Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
File:                     466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer (raw, json)
Hash identifier:          vzUfdutVikQJkVRgWGx0LreOYlMgUK6VFM7z37/K154=
Subject key identifier:   46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       37301149543F9DC658B07946B132597C748279E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Jun 2025 03:19:08 +0000
Certificate not after:    Thu 04 Jun 2026 03:24:08 +0000
Subordinate resources:    IP: 103.185.110.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 11:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:30:11:49:54:3f:9d:c6:58:b0:79:46:b1:32:59:7c:74:82:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  5 03:19:08 2025 GMT
            Not After : Jun  4 03:24:08 2026 GMT
        Subject: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:14:a7:e8:6b:93:26:f9:21:d5:87:0d:cb:
                    f9:bc:ec:a6:36:b2:48:11:b0:15:cb:f4:c1:83:56:
                    94:f9:a3:f1:01:22:ed:ec:01:74:ba:26:e2:90:4d:
                    10:20:ef:dc:b5:14:3e:67:7c:bf:08:2b:b0:f0:03:
                    0f:24:d2:f2:02:81:c2:9f:0c:35:fc:3b:49:d4:33:
                    57:67:bc:65:a8:0b:15:26:ae:0a:d1:74:75:9d:aa:
                    37:32:a4:4b:9c:69:6d:74:22:0f:88:0d:19:b9:59:
                    15:17:e6:ea:0b:6d:09:5c:05:ac:8d:58:0e:e2:c8:
                    42:58:54:92:7c:55:a9:f0:06:09:2f:50:2e:56:c5:
                    c9:eb:4b:6d:8d:21:bb:d6:29:0c:89:19:71:7e:c1:
                    75:e4:5b:32:06:78:78:58:79:cf:38:d5:dd:42:3a:
                    40:8b:d9:71:32:cf:26:c8:d8:d0:de:ac:38:ff:dc:
                    49:30:96:77:44:16:0c:e5:0d:55:75:f1:5b:c7:e1:
                    0e:d7:39:24:a2:b9:08:2f:fe:e7:40:7f:be:ee:43:
                    5a:07:30:e5:d9:56:91:e3:4f:cc:d6:60:8f:98:d2:
                    42:7e:ea:92:6e:53:22:e9:d9:0a:a0:32:44:f7:a8:
                    29:c9:4a:b1:96:32:c6:16:da:71:83:7b:60:1d:6b:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:07:00:a6:7c:49:4f:f0:c9:de:e8:7d:f6:fd:26:d6:5e:
         17:ad:1d:5b:ef:8e:ac:ad:8f:b3:cc:d1:0c:3c:cb:e7:a0:d2:
         a8:75:4c:59:cc:84:99:1c:5d:ca:e9:58:ed:09:b4:69:91:f6:
         cb:1a:51:a3:23:83:50:cf:58:46:e8:de:9d:1d:96:11:50:69:
         9b:6f:d8:9a:db:30:bd:32:21:61:85:e6:9d:ae:fd:fc:48:1b:
         7f:94:ce:cb:4d:1d:72:aa:b7:e9:c0:e8:f1:1b:85:1e:8e:ea:
         7a:79:e4:4b:ea:a7:3b:9d:b8:ca:9c:df:e2:93:25:9b:a8:5b:
         a4:a9:f4:85:0f:41:81:26:de:e2:76:32:2e:d1:a0:c2:a7:ad:
         40:aa:a7:78:53:07:1b:db:96:bd:5b:af:f9:84:4f:88:94:83:
         07:64:44:21:f1:cc:b5:39:4a:1d:2a:c5:3e:ad:01:43:6f:6c:
         fc:d3:c9:9b:41:69:51:8d:47:f7:64:34:94:1b:48:17:63:6f:
         d1:8b:6a:1b:2b:d2:53:46:f9:27:2c:c0:2e:d4:d4:3f:97:d1:
         60:b5:fb:3e:99:61:24:95:df:91:0f:8c:2f:0e:f9:2d:31:b2:
         75:f9:2b:57:b8:15:f2:cd:ac:ef:24:e4:de:a2:21:61:59:01:
         d2:b6:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:41 2025 by rpki-client