Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer
File:                     439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer (raw, json)
Hash identifier:          EHgkhbcKNdMB2a3ui8cN9oYbh06DSjzBjmmglREpijo=
Subject key identifier:   43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26B304F816842D254601C1F8BB1B7AA32DB1AD53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Mar 2026 11:12:17 +0000
Certificate not after:    Thu 04 Mar 2027 11:17:17 +0000
Subordinate resources:    IP: 103.187.90.0/24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 09:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b3:04:f8:16:84:2d:25:46:01:c1:f8:bb:1b:7a:a3:2d:b1:ad:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  5 11:12:17 2026 GMT
            Not After : Mar  4 11:17:17 2027 GMT
        Subject: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:b5:bf:a7:6f:49:aa:a0:42:61:37:2b:54:
                    17:27:a2:c4:c4:6c:97:e6:50:f8:d3:87:d6:43:25:
                    e8:10:e2:be:0e:4d:21:63:15:8c:69:4a:2e:d4:52:
                    f9:97:d9:5a:4a:a9:14:69:b8:97:f9:9e:75:13:19:
                    ef:ac:0d:81:d6:20:ba:dd:fd:9f:c6:36:09:bd:fb:
                    75:c8:45:ab:6b:a1:fc:a5:98:22:65:f5:0d:0d:04:
                    6a:02:f5:55:fc:c7:5f:bd:fe:10:c9:30:74:6d:25:
                    9e:66:78:18:36:0c:84:a7:09:8b:91:54:c2:f9:07:
                    af:22:7b:d6:45:8a:0d:4b:17:66:ad:b7:ab:c4:ba:
                    0b:8d:49:8a:5b:03:89:1b:11:36:8b:62:5c:db:16:
                    a7:5d:21:87:02:20:7a:92:bb:fb:0c:01:8d:87:fb:
                    0d:f3:67:be:92:b2:8d:ae:47:98:3f:54:10:61:5d:
                    2a:6f:e7:19:fd:f9:9c:e3:2c:0e:cf:3d:65:84:73:
                    e7:14:7d:6a:f1:b1:84:3d:be:72:65:6b:52:37:48:
                    b4:8a:ee:9e:01:14:13:06:f6:5f:39:d5:cc:90:d8:
                    69:b9:fb:20:a5:37:98:c5:0d:5b:cd:ec:0a:a9:78:
                    4b:e4:36:47:45:ee:3e:08:ba:bd:82:b2:14:ea:a9:
                    19:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e9:6b:ae:7a:4a:61:71:a4:7b:20:6e:fd:4d:73:22:09:cf:
         a3:e1:87:96:3b:f1:db:34:c0:2e:da:a2:05:a7:e2:28:ca:18:
         6d:99:40:8e:f8:b0:82:2a:10:d1:7a:87:af:57:f6:d6:ba:1b:
         d2:2b:a7:d3:bb:f9:07:46:2b:9e:e5:0f:85:d5:36:c5:57:a7:
         c5:e1:06:b8:1e:77:69:ec:d2:7f:27:f6:43:7d:c0:05:7f:16:
         5f:7d:3c:c8:e1:a0:d8:35:8d:50:fc:e5:32:c3:b7:ff:93:6a:
         7b:77:34:22:84:87:69:a7:e7:3f:09:1f:f1:db:c3:9a:8f:0b:
         7d:1a:a8:6e:31:37:ee:02:22:ff:9c:e2:29:05:bc:2d:a6:38:
         0f:94:92:cc:44:b8:2a:45:ad:85:23:b0:78:7e:6a:c3:7b:6f:
         5c:d7:fd:8b:ec:0c:e0:bd:0b:2f:f4:d7:5f:da:df:19:60:83:
         7d:aa:6e:6e:8f:c7:6b:25:f3:51:fa:4d:9d:52:60:36:f1:25:
         2f:07:ec:5f:a3:df:51:88:f6:50:00:14:02:5f:ad:66:4b:b5:
         27:e3:3b:fb:bd:6e:f3:89:b2:07:61:b0:30:ad:35:98:60:d5:
         a8:88:b2:e5:60:b4:d1:4c:0f:01:ab:c4:fd:40:34:59:c6:0b:
         3b:30:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:14:37 2026 by rpki-client