Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer
File:                     50F3718072F17C59233AEA817A04F2D34FEC89FC.cer (raw, json)
Hash identifier:          zUrkM8vUvC51FFtqiNYgy6UZ9tqtg0G4umwyA1qmqxo=
Subject key identifier:   50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       07ED4A4058C48534A422F76CF6CF10C06FF0215E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Jul 2025 19:58:24 +0000
Certificate not after:    Fri 03 Jul 2026 20:03:24 +0000
Subordinate resources:    IP: 103.67.24.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 00:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:4a:40:58:c4:85:34:a4:22:f7:6c:f6:cf:10:c0:6f:f0:21:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  4 19:58:24 2025 GMT
            Not After : Jul  3 20:03:24 2026 GMT
        Subject: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:2d:1d:50:de:f8:11:d5:16:2d:9e:67:bf:
                    df:ac:2a:1d:a1:b1:2d:4d:ca:04:6e:88:02:88:71:
                    07:88:16:d2:94:d6:a6:1f:57:8a:cc:4f:be:c9:63:
                    c3:cb:95:79:e0:82:e4:fe:f5:82:1c:0b:b9:7c:33:
                    45:bb:ad:6f:51:58:9f:e3:d8:da:51:2a:b0:9b:0d:
                    ed:09:9e:bd:0d:81:e1:e6:e8:82:2c:a5:86:71:0e:
                    95:6a:fd:aa:79:36:87:d2:61:fd:de:04:5a:ac:a0:
                    6c:f3:13:7f:29:7b:91:32:a1:70:82:d1:05:78:77:
                    b5:1f:1d:3e:92:73:4c:f8:88:9b:86:83:1b:2c:a6:
                    7a:66:df:8b:53:65:9c:b9:e2:4e:c3:50:f3:99:54:
                    87:3e:46:21:24:5f:0f:e9:4f:9a:a6:8e:4c:90:e9:
                    b1:1d:dc:20:67:8f:00:c4:03:9b:fe:48:08:06:e1:
                    cb:99:84:d6:f7:bd:3d:f4:df:cf:4b:4b:0c:1e:cc:
                    0c:45:2b:16:6a:fc:7c:2a:2e:60:6a:d9:1b:86:a8:
                    7a:eb:2a:f3:3c:66:1c:c4:ac:5d:74:45:63:33:80:
                    b8:d6:1a:f8:b0:e4:98:7f:1a:87:86:1c:24:91:2c:
                    07:cc:4b:55:5e:a5:53:77:34:b9:6c:2e:cf:f4:01:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:31:3d:a5:8b:a5:78:c9:cf:fe:6a:c9:7c:7c:c2:44:35:2d:
         df:a7:85:95:63:be:61:15:72:89:f2:38:a4:1a:ad:b2:31:9e:
         1e:be:63:69:8a:78:82:b1:b0:c0:9d:f4:a5:10:23:b5:5e:56:
         00:2b:eb:31:87:87:45:01:3e:6f:00:8e:6f:9c:e5:ef:57:b9:
         90:ca:2b:ca:f9:79:00:43:5f:30:17:02:a2:88:c3:5a:2d:f7:
         b2:c7:49:52:61:98:27:24:18:7f:b8:50:26:73:b2:2c:fd:cd:
         62:bf:e8:bd:8c:45:41:64:a0:06:e0:f8:a5:40:89:eb:50:39:
         e4:df:f7:86:6c:8f:31:74:67:19:73:95:41:0e:37:99:a1:44:
         4c:5a:13:47:53:4b:71:77:56:83:77:42:26:bd:7e:0a:fe:d3:
         8b:98:f6:f6:bd:8e:98:a8:36:c4:0f:ba:10:a6:86:b9:24:56:
         5e:8f:5f:07:76:3c:f5:f8:d7:62:b5:25:56:08:6b:f5:40:be:
         4b:21:35:ed:e0:ee:ef:50:5c:3f:1b:f8:77:a7:32:a5:d8:a6:
         9b:d8:e2:96:8b:73:2f:ef:9e:56:5c:06:b8:b9:0a:2d:90:be:
         95:f4:fa:75:e3:73:e0:31:e3:7f:02:28:a4:25:2b:ee:81:4a:
         58:90:a0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:08:33 2025 by rpki-client