:2e:07:0c:bd:ba:e1:8e:2a:59:b8:
                    69:f9:2a:36:8e:54:81:67:01:a8:34:87:cd:d0:6d:
                    0a:50:a0:89:ac:b7:57:8b:59:11:11:23:ca:1b:ea:
                    71:3d:aa:c1:0e:4d:59:2c:cd:06:16:f9:06:18:36:
                    da:79:6f:fc:dd:72:c6:1b:bc:15:db:5c:85:c9:91:
                    d7:8c:24:c6:ca:9f:00:49:c6:17:6a:21:49:4c:08:
                    02:86:56:ce:ef:64:7e:16:a3:26:3f:f1:ba:69:6d:
                    a1:0d:08:1e:1c:a9:9a:9e:12:21:54:ed:cf:71:8e:
                    cd:2f:35:12:f4:45:a1:06:13:94:14:a9:b2:3d:5d:
                    1e:e6:64:a5:86:82:a7:2f:b0:83:1a:f2:2e:87:84:
                    48:93:ee:e5:22:40:2f:37:8d:a7:43:e8:75:56:56:
                    6e:cc:95:02:72:28:18:15:f3:a2:af:50:fe:cf:8b:
                    78:d9:e7:87:2b:97:23:09:d3:c5:46:01:af:b2:bc:
                    92:ee:9e:95:de:4e:c9:3c:95:79:2b:04:53:35:01:
                    46:b6:50:69:b2:ff:7a:fe:45:23:53:2f:e4:5c:3d:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.0.0/21
                IPv6:
                  2001:df0:b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:80:56:c7:d0:76:dd:7e:4b:9c:48:56:db:d7:88:bb:72:
         6a:ad:f0:b2:39:bb:25:54:fb:1a:70:3c:3a:9c:28:05:74:83:
         14:ec:0c:a9:2c:da:87:db:49:d8:95:45:3f:eb:05:d8:15:47:
         a8:ef:b6:25:20:57:12:66:0c:49:43:fb:50:37:0b:8d:11:5c:
         5a:0d:17:73:d7:49:88:32:4b:64:b4:53:f0:bf:ad:3c:ba:8e:
         30:a3:1e:7e:83:44:0b:20:66:cf:6f:ad:40:dc:0d:83:61:4e:
         73:6a:8a:51:64:3a:42:88:cf:1f:a6:7a:88:20:9f:3e:be:24:
         43:6e:84:26:01:02:ca:cb:28:c9:76:f3:ce:42:13:43:73:08:
         d4:b3:cc:1c:a8:ba:dc:15:5a:4d:d3:9f:6c:db:96:c1:86:7d:
         bb:83:33:be:11:20:cc:26:6e:32:48:fe:10:19:28:ec:5c:5f:
         9e:f5:a2:2f:42:10:22:67:48:9b:6a:76:b6:1b:05:b8:02:83:
         02:67:58:62:b5:6e:d3:d2:1a:78:53:bb:b8:cb:3f:b0:ca:ed:
         59:bb:fd:97:3e:00:a9:f4:ed:e2:4c:5b:3c:e7:25:15:25:be:
         b8:ab:2c:3b:e0:e2:b5:4e:9f:20:93:b4:10:b6:4a:33:0d:d5:
         28:5e:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:05 2026 by rpki-client