Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
File:                     69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer (raw, json)
Hash identifier:          qXDiE70qxDl7yIYUpHDTu0QRANQprzDutu31+i+KapM=
Subject key identifier:   69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23F17CD2E6B86C343113BC25EB1F96D7CFD38A7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 28 Feb 2026 01:41:02 +0000
Certificate not after:    Sat 27 Feb 2027 01:46:02 +0000
Subordinate resources:    IP: 103.189.206.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f1:7c:d2:e6:b8:6c:34:31:13:bc:25:eb:1f:96:d7:cf:d3:8a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 28 01:41:02 2026 GMT
            Not After : Feb 27 01:46:02 2027 GMT
        Subject: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:77:07:6d:a9:6c:0d:1c:c1:39:8c:7d:a8:
                    4b:fc:6e:01:54:05:c7:44:ca:db:4d:30:a7:d6:6e:
                    67:12:d1:a7:7d:2e:4a:2a:8e:c0:85:8c:2b:14:12:
                    d3:9f:60:33:63:e3:7c:71:06:54:62:e6:aa:fd:a6:
                    4a:58:ff:bb:c5:7c:7d:65:d7:56:fb:70:70:4c:cf:
                    a8:42:c3:a4:2b:6e:0c:89:18:86:bc:4c:37:ea:ec:
                    2b:b7:e8:9e:fd:e4:7f:b6:c7:82:6a:f0:97:59:f3:
                    04:d8:6e:02:68:a6:57:64:35:d9:17:a3:15:12:f4:
                    44:9a:86:25:4a:72:cc:8e:b6:91:17:48:e4:50:7a:
                    5f:11:36:06:a2:f5:34:00:18:b8:97:c2:58:59:2f:
                    5d:df:2c:05:01:74:28:4d:ca:df:b6:4b:45:73:ce:
                    18:e0:a4:55:e6:ac:fd:e2:f0:eb:79:12:90:8e:96:
                    b8:b7:d0:60:e6:07:88:1b:b9:fe:c4:c0:60:57:5e:
                    09:ac:b3:0f:1b:8a:0a:b7:c5:25:2a:1e:c9:f5:e7:
                    ed:05:09:cd:0a:94:a1:8d:bf:a3:69:52:7e:4b:eb:
                    73:02:19:e8:cc:b8:e6:1d:5b:51:e4:6e:37:8b:2e:
                    6c:25:df:fe:04:ae:50:04:ac:3c:ae:bf:c5:a2:ef:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:55:77:95:7e:97:01:26:aa:54:f3:5f:a4:e9:82:89:28:37:
         46:70:b2:cd:1b:0b:58:12:bd:f6:7b:fe:2a:06:dc:2a:46:ae:
         97:0c:e9:76:0b:c8:93:d7:aa:5d:34:50:c5:67:a1:7c:3c:85:
         04:21:0f:cb:fc:6e:10:b8:2b:ef:84:11:31:7b:2c:e2:90:31:
         e1:39:8b:47:e4:b0:84:78:89:df:9e:2c:67:aa:b9:2b:72:eb:
         92:a4:06:47:f7:51:ff:1a:5b:60:44:a1:6a:43:7b:92:58:73:
         a7:5c:f0:17:48:3f:57:5e:76:d1:56:6e:5e:f5:70:5a:3f:e4:
         47:91:d3:85:fa:15:b8:e7:7c:26:50:f0:c3:c4:fa:b8:78:7e:
         97:7d:c6:5c:ca:29:98:08:ac:37:34:07:66:06:88:06:09:a4:
         14:fd:c8:2a:d0:c9:6f:ab:a0:de:f3:7e:b1:43:69:4d:05:37:
         1a:fc:9c:d6:c9:6b:75:9d:cd:15:95:23:1e:e7:34:b7:dc:57:
         7f:20:0c:8a:6c:05:7e:8e:ba:ac:36:74:df:87:be:cc:cf:a0:
         e6:25:7b:dd:2d:e6:c5:51:99:06:e2:c8:63:7f:0d:89:d8:25:
         89:bb:9b:4d:1d:f2:82:7c:9c:3f:41:df:b4:87:fd:1b:2b:fe:
         38:ab:7c:47
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUI/F80ua4bDQxE7wl6x+W18/TinowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyODAxNDEwMloX
DTI3MDIyNzAxNDYwMlowMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBB
RUNFREY5OTk5RUE1REFFRTQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOZIdwdtqWwNHME5jH2oS/xuAVQFx0TK200wp9ZuZxLRp30uSiqOwIWMKxQS
059gM2PjfHEGVGLmqv2mSlj/u8V8fWXXVvtwcEzPqELDpCtuDIkYhrxMN+rsK7fo
nv3kf7bHgmrwl1nzBNhuAmimV2Q12RejFRL0RJqGJUpyzI62kRdI5FB6XxE2BqL1
NAAYuJfCWFkvXd8sBQF0KE3K37ZLRXPOGOCkVeas/eLw63kSkI6WuLfQYOYHiBu5
/sTAYFdeCayzDxuKCrfFJSoeyfXn7QUJzQqUoY2/o2lSfkvrcwIZ6My45h1bUeRu
N4subCXf/gSuUASsPK6/xaLveQkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGmUXDhps+Qp1LCuzt+ZmepdruQpMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8xODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4MzFlZWI0
LWYzNTctNDVhNy05MjY1LTQyOGIwMDdhMDI3MC8wLzY5OTQ1QzM4NjlCM0U0MjlE
NEIwQUVDRURGOTk5OUVBNURBRUU0MjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnvc4wDQYJKoZIhvcNAQELBQADggEBAHFVd5V+lwEmqlTzX6TpgokoN0Zwss0b
C1gSvfZ7/ioG3CpGrpcM6XYLyJPXql00UMVnoXw8hQQhD8v8bhC4K++EETF7LOKQ
MeE5i0fksIR4id+eLGequSty65KkBkf3Uf8aW2BEoWpDe5JYc6dc8BdIP1dedtFW
bl71cFo/5EeR04X6FbjnfCZQ8MPE+rh4fpd9xlzKKZgIrDc0B2YGiAYJpBT9yCrQ
yW+roN7zfrFDaU0FNxr8nNbJa3WdzRWVIx7nNLfcV38gDIpsBX6Ouqw2dN+HvszP
oOYle90t5sVRmQbiyGN/DYnYJYm7m00d8oJ8nD9B37SH/Rsr/jirfEc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:42 2026 by rpki-client