Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
File:                     166B4918E7A1A1641E7C79C537833379E393522E.cer (raw, json)
Hash identifier:          I6UpwrJDYqWU9SqJ3uBzwoIfUNBxIYwkfK4p5p3mjg0=
Subject key identifier:   16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       754B918E803FC6881F1D75B0C1213BBBAE8EE5BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Aug 2025 04:08:14 +0000
Certificate not after:    Fri 31 Jul 2026 04:13:14 +0000
Subordinate resources:    IP: 103.174.180.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 13:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4b:91:8e:80:3f:c6:88:1f:1d:75:b0:c1:21:3b:bb:ae:8e:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  1 04:08:14 2025 GMT
            Not After : Jul 31 04:13:14 2026 GMT
        Subject: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:31:fe:f1:6f:d5:92:b1:0d:68:9b:fc:2c:
                    93:b7:89:8e:01:c9:bc:b9:6b:29:18:b6:65:02:a5:
                    4f:f6:6f:a6:ed:b1:21:f3:52:cd:89:d2:48:5c:9f:
                    73:df:94:69:f4:ed:a5:ac:4c:bf:26:79:37:b6:18:
                    68:11:f6:f2:ed:d5:2b:b6:88:01:de:9d:79:08:79:
                    ef:77:5d:7f:7d:11:b6:4b:cc:fa:31:64:0b:9a:06:
                    33:54:9f:30:9b:2c:24:50:a8:ab:f2:4f:bd:6a:fe:
                    45:1b:a3:8b:88:47:66:c0:76:0a:74:98:3a:55:65:
                    d8:f8:67:e3:e4:eb:f6:fc:76:25:b6:36:ef:00:1b:
                    9d:99:ec:be:44:57:96:d7:fc:c6:f0:b2:61:b3:98:
                    00:de:2b:21:a5:c0:42:25:bb:71:28:ea:65:6c:a4:
                    f6:75:3d:fe:25:26:a7:63:b4:75:6b:96:96:0b:bc:
                    e7:22:16:cf:22:31:9c:33:ac:c4:08:82:a9:56:5a:
                    5a:48:37:65:da:6c:6a:6d:94:54:3f:0e:9b:f0:9b:
                    82:59:10:c3:17:9a:31:3e:d9:33:9f:c8:ea:36:09:
                    15:62:a4:ca:d4:bc:14:66:70:86:72:2f:c0:bc:a5:
                    a1:b3:5a:c3:60:9d:e8:55:88:ec:48:62:35:74:42:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:7f:8b:95:1f:19:89:d6:77:e7:58:cb:59:94:55:f0:fe:
         5a:73:7f:43:0a:e0:72:59:41:e5:0c:b5:50:bc:c8:f7:fa:f0:
         da:44:a4:dc:cc:a7:4e:19:af:67:cc:ec:8f:e8:fe:40:7a:ca:
         be:56:b1:6f:86:66:39:52:a8:db:3f:66:07:43:39:f0:7c:16:
         c9:fd:f7:34:c8:02:16:15:c8:c2:d0:e9:1a:2b:0b:61:65:fe:
         78:be:65:8a:45:d3:86:3d:2d:ec:ac:eb:3b:53:46:ac:69:6a:
         53:d6:f8:f7:3f:6b:67:7d:32:b6:e5:ed:d4:be:2c:d1:f6:ed:
         74:61:52:96:51:07:5c:b7:c8:dd:b3:f8:a0:bd:f5:a0:84:7f:
         1f:72:a1:41:42:84:93:f0:c6:0c:a3:ec:9f:1d:b8:e6:0d:6a:
         97:ed:93:56:0b:70:a3:0f:fe:02:85:c6:4c:25:64:0b:3e:1c:
         c8:66:ce:47:b1:e4:ae:2a:ef:ed:40:04:dc:72:82:41:8a:e5:
         9d:8e:78:0b:11:b0:2e:6a:53:3a:de:63:42:37:8f:fc:81:56:
         53:f8:65:f6:01:a1:b2:24:6a:d8:66:b9:7d:04:c3:30:20:d0:
         12:d8:e0:14:94:75:d7:ae:68:4f:00:8e:51:e5:f9:ed:4f:68:
         b8:58:22:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:37 2025 by rpki-client