Certificate

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
File:                     FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer (raw, json)
Hash identifier:          WX9/Kjn/41Ap8KZk/5pwiFYx706WlhSsjuBwpi7uUTc=
Subject key identifier:   FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       7F370FD9FA3EB209B2A17F57511F8509FC043579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 00:27:06 +0000
Certificate not after:    Sun 02 May 2027 00:32:06 +0000
Subordinate resources:    IP: 210.79.135.0/24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:37:0f:d9:fa:3e:b2:09:b2:a1:7f:57:51:1f:85:09:fc:04:35:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 00:27:06 2026 GMT
            Not After : May  2 00:32:06 2027 GMT
        Subject: CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:9e:ec:5f:52:bd:35:b0:23:b0:7f:b2:ba:
                    05:56:81:85:1b:0d:4f:91:b4:a7:6d:32:d8:2c:6c:
                    26:36:7a:67:81:7c:8b:15:f5:9b:5b:90:61:f8:d5:
                    07:e3:61:eb:92:a3:78:4d:72:c0:97:cd:f5:bc:06:
                    89:f3:05:3c:77:96:b8:36:cf:1b:b6:91:41:bf:d6:
                    f3:e1:ce:4b:93:2e:39:59:4f:30:64:39:e8:3a:0b:
                    95:f6:64:f3:97:65:5a:31:8e:04:2d:bf:24:4b:3d:
                    db:43:4f:41:80:e0:7c:75:b2:60:b9:6b:3c:e5:77:
                    8f:91:e0:c9:4c:53:0b:8c:f6:a3:5b:22:7f:38:99:
                    8a:79:d0:fd:d4:50:b8:c6:aa:49:52:67:6a:ef:c9:
                    6b:16:dc:c3:51:ba:b8:ef:e2:f7:35:e4:b3:74:f2:
                    fd:75:9b:c9:ed:79:b9:54:a6:ab:f0:be:fc:be:2d:
                    87:ae:e4:0f:c8:19:c2:b5:af:c1:6b:bc:50:cc:7d:
                    4f:38:56:39:5d:4f:78:4e:a2:d7:12:42:aa:f4:e2:
                    22:43:c8:dc:88:c0:14:c2:e3:d6:04:61:35:b1:a6:
                    93:98:e7:2d:1f:14:74:22:21:cf:3c:c2:76:0a:8d:
                    55:67:d9:3c:95:8a:60:07:a5:77:a7:5e:96:2a:f3:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:db:b3:ff:1a:54:ee:50:f4:cc:39:58:36:8e:5c:a5:d9:
         6f:25:a4:b7:75:55:3b:45:8c:85:28:2a:d6:ac:47:24:a8:d8:
         7c:9f:e0:28:6e:07:53:95:4a:69:9a:52:65:b4:3d:3b:e2:e5:
         98:6f:fd:04:1e:fe:df:ce:55:52:8d:62:bb:a1:f7:32:c6:98:
         c0:7a:ef:a7:60:40:49:58:f5:06:6e:f8:a1:4e:d2:37:3a:9b:
         f2:6e:4d:2f:41:40:db:19:92:bf:86:48:1a:80:05:36:b0:82:
         40:18:40:07:99:f9:e9:eb:2a:75:77:33:1c:35:fb:bb:76:bc:
         b2:4f:29:f2:d4:92:33:43:a0:97:e7:89:af:b3:dc:c9:e0:97:
         a9:20:ce:46:b6:f3:ac:b4:61:bf:e8:56:8a:c4:e9:f9:9e:20:
         1e:00:af:bf:dc:a0:b5:8f:bb:25:dc:ca:7b:a1:e5:cf:89:ee:
         3d:89:1a:13:dd:b7:55:10:58:06:4d:5d:5b:51:23:0c:57:95:
         0b:d1:68:fc:2f:a4:60:b8:08:63:5b:a2:e2:75:bc:e0:ab:05:
         ab:a9:0c:86:ee:a6:db:23:91:69:5a:99:91:48:4d:a1:a5:88:
         fb:e5:83:0e:72:e2:18:8f:c4:20:51:db:78:cf:d1:13:4f:4c:
         eb:10:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:32 2026 by rpki-client