Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer
File:                     F5C77B8E76386E06F7C5963580F72FFDB6260833.cer (raw, json)
Hash identifier:          32BmK5Yd4BuExO9WH98QeZv972Ii2p8vSqqGg6r0HDM=
Subject key identifier:   F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       11E36106350F6E68DC624CAF29C5C422191396B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:07:56 +0000
Certificate not after:    Sun 02 May 2027 02:12:56 +0000
Subordinate resources:    IP: 103.210.2.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e3:61:06:35:0f:6e:68:dc:62:4c:af:29:c5:c4:22:19:13:96:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:07:56 2026 GMT
            Not After : May  2 02:12:56 2027 GMT
        Subject: CN=F5C77B8E76386E06F7C5963580F72FFDB6260833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:22:02:47:84:d4:4e:24:8f:da:84:61:c2:
                    8f:f6:1d:a3:0e:0c:79:05:d2:59:e7:3e:1d:c3:63:
                    11:ce:87:36:5c:e5:21:db:10:59:1e:27:4f:20:b8:
                    d0:6e:48:56:5f:91:84:66:49:e3:a2:a8:03:19:c5:
                    79:ec:40:8c:af:f9:31:6d:54:18:54:6a:41:de:e1:
                    9b:2c:d9:20:5f:cc:32:b5:04:9e:4c:7b:d1:ec:2a:
                    4b:d4:6b:5b:8d:22:ef:50:70:59:2a:1d:6a:f5:f4:
                    27:2b:58:fb:77:ac:80:40:39:97:5b:03:2b:01:f8:
                    9e:72:ba:20:ae:98:29:82:17:5a:bb:d8:54:20:42:
                    85:44:08:2f:39:6b:bb:bd:31:9f:30:d0:46:25:fc:
                    28:91:29:48:28:92:74:d6:49:04:3e:4f:cb:51:7b:
                    e3:1e:bd:45:30:a4:f8:de:97:61:b3:6f:71:b1:72:
                    ab:83:24:98:c5:c3:15:85:b0:25:30:d8:fd:f4:26:
                    ab:64:72:e8:07:8b:4c:f8:05:e5:a5:65:f4:c3:8e:
                    6e:c7:9f:1a:1b:44:ed:ac:82:55:6b:cb:33:72:42:
                    21:b0:da:f9:c1:fa:8f:2f:77:be:da:93:89:eb:78:
                    5b:b9:01:77:38:25:4b:a6:85:61:7b:2a:33:70:b4:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:77:cd:f2:7a:19:d1:25:c6:6c:89:29:00:c5:f7:00:4a:24:
         17:27:4a:c6:a0:04:59:5b:fd:64:e1:d1:13:29:d2:af:25:09:
         f8:49:23:01:cb:7f:dd:f3:8f:38:21:81:e3:32:55:4d:8f:7d:
         df:b5:35:7a:4f:e3:4c:99:1f:5e:28:28:9a:f6:d8:10:72:24:
         e2:60:1b:34:2a:2e:5f:8a:2e:bf:fc:6a:18:0d:37:2a:72:af:
         09:f1:b2:ff:d3:bf:8d:3e:4a:bc:c8:27:b6:f5:b4:9d:17:7e:
         31:cf:af:84:27:92:69:2f:08:db:c1:65:84:c7:ed:03:59:0a:
         ee:2e:47:b4:c2:f6:8d:b9:2b:8d:08:e1:3b:c1:49:61:5f:38:
         51:ed:17:ee:a5:87:c5:19:5f:2f:e7:fc:8f:13:1a:05:94:1d:
         58:4c:48:48:3f:23:f5:92:d5:74:63:81:7d:39:c8:3b:35:aa:
         d2:d2:f1:a9:3a:77:e7:aa:76:8f:a8:1c:d2:fe:14:14:fe:b3:
         ae:26:68:37:bc:0f:3e:d0:46:00:fe:de:8e:fc:61:c5:04:16:
         73:a8:4c:eb:c2:4e:48:55:75:f8:c0:1e:eb:0e:ad:44:6a:d2:
         d8:7f:b2:34:7e:ee:e1:4f:1c:07:cf:cf:b0:7d:6b:0f:bf:21:
         95:0b:ca:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:07 2026 by rpki-client