Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
File:                     3B6C011787F4528DAFAEE19B8408D9405F030E61.cer (raw, json)
Hash identifier:          0EVD6LvEC9wwkboa+wmmJulfqvu7+fkAFXiLdkfF6sI=
Subject key identifier:   3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0230CFC1C5396EC9EAC066F460266BF331C8CADB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 14 Feb 2026 03:02:42 +0000
Certificate not after:    Sat 13 Feb 2027 03:07:42 +0000
Subordinate resources:    IP: 103.115.99.0/24
                          IP: 2001:df5:2500::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:30:cf:c1:c5:39:6e:c9:ea:c0:66:f4:60:26:6b:f3:31:c8:ca:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 14 03:02:42 2026 GMT
            Not After : Feb 13 03:07:42 2027 GMT
        Subject: CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:b9:94:23:54:dd:c4:91:e2:d5:9b:5e:cd:
                    44:67:32:9e:0b:82:38:02:b3:46:e9:e1:66:6f:44:
                    9f:c8:c0:9b:6f:0b:89:8f:9a:6f:38:bf:eb:73:75:
                    e2:e4:fd:5c:de:5f:62:e3:49:2d:98:c6:83:ad:25:
                    bc:4d:1f:7f:08:59:78:2c:b4:f2:cf:e5:73:4b:07:
                    a5:4d:a3:53:c0:b4:3e:10:54:bd:9f:cc:c7:64:b8:
                    7f:0f:4c:13:2b:06:20:4e:c6:03:2e:84:ae:d4:8a:
                    66:e9:4d:b4:5b:9a:ec:0f:55:98:59:66:72:c0:56:
                    b7:00:25:fb:17:54:1f:81:89:ac:ad:d1:ad:a6:df:
                    7f:13:32:66:36:65:40:c8:be:e6:d5:04:de:18:a2:
                    11:1e:ae:89:90:fe:04:6e:35:38:7d:44:db:d2:95:
                    7b:0b:d9:aa:1a:69:ff:09:52:84:ee:b3:99:44:dc:
                    eb:76:0e:73:06:2d:0f:cf:ff:5a:74:b8:e4:3e:ae:
                    df:3b:0b:6d:b6:90:28:19:a0:cb:1a:c3:1c:75:4a:
                    38:f7:5a:17:83:88:e3:83:23:9b:36:64:26:92:d1:
                    55:77:7f:c7:dc:ca:84:94:60:e2:f8:ed:f3:1f:a8:
                    63:5d:6a:48:12:3b:00:1b:95:4f:46:3e:d5:67:fa:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.99.0/24
                IPv6:
                  2001:df5:2500::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:bf:52:71:96:5c:0d:86:4a:27:9e:a7:3b:c9:65:9d:b2:
         f8:37:9c:7f:f5:8c:d5:d0:80:d9:f2:76:9f:a0:06:09:b6:7a:
         6d:ce:80:63:12:dc:67:57:54:8d:91:23:8d:ca:d6:25:38:f7:
         6e:58:14:b9:1b:0a:66:fe:f2:95:ec:c5:52:8f:a2:fd:fa:5b:
         d5:42:0d:f8:6c:02:b7:b2:b1:2e:e0:ac:77:08:cc:41:fe:e6:
         84:c6:d0:f5:93:9b:07:94:3b:20:f9:4b:34:8d:23:53:4b:a3:
         5d:10:93:bd:c3:4e:be:30:10:10:26:a1:7c:bf:d6:09:0c:23:
         f5:4c:14:72:c4:c7:84:b3:14:de:31:f8:79:b8:e7:96:07:ae:
         e7:ad:7b:b7:44:84:fe:e7:35:a6:76:76:a7:49:7a:5a:29:88:
         d4:7d:e9:cd:77:8d:7d:2d:5d:a7:89:3e:6c:a2:9e:5c:97:9d:
         9f:46:1f:1b:24:00:b2:fb:3d:38:e2:9d:dd:fc:e5:44:eb:17:
         5e:3a:57:41:fa:1c:1c:1f:3d:99:28:15:1c:dc:df:be:c5:d5:
         48:d4:5d:d3:90:27:ca:0c:2e:3d:e5:d5:a2:3e:13:cd:44:39:
         ef:e7:87:46:d6:dc:67:7d:c5:22:08:30:d6:ea:de:a1:af:ad:
         4f:29:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:10 2026 by rpki-client