Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/26FE684E8935466C02AD69E222893866B7D822E6.cer
File:                     26FE684E8935466C02AD69E222893866B7D822E6.cer (raw, json)
Hash identifier:          FIVuxjAHcUOg11NG+c06Nc+seo+YfHEvbPcEt1TvZec=
Subject key identifier:   26:FE:68:4E:89:35:46:6C:02:AD:69:E2:22:89:38:66:B7:D8:22:E6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       284DEAD67684D09B134C97D72D179698280AD916
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/26FE684E8935466C02AD69E222893866B7D822E6.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Feb 2025 21:45:54 +0000
Certificate not after:    Wed 18 Feb 2026 21:50:54 +0000
Subordinate resources:    IP: 36.50.216.0/23
                          IP: 2001:df3:7bc0::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4d:ea:d6:76:84:d0:9b:13:4c:97:d7:2d:17:96:98:28:0a:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Feb 19 21:45:54 2025 GMT
            Not After : Feb 18 21:50:54 2026 GMT
        Subject: CN=26FE684E8935466C02AD69E222893866B7D822E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:80:7e:5c:d5:42:0c:6b:6e:07:58:58:01:
                    47:5e:96:4f:a9:dd:5e:fe:0b:b1:65:54:83:b4:7f:
                    ce:cd:5e:16:f0:03:64:3f:4b:5d:e0:57:25:a2:20:
                    7a:27:6d:fb:f8:b6:06:ca:6b:51:b8:62:97:fa:f0:
                    65:26:a0:d1:84:9c:51:4a:43:34:5c:97:53:08:4d:
                    11:b2:22:af:60:59:f8:db:98:23:ce:21:22:dc:96:
                    d5:95:d0:af:e4:35:04:52:3c:0e:36:1c:37:94:40:
                    cb:c0:46:c2:ca:c7:18:9e:c2:6a:7b:b0:0f:42:67:
                    40:11:eb:9b:06:85:fb:4e:2e:fc:46:94:2a:79:c4:
                    16:e6:8e:4f:d2:a5:73:91:26:24:7d:21:b8:13:b7:
                    bb:75:22:18:60:7d:e0:15:69:2b:fb:fd:fa:63:01:
                    e6:cc:8c:61:7c:79:74:0e:e5:74:a5:5f:35:78:64:
                    5f:21:7a:3d:d1:f4:d5:26:62:57:50:c0:7e:d2:7e:
                    da:87:0c:79:16:b1:82:9e:0a:26:00:7d:ce:a5:36:
                    a3:79:6a:74:b9:d0:86:a0:de:20:68:cc:29:70:d1:
                    4e:b5:08:99:b5:1c:a0:64:d7:ab:3c:95:7e:21:9f:
                    f3:f5:14:68:5b:c2:e2:ae:8f:18:c0:95:39:09:d0:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:FE:68:4E:89:35:46:6C:02:AD:69:E2:22:89:38:66:B7:D8:22:E6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/26FE684E8935466C02AD69E222893866B7D822E6.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.216.0/23
                IPv6:
                  2001:df3:7bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:c1:9d:2e:6b:69:6e:11:c9:ff:0c:c3:44:91:93:a7:e2:
         ab:b9:ec:a2:99:44:ec:4e:a2:1b:d9:33:ce:1b:a4:bf:73:1d:
         89:2d:c2:3d:41:e0:85:37:54:8e:f9:41:7a:8a:5d:68:d2:ce:
         ea:84:d9:4b:d7:bf:f7:e3:c0:11:ea:67:2e:4b:8f:f4:a3:04:
         88:8c:c8:1a:98:ef:26:a8:3f:7a:74:85:71:eb:e1:c9:7a:1c:
         f5:4e:12:b1:c6:cc:37:bb:29:1a:80:63:7f:12:8a:a1:af:59:
         aa:8d:73:74:09:a6:c4:3f:63:ce:bd:a6:c2:a1:0f:cb:f3:df:
         4b:81:e6:f1:43:78:02:9a:91:6a:90:fb:d6:99:f1:6b:97:85:
         38:60:54:cf:b3:be:d5:02:5a:ff:bf:a7:72:c7:20:db:3e:09:
         bb:bf:17:6e:3b:47:f2:f4:4a:28:35:86:ba:a4:75:22:f0:b0:
         b4:85:c1:d3:75:d3:c4:2f:f6:98:88:1f:69:1d:cd:76:6a:17:
         84:9f:1a:11:49:38:89:67:32:56:09:0e:2b:f5:c0:a4:20:f7:
         8f:25:b8:76:08:6e:b8:1d:3b:5f:9b:87:4a:a8:d0:e4:3c:b1:
         a4:d0:d7:6d:30:fc:3c:af:6e:66:e2:82:52:e3:f7:d0:d5:3e:
         c6:f9:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:09 2025 by rpki-client