Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
File:                     A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer (raw, json)
Hash identifier:          nPEPrWAt8s1Rr9KATdsyLopBNVCtzkv9OPNX8j6j8rQ=
Subject key identifier:   A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6F59DB2E69791349952073AB9D0E6CDB01249F9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Jul 2025 16:38:36 +0000
Certificate not after:    Thu 16 Jul 2026 16:43:36 +0000
Subordinate resources:    IP: 103.227.252.0/22
                          IP: 2001:df4:3d00::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 11:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:59:db:2e:69:79:13:49:95:20:73:ab:9d:0e:6c:db:01:24:9f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 17 16:38:36 2025 GMT
            Not After : Jul 16 16:43:36 2026 GMT
        Subject: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:5c:b3:bd:61:85:7f:29:b4:bf:00:ba:cb:
                    d1:82:c9:47:22:e8:c4:60:10:9d:96:05:97:0c:75:
                    60:ad:ff:c8:f1:35:18:1d:ef:dd:dc:d2:83:9f:f3:
                    e6:15:96:dd:dd:8f:46:06:ba:67:c1:dd:41:fe:3c:
                    88:3b:f0:a2:43:e6:23:ca:46:f3:8a:6a:e2:70:e6:
                    15:51:32:fe:70:15:e3:d4:98:c0:e3:9d:79:c8:a5:
                    71:c9:f0:f5:8b:59:2a:79:d8:29:df:57:58:37:77:
                    eb:25:85:77:a4:24:13:55:f4:10:fc:cd:eb:c7:88:
                    91:55:49:e9:d9:1e:21:f9:48:23:d7:57:55:d7:ac:
                    c2:27:b1:a8:29:f9:c7:4e:d6:0c:59:d9:ab:18:e6:
                    7a:49:27:47:43:8a:90:d2:8d:d0:05:b6:2d:58:65:
                    b9:d3:5e:52:fc:d4:d5:a7:21:6a:05:e1:e1:7e:4c:
                    54:89:69:ca:71:8c:71:ad:c8:17:15:2a:39:83:a9:
                    28:74:9b:a9:63:1a:78:f3:4f:3b:a0:81:e7:3a:00:
                    44:67:b9:38:5f:b9:91:48:b0:18:48:59:06:c5:4f:
                    5b:33:db:6d:a0:9e:da:2d:ae:57:a6:39:70:a1:14:
                    9e:11:70:60:73:da:02:21:7c:65:33:93:98:46:6c:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.252.0/22
                IPv6:
                  2001:df4:3d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:a0:20:d9:9b:d1:2a:89:91:d3:22:e1:72:ae:f9:12:40:
         13:cf:51:d9:a2:6d:93:4d:b6:62:7c:2b:35:0a:71:6e:cf:31:
         1f:28:2b:56:4b:20:43:1c:aa:ac:84:42:43:8e:1b:15:52:41:
         75:fc:fa:1d:36:50:ff:ec:d3:3c:38:5d:9e:a9:13:71:2b:bb:
         ae:f3:b8:3e:9a:1f:eb:77:82:fb:e3:13:3b:0f:10:e7:5b:7f:
         27:31:98:93:1b:83:1e:c9:78:07:cb:d4:a2:9b:1b:66:49:55:
         de:a5:c5:80:04:ac:06:82:c5:27:03:55:1a:9d:78:37:15:5b:
         9e:0b:9c:b9:5a:dc:ca:b9:c1:ae:af:d8:69:44:b4:4f:cd:f5:
         0a:0c:08:d4:79:8b:2a:e2:e7:f0:cc:34:f4:2c:80:b6:ed:f7:
         49:ab:80:da:30:f8:2b:2e:2c:77:44:3d:67:7b:5d:91:2f:e4:
         60:0b:1e:86:71:89:24:d2:8f:44:dc:04:93:12:6f:2c:3d:07:
         b9:4e:3d:78:12:26:91:fa:68:4b:81:ff:51:73:d9:40:b9:13:
         3c:35:4a:8c:4a:43:39:cd:89:6b:6d:4c:bf:b7:6c:f7:68:77:
         f9:64:b4:02:8c:f9:8f:c1:d3:5e:47:84:a5:65:c5:e4:93:68:
         1c:8d:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:25:19 2025 by rpki-client