Certificate

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer
File:                     75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer (raw, json)
Hash identifier:          EyYCNwYdhZZiw4EXrpEx/9hRspdu4gWBVKMyaOwUk3A=
Subject key identifier:   75:FF:16:C5:74:0B:EF:15:82:FE:CB:48:A8:BA:AF:F7:69:D3:F2:0C
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       3F651DD7F43C5F5CB1A49C625B34324CF3170E1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Oct 2026 09:52:54 +0000
Certificate not after:    Mon 18 Oct 2027 09:57:54 +0000
Subordinate resources:    AS: 64311
                          IP: 103.80.96.0/22
                          IP: 2400:5040::/32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:65:1d:d7:f4:3c:5f:5c:b1:a4:9c:62:5b:34:32:4c:f3:17:0e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Oct 19 09:52:54 2026 GMT
            Not After : Oct 18 09:57:54 2027 GMT
        Subject: CN=75FF16C5740BEF1582FECB48A8BAAFF769D3F20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:5b:da:e0:86:c8:ef:a7:fd:0d:3d:79:b0:
                    e6:1c:0e:12:66:87:e4:74:59:4c:5a:5b:7b:9a:f9:
                    8c:4c:e9:b0:19:80:c9:c6:95:07:0c:ee:c2:42:bb:
                    e2:f2:61:93:d6:15:7e:e8:13:5a:80:b6:5e:70:35:
                    f7:76:63:2a:80:11:ba:c5:c0:e2:2d:99:0f:6c:c0:
                    22:bc:73:b0:55:bc:62:01:4f:73:3f:63:91:b6:57:
                    76:ad:0c:af:0d:46:fd:f5:b6:6f:cd:aa:5e:07:c2:
                    b5:86:6f:fd:e5:b4:1e:ed:a5:e0:75:ee:c7:ca:c9:
                    f2:4e:a4:86:01:b4:3d:be:42:7f:6a:80:5d:aa:cc:
                    ae:6f:e8:cb:1b:16:2b:0d:27:93:5a:e5:35:db:ca:
                    45:f1:53:4d:e6:db:6a:e2:06:61:7e:4e:04:91:2b:
                    f5:84:d5:cc:f3:a8:58:b5:78:09:f5:fc:40:0e:91:
                    f6:9a:71:a0:6b:80:06:83:ae:4f:ee:a8:7a:d7:2a:
                    3a:42:0d:a3:a4:7e:26:1e:ef:72:bb:8b:6c:2f:06:
                    0d:be:25:59:c9:aa:19:64:db:66:6c:c5:c6:b7:85:
                    16:20:a3:a2:73:76:f9:8e:54:54:d7:79:59:fd:b4:
                    f2:6d:92:15:5d:3a:88:d5:73:f4:c9:c9:f7:ed:6f:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:FF:16:C5:74:0B:EF:15:82:FE:CB:48:A8:BA:AF:F7:69:D3:F2:0C
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.96.0/22
                IPv6:
                  2400:5040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64311

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:83:49:23:88:ce:3d:00:ea:e2:08:82:d0:f9:c7:97:9b:
         fd:91:f0:3d:62:2b:b2:dd:4d:b6:98:5a:4b:75:29:20:4e:64:
         42:72:26:54:05:65:18:29:d5:ba:81:2e:20:b9:6b:aa:f4:ed:
         4d:e2:5c:1d:b7:4e:59:40:95:06:be:77:a9:a3:21:49:17:1d:
         a7:7b:08:dd:9d:6f:4a:fd:45:57:75:71:cf:8d:dd:7a:e4:71:
         6a:56:e6:5d:ec:a2:4d:34:2f:c8:ab:c3:01:a0:da:db:9b:d0:
         95:c5:7a:44:fe:90:10:f1:71:ca:29:e8:6e:87:e0:b0:7d:82:
         84:b8:de:f1:e2:cb:7f:34:07:fe:45:bc:16:d7:cf:76:7a:b5:
         c5:a1:1c:28:d8:5e:4b:4c:11:0d:db:14:5e:6f:24:03:54:dd:
         1f:36:7c:f5:6b:4d:89:4c:49:2a:78:61:22:6f:e0:b3:58:6f:
         a9:c3:6b:d1:b1:ad:f7:79:bb:8c:c7:a7:b4:89:0c:29:a1:ec:
         e0:43:d1:e7:6b:5c:1c:7d:b7:e3:39:d2:5a:f8:3a:d1:e9:14:
         80:4a:8e:62:f5:0c:50:43:c0:96:52:b6:9d:7c:74:19:ca:cf:
         1a:52:46:00:fa:ec:a1:2a:fd:e5:a5:e8:30:2f:34:2f:55:b2:
         bc:b1:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:54 2026 by rpki-client