Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
File:                     FC4AE05C1547B778063F91C4687D12E8D6978309.cer (raw, json)
Hash identifier:          yB1kQhyHO/KoCs55+LcrLiNesP3lwLg2EpGFjc/7h4o=
Subject key identifier:   FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       16B14AFC8B430983311EF16C869B43CF66656366
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Mar 2026 02:30:28 +0000
Certificate not after:    Tue 02 Mar 2027 02:35:28 +0000
Subordinate resources:    IP: 157.20.230.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b1:4a:fc:8b:43:09:83:31:1e:f1:6c:86:9b:43:cf:66:65:63:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Mar  3 02:30:28 2026 GMT
            Not After : Mar  2 02:35:28 2027 GMT
        Subject: CN=FC4AE05C1547B778063F91C4687D12E8D6978309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:91:e7:ef:db:2b:6b:98:1d:d6:b7:eb:c3:
                    38:af:92:a1:98:ea:5a:8f:27:13:94:06:45:36:f7:
                    d1:98:ce:ce:68:1c:49:47:f3:79:7b:f7:91:a9:f2:
                    64:8e:ae:a0:27:61:a6:d0:b1:bd:4f:6b:33:15:2d:
                    4a:c4:b1:a5:c9:c7:89:39:c2:ee:58:3e:b7:1c:02:
                    10:07:bb:57:63:bd:3c:2d:b4:21:2a:5c:76:aa:3d:
                    ef:d8:a5:93:3d:aa:31:39:96:bb:4d:02:67:e7:9b:
                    67:d0:78:41:d3:8d:a0:ef:68:4f:80:2c:8b:a7:92:
                    0a:c9:cd:21:63:57:c5:f0:85:d6:14:68:bb:ef:67:
                    32:e5:88:11:46:95:39:54:24:01:40:1a:52:76:db:
                    49:b2:a9:b0:b1:a8:8c:b5:1a:3a:3a:62:5c:f8:ea:
                    21:0e:1f:c5:de:05:61:c9:86:0d:6d:4b:bf:25:98:
                    95:02:cf:b3:7c:d7:31:4b:f7:68:3c:2a:8b:f7:91:
                    8d:f6:f9:5c:78:e3:0a:09:ef:6c:b1:e2:b2:88:59:
                    63:fe:d2:09:e9:f7:8e:46:5c:c9:10:d3:e5:7d:52:
                    ee:84:87:df:a0:88:18:66:f9:b5:29:f1:45:69:c5:
                    c1:c1:7b:5c:44:8a:b1:2e:6c:23:25:6d:5c:1b:e0:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:19:0a:06:d9:ed:10:0e:d0:38:32:d5:ff:f0:63:e7:bc:39:
         a3:5a:ad:49:59:ba:85:4a:a9:91:53:d9:32:ed:b8:88:c8:1d:
         5b:26:14:ea:c4:25:a1:89:a6:c3:c3:65:e1:28:ed:b4:56:9b:
         59:9e:54:72:38:7c:57:1c:2c:50:11:5d:06:54:9e:a1:cf:a8:
         e0:f5:8a:e5:c7:fb:82:22:e5:52:05:7d:8f:03:d9:93:61:c7:
         f7:92:f7:f1:5b:67:57:3a:9f:93:6d:e1:0f:9a:94:3a:11:53:
         9c:81:d8:95:38:69:13:e6:6d:9a:05:f7:15:45:c0:74:4a:6e:
         e3:08:4a:6b:02:cd:d7:44:79:61:9d:19:88:2e:ad:3e:fc:11:
         cf:fc:50:ea:95:e8:07:96:bc:3e:df:bf:27:c9:70:9f:75:b7:
         d7:a3:a0:fe:75:88:2b:60:e2:fc:60:c1:c1:96:a4:0e:e6:c8:
         31:fc:19:f8:06:e0:75:6e:de:b5:bd:4e:97:b1:ee:3f:e7:4d:
         f2:4a:fc:12:97:9e:3b:e0:6e:07:a7:13:d6:77:10:59:9f:44:
         ad:18:88:0b:2f:90:c2:b4:cf:02:95:73:32:fd:3a:04:5f:26:
         84:4a:62:93:26:6e:eb:3c:b8:42:18:cd:8c:38:07:fe:61:c3:
         d4:18:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:14:30 2026 by rpki-client