Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer
File:                     F92C9917A30302FCE264D46D8FE65A1CEA194138.cer (raw, json)
Hash identifier:          Noec1M/y7az4hrPpVEH+8RXfRCvQ8AaDqZgXqvVjud4=
Subject key identifier:   F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       674391250D682068EAF274E93E3E69D2EBA741F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:29:16 +0000
Certificate not after:    Sun 02 May 2027 00:34:16 +0000
Subordinate resources:    IP: 103.207.236.0/22
                          IP: 2404:3580::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:43:91:25:0d:68:20:68:ea:f2:74:e9:3e:3e:69:d2:eb:a7:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:29:16 2026 GMT
            Not After : May  2 00:34:16 2027 GMT
        Subject: CN=F92C9917A30302FCE264D46D8FE65A1CEA194138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ab:90:1f:99:58:0b:2c:18:16:fc:ea:72:22:
                    d3:04:aa:43:74:bf:23:53:fa:1f:bf:e9:8c:bf:81:
                    75:90:19:79:8d:36:1b:67:d9:47:07:05:24:1c:39:
                    65:2a:44:ec:86:43:7b:60:11:a3:49:f1:b5:3a:1a:
                    2a:77:69:51:5a:06:bc:53:8c:1c:c3:c7:22:86:d5:
                    a9:b6:73:54:af:51:d3:ce:4b:2e:24:6a:a2:d1:05:
                    2c:f9:17:9b:36:23:5c:3f:6a:f4:0f:cb:f2:a7:1a:
                    42:ff:a1:4e:0e:39:78:90:b7:bb:1f:ab:8a:12:59:
                    a5:96:9c:20:dc:e7:94:e0:ad:22:9c:67:6a:1c:83:
                    3a:81:83:cc:33:13:3e:91:0a:ad:5a:ee:0a:21:d2:
                    1b:71:58:3e:7b:6d:58:06:b1:f1:85:a2:47:c3:e2:
                    5b:a2:ed:b9:cd:9b:b7:8d:54:69:40:8d:44:85:ab:
                    51:c0:db:74:49:87:04:7b:12:88:3f:51:db:9b:de:
                    39:11:aa:4c:55:b4:18:a1:63:d9:25:e9:fd:89:8e:
                    83:1b:e7:54:2a:cd:6b:2b:f8:f9:88:bf:c0:dd:c8:
                    53:fe:63:fe:ae:08:4e:12:c9:84:32:d2:1b:27:25:
                    b3:4b:e7:aa:c1:79:93:b9:a5:2b:0e:89:59:bd:87:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.236.0/22
                IPv6:
                  2404:3580::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:64:0a:74:05:c1:1b:14:43:ab:91:be:99:ca:d2:86:22:d1:
         4e:15:14:8d:51:46:64:f2:6c:d0:9b:81:49:66:49:1e:be:f8:
         5f:d9:d6:80:05:4d:83:77:c8:d3:36:f4:6b:2e:96:4b:e3:29:
         1c:49:0c:6c:16:92:67:6b:32:a9:d7:b3:dd:5c:67:9d:22:e6:
         e8:e6:88:99:bc:a7:7c:4c:d2:d9:70:95:86:f4:54:83:5c:91:
         f0:87:47:60:92:95:e0:30:5a:d8:02:b2:0b:ea:2a:62:38:8a:
         7a:df:36:74:0a:d3:98:5b:db:9e:ca:f4:3f:9d:52:d1:65:ee:
         11:44:c3:bb:72:69:d3:4c:f5:70:d3:a6:a9:96:6a:31:50:c6:
         13:b3:af:52:d1:38:e1:c5:60:10:7e:13:a3:dd:ac:19:a5:b7:
         50:cc:5d:f3:4c:cb:c9:f8:06:f7:88:ad:4b:29:51:6e:75:90:
         db:76:7c:b8:ae:6d:b2:0f:01:27:44:58:a2:ff:74:fe:47:91:
         92:44:c8:89:fc:75:c4:4e:5b:fa:05:40:be:ab:ab:62:8f:9e:
         c6:75:74:62:b9:06:ea:d8:9f:68:c8:c1:70:d7:90:59:5e:65:
         d2:76:f0:80:82:d1:33:cc:aa:8d:75:3b:2d:ce:ba:c1:f3:64:
         ce:d8:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:05 2026 by rpki-client