Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F705AE2761827B3731DA750AF218D64976641143.cer
File:                     F705AE2761827B3731DA750AF218D64976641143.cer (raw, json)
Hash identifier:          EzMYEEcUWmPiJRyROX/CVZcMov7ekOSj1d0xX9LWn38=
Subject key identifier:   F7:05:AE:27:61:82:7B:37:31:DA:75:0A:F2:18:D6:49:76:64:11:43
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       21B64E6F4D5E9B899A033F39F0949B6D1D6144EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/F705AE2761827B3731DA750AF218D64976641143.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 02:32:46 +0000
Certificate not after:    Sun 02 May 2027 02:37:46 +0000
Subordinate resources:    IP: 103.139.138.0/23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b6:4e:6f:4d:5e:9b:89:9a:03:3f:39:f0:94:9b:6d:1d:61:44:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 02:32:46 2026 GMT
            Not After : May  2 02:37:46 2027 GMT
        Subject: CN=F705AE2761827B3731DA750AF218D64976641143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:1c:9b:d2:77:d5:1e:6d:18:29:f5:cc:94:
                    26:ee:a8:31:b3:9d:6a:42:8a:bc:33:c7:10:2b:8e:
                    0c:ee:49:ec:57:9e:fc:c7:60:45:d1:3f:dc:49:62:
                    1a:bd:55:01:24:f3:cf:54:f6:3b:5f:7c:23:2d:eb:
                    08:bb:01:53:2f:49:85:7a:f5:d7:f9:71:0c:84:fd:
                    1c:70:34:62:11:6f:8d:4c:da:25:9d:e7:c3:a2:86:
                    cc:28:e5:20:47:50:90:cf:9a:19:95:4f:bb:9c:6f:
                    95:7b:98:3e:93:83:e3:61:b3:5c:76:9b:9f:cf:df:
                    de:e6:98:f8:8f:64:06:56:5f:5b:c6:dc:8d:96:6e:
                    d3:f1:6c:ba:b9:78:39:85:e3:48:e7:bb:b6:66:03:
                    85:ee:8b:7e:0b:dd:06:21:31:a2:a3:3e:cf:6b:e5:
                    2b:76:be:4e:46:be:83:bd:c1:12:7c:82:3e:66:26:
                    44:79:3d:c6:78:a9:aa:f7:b2:46:0b:9f:9f:65:80:
                    a2:bf:ad:83:f1:23:c5:1d:06:81:42:13:57:f4:ce:
                    56:79:4f:9c:01:76:a5:71:22:92:45:4c:fa:a5:85:
                    58:26:eb:49:08:16:71:71:00:21:2d:ec:2a:06:d1:
                    3d:c1:75:60:11:de:c7:f8:fb:82:2b:ce:f0:d5:36:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:05:AE:27:61:82:7B:37:31:DA:75:0A:F2:18:D6:49:76:64:11:43
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/F705AE2761827B3731DA750AF218D64976641143.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:30:0a:7c:89:7c:37:47:f1:0d:b3:ee:d5:77:a9:a8:28:e3:
         87:cf:c4:8c:2f:38:42:e4:7a:94:16:3d:77:71:22:23:e7:e8:
         1b:56:a9:15:75:63:db:e7:d1:20:56:fa:3a:f5:b8:e9:7f:10:
         0e:69:18:fa:38:f5:5d:fb:ea:60:59:7e:37:eb:99:01:6d:a3:
         c6:21:cb:bd:ac:b4:06:61:0e:12:09:bf:db:50:d6:b4:28:c0:
         15:13:94:ae:07:d0:ad:84:ed:45:33:43:0c:34:b7:d4:da:50:
         b1:0c:4b:27:65:b9:8b:4e:2c:15:72:60:cb:7f:1a:52:e1:74:
         c5:45:19:2e:bf:3e:5a:fc:2f:78:c9:a0:db:d6:72:8f:36:0e:
         3e:45:4d:12:ab:65:0e:a5:c4:ba:18:dd:20:94:85:40:a7:d2:
         bd:4d:5a:4b:a5:63:13:cb:8a:11:2b:f3:b1:37:65:3e:37:b4:
         75:34:1b:31:82:00:1d:12:3c:c7:d5:8d:1a:45:23:9b:d7:1b:
         ca:2c:1a:9a:af:46:4a:70:66:7c:a9:d2:47:99:c7:f5:d7:57:
         fb:e6:96:0b:b6:fd:45:f1:61:24:77:85:d1:f5:48:d1:50:83:
         06:5c:ff:13:a3:ad:a8:59:bd:bd:69:58:dc:e2:25:3e:44:f3:
         58:36:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:03 2026 by rpki-client