Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F369E66B61D5402A7A72C94237FB69A9A071899A.cer
File:                     F369E66B61D5402A7A72C94237FB69A9A071899A.cer (raw, json)
Hash identifier:          g9fgehxD4tB7ZBhVhhe+NMiFHBZWfF17qddCsoEB8xA=
Subject key identifier:   F3:69:E6:6B:61:D5:40:2A:7A:72:C9:42:37:FB:69:A9:A0:71:89:9A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       465B4A78DAF66C36943D2A6B3EAED788D1723FC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 02 May 2026 23:51:21 +0000
Certificate not after:    Sat 01 May 2027 23:56:21 +0000
Subordinate resources:    IP: 103.158.121.0/24
                          IP: 2001:df5:5280::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5b:4a:78:da:f6:6c:36:94:3d:2a:6b:3e:ae:d7:88:d1:72:3f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 23:51:21 2026 GMT
            Not After : May  1 23:56:21 2027 GMT
        Subject: CN=F369E66B61D5402A7A72C94237FB69A9A071899A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:b3:bb:75:5b:ff:2e:2a:80:ef:ec:76:37:
                    17:2c:c9:dc:2f:8c:6d:10:e8:40:82:c5:a9:bd:83:
                    81:b4:80:c1:d9:45:06:03:b6:99:cc:13:0c:a3:fa:
                    f2:f3:a8:ce:b1:04:ae:05:34:7b:30:ff:62:a3:04:
                    b9:bd:14:ee:26:26:49:6a:5b:a0:22:bb:27:81:58:
                    9a:11:4e:0a:fa:54:95:55:b3:3b:31:3c:f3:f2:da:
                    8d:99:e9:b9:06:20:67:15:82:6a:22:c4:66:c5:33:
                    60:75:f1:7d:29:db:59:ce:65:a1:de:85:a7:b2:4a:
                    7e:15:21:e6:b4:1d:89:0d:d3:ab:5f:30:5f:53:c9:
                    30:1c:8d:cd:e8:da:08:35:3c:c2:3e:3a:ae:e8:45:
                    bf:31:75:6c:1f:8d:a7:5a:fe:90:88:fa:f6:a1:01:
                    17:e9:f5:d9:ac:3c:29:18:14:e8:e0:5c:98:9f:ab:
                    14:0c:ec:cd:f8:4a:7f:82:8d:c4:94:48:89:de:1c:
                    3b:2b:f3:4e:c3:df:ff:3c:bf:aa:e2:61:13:3e:eb:
                    e8:6c:63:43:c9:1a:5d:65:3e:48:28:f8:23:77:61:
                    0e:a6:80:b2:d9:8b:77:48:e7:13:1a:a6:59:70:3b:
                    e3:0d:62:58:b8:67:1a:dc:45:66:b0:81:5a:a9:73:
                    99:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:69:E6:6B:61:D5:40:2A:7A:72:C9:42:37:FB:69:A9:A0:71:89:9A
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.121.0/24
                IPv6:
                  2001:df5:5280::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:6b:47:68:0b:a4:9c:9d:1d:63:1d:7e:ae:4e:08:c3:99:
         66:96:ca:69:9a:c9:49:d1:d3:8f:41:4e:2f:ed:73:22:53:33:
         2e:53:62:67:eb:62:17:6a:de:cd:bb:fe:6e:9c:b8:c7:5a:02:
         c1:f8:66:c0:20:59:44:42:84:07:71:a3:2b:43:9c:b2:65:36:
         e6:52:66:b7:b4:1a:69:03:4a:3f:d4:cd:02:c3:34:c5:29:2d:
         29:21:70:75:76:f6:e5:70:6f:52:0c:a7:8a:7c:87:0d:c7:63:
         cd:97:6c:f9:69:a5:31:3c:2f:0e:f8:7e:d7:dd:52:ab:6e:37:
         fd:6a:d8:67:8f:a2:9a:b5:4a:02:bd:7a:b6:5c:8b:5d:6d:75:
         c8:b6:f4:da:bb:79:53:a6:50:1c:84:e1:8b:4d:d6:d0:dd:ec:
         80:28:e3:e9:63:11:93:b4:4c:ff:d1:c8:79:83:2f:47:32:ec:
         da:7e:5d:97:f0:20:d9:4d:db:bf:37:42:ca:bd:d3:03:2b:28:
         b9:0d:d8:63:04:7d:b4:12:04:41:b8:96:94:18:8a:c5:01:78:
         2d:d1:69:2e:fc:e7:ff:90:63:b0:6b:e7:00:89:54:29:1b:7a:
         8b:96:24:d6:16:1e:19:6c:70:7e:56:98:34:09:14:35:61:b6:
         c3:85:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:58 2026 by rpki-client