Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
File:                     2993EFF92300988A33773DD8C4B502F74B907112.cer (raw, json)
Hash identifier:          tXMkROvcVPttwJUY29OAz38ZchgWjW/eG6C8Obwzefg=
Subject key identifier:   29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       55BCE976A1EB535B00DECB0168CAEF8CC89CE3FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Jul 2025 07:27:53 +0000
Certificate not after:    Wed 15 Jul 2026 07:32:53 +0000
Subordinate resources:    IP: 103.105.76.0/22
                          IP: 2402:2c40::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 13:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:e9:76:a1:eb:53:5b:00:de:cb:01:68:ca:ef:8c:c8:9c:e3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 16 07:27:53 2025 GMT
            Not After : Jul 15 07:32:53 2026 GMT
        Subject: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:f3:c9:b9:d5:a5:92:6e:d5:18:2e:7a:70:
                    64:b7:8b:0d:26:2e:80:60:c8:b1:04:79:a4:4e:5b:
                    cb:f5:35:5e:84:a4:65:4f:23:ab:0f:3b:42:a6:f7:
                    da:75:a9:dc:84:47:11:3b:a3:ec:a0:54:82:29:6b:
                    67:69:91:00:6c:77:dd:45:c1:9e:13:06:e7:b9:77:
                    5e:27:57:35:04:0a:da:13:6f:4b:43:75:87:c3:d4:
                    9c:fc:ca:ef:d4:54:de:8c:57:96:33:fb:96:78:ee:
                    3a:e8:38:e7:c7:f3:96:af:55:a6:ca:07:3b:ec:19:
                    f3:1d:3c:26:01:6e:fb:c5:45:8b:42:35:46:ef:c6:
                    9b:ca:6f:53:43:a5:b6:27:45:be:f1:bd:94:6b:fb:
                    6e:b5:ae:be:27:d1:5c:75:78:f5:fd:e1:fc:a8:cb:
                    b3:0d:1e:f2:4a:6f:12:b6:9c:c4:fa:de:7a:fb:33:
                    e8:9f:1f:d5:61:d1:2b:c2:eb:e8:68:87:45:41:bb:
                    74:db:45:63:9a:3c:df:66:39:4f:72:3a:c3:a3:da:
                    f4:ad:12:35:0a:1a:b1:ce:26:f0:84:46:49:0a:cc:
                    f3:73:91:1e:cb:57:7f:4e:b5:8b:29:13:60:a7:a4:
                    b9:dd:03:87:72:fb:75:fb:88:74:96:3f:ad:47:08:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.76.0/22
                IPv6:
                  2402:2c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:7e:d8:81:f0:a3:80:26:fd:27:a7:21:36:cb:64:37:6a:
         93:b8:6c:c5:03:d9:81:d7:c5:33:4f:be:0f:55:71:98:eb:e4:
         8e:95:12:e0:db:b7:92:70:06:a7:af:9a:d7:f8:f3:9e:3a:83:
         52:24:02:e4:cc:c6:63:84:c5:de:25:2c:55:4b:13:73:c2:bb:
         48:45:3c:3b:6b:68:ae:90:ab:e8:81:09:0a:37:93:ce:84:6a:
         8c:0a:12:b6:f0:8c:09:af:53:b5:f8:b8:28:2f:d7:d4:b2:f3:
         85:7b:26:95:4e:48:64:de:5f:8b:98:84:83:a8:0b:5e:e1:91:
         61:3c:b6:fb:82:58:72:97:d9:48:ab:c0:c4:bf:fb:bb:79:1c:
         17:d4:ef:43:eb:75:4d:e5:90:ac:33:bc:be:11:b5:bd:ab:65:
         39:b4:ba:aa:40:36:09:36:3b:3e:85:bd:e3:f3:8f:c7:d6:d2:
         55:58:ad:73:ca:78:25:d8:b1:c8:2f:79:bc:f2:8c:ff:13:90:
         0e:80:2f:ea:77:d1:61:26:03:bd:ea:c3:e2:a2:39:ab:68:84:
         ce:f9:29:86:36:ef:c1:55:ff:26:df:58:8d:df:1f:10:6c:49:
         79:08:a8:ed:12:ae:75:fa:ad:d2:79:82:d2:f5:91:40:15:46:
         94:b8:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:16 2025 by rpki-client