Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
File:                     73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer (raw, json)
Hash identifier:          z3eaHEj0PbYpKDqGEqr+Uvq8HZb1itLEnGaNw66BOTY=
Subject key identifier:   73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       08160C768217E074F4D5D955DBA7EB87D6A029C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Sep 2025 21:23:41 +0000
Certificate not after:    Wed 16 Sep 2026 21:28:41 +0000
Subordinate resources:    IP: 103.55.254.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 17:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:16:0c:76:82:17:e0:74:f4:d5:d9:55:db:a7:eb:87:d6:a0:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 17 21:23:41 2025 GMT
            Not After : Sep 16 21:28:41 2026 GMT
        Subject: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:c9:db:8d:ad:0f:e5:b1:c9:aa:c2:49:1e:
                    49:74:cd:ac:be:db:38:10:67:e4:6c:78:d1:1f:06:
                    80:8a:40:61:1f:7f:90:36:e5:84:c2:e9:f6:e4:a9:
                    a5:4a:92:5d:fb:14:09:d5:b8:9f:e7:47:37:c5:e9:
                    4f:8a:fe:1b:6f:db:d7:42:65:e8:6c:86:bc:d6:98:
                    e3:b8:09:6e:e0:84:d6:97:31:04:41:ca:11:30:e6:
                    4f:b2:ba:34:a6:94:51:37:3b:86:8b:90:b7:a9:1f:
                    0f:8f:ed:5c:51:fb:d8:e4:22:24:e2:d1:07:ab:56:
                    a3:dd:1c:9e:92:f7:9c:c2:07:b2:9a:ae:a1:84:90:
                    ae:01:c0:d4:e4:71:18:eb:11:46:f2:a6:44:ef:6f:
                    0a:cb:d0:de:43:14:17:82:89:fa:c3:2a:20:37:ef:
                    54:6e:22:23:2e:cc:a2:e6:7e:67:a0:d1:a2:e4:ca:
                    21:a5:25:07:84:ff:52:02:02:43:ce:42:cc:3c:11:
                    88:c7:61:a7:01:23:61:d9:df:cb:2d:3a:e5:e9:8c:
                    92:b1:df:83:77:74:9c:1b:4b:16:34:82:25:e0:33:
                    1e:6e:7e:3c:1e:bb:39:d3:5c:df:2e:1f:e2:f9:4f:
                    2d:9b:70:a9:a6:bd:56:16:01:97:29:a3:30:ff:87:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:9b:a7:b0:bb:b2:d6:53:0b:69:d5:4f:b7:b0:95:22:38:
         08:4c:35:d1:56:ec:66:52:68:9f:75:c3:a6:c1:97:32:cb:81:
         12:e3:80:86:f3:a9:93:b6:82:24:bc:37:c2:bf:64:34:a1:43:
         3d:78:48:c9:52:d3:cf:de:2b:ea:37:79:39:b0:ce:5a:fe:f1:
         20:d8:63:75:f5:65:42:c3:23:39:cb:4c:73:49:71:a9:d8:32:
         b0:89:40:a5:01:3f:71:22:35:d2:b3:af:dc:0e:46:81:26:26:
         86:dc:26:b6:4d:37:1c:ec:00:3e:f9:09:f1:f6:a1:6e:ca:f1:
         66:da:ae:01:6b:02:87:26:e1:99:4e:d6:8a:64:18:ba:11:0f:
         3e:fa:fd:79:e2:66:d4:d6:92:42:1b:07:06:cd:a2:52:6e:2d:
         6d:c4:66:be:38:45:ec:fb:33:5e:18:40:cf:28:a7:d1:f9:b6:
         39:cf:f5:2c:06:de:19:40:3d:af:ec:db:07:1b:9a:0a:b7:83:
         3a:a0:fc:11:1f:c0:6e:27:97:ed:d6:85:92:7c:e3:9b:fc:17:
         f1:69:f7:7f:ca:a3:f3:59:1f:e6:5d:58:09:c9:3e:37:c0:7b:
         ed:67:cb:94:a3:c4:13:13:05:17:d9:5c:e4:5a:88:ca:2b:4d:
         46:93:53:80
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUCBYMdoIX4HT01dlV26frh9agKcAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNzIxMjM0MVoX
DTI2MDkxNjIxMjg0MVowMzExMC8GA1UEAxMoNzMyNzlEQURCNEVCOUIzMUI4OEND
QUI1RjY4M0REQTA1NUY0RjBBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPEayduNrQ/lscmqwkkeSXTNrL7bOBBn5Gx40R8GgIpAYR9/kDblhMLp9uSp
pUqSXfsUCdW4n+dHN8XpT4r+G2/b10Jl6GyGvNaY47gJbuCE1pcxBEHKETDmT7K6
NKaUUTc7houQt6kfD4/tXFH72OQiJOLRB6tWo90cnpL3nMIHspquoYSQrgHA1ORx
GOsRRvKmRO9vCsvQ3kMUF4KJ+sMqIDfvVG4iIy7MouZ+Z6DRouTKIaUlB4T/UgIC
Q85CzDwRiMdhpwEjYdnfyy065emMkrHfg3d0nBtLFjSCJeAzHm5+PB67OdNc3y4f
4vlPLZtwqaa9VhYBlymjMP+Hl/sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHMnna2065sxuIzKtfaD3aBV9PCpMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by83YzYzNmE0Ni0zOGZmLTQ0OTYtOTcyMS04YzAzY2YwNDYzNDUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjNjM2YTQ2
LTM4ZmYtNDQ5Ni05NzIxLThjMDNjZjA0NjM0NS8wLzczMjc5REFEQjRFQjlCMzFC
ODhDQ0FCNUY2ODNEREEwNTVGNEYwQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnN/4wDQYJKoZIhvcNAQELBQADggEBAGCsm6ewu7LWUwtp1U+3sJUiOAhMNdFW
7GZSaJ91w6bBlzLLgRLjgIbzqZO2giS8N8K/ZDShQz14SMlS08/eK+o3eTmwzlr+
8SDYY3X1ZULDIznLTHNJcanYMrCJQKUBP3EiNdKzr9wORoEmJobcJrZNNxzsAD75
CfH2oW7K8WbargFrAocm4ZlO1opkGLoRDz76/XniZtTWkkIbBwbNolJuLW3EZr44
Rez7M14YQM8op9H5tjnP9SwG3hlAPa/s2wcbmgq3gzqg/BEfwG4nl+3WhZJ845v8
F/Fp93/Ko/NZH+ZdWAnJPjfAe+1ny5SjxBMTBRfZXORaiMorTUaTU4A=
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:00:04 2025 by rpki-client