Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer
File:                     6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer (raw, json)
Hash identifier:          HJIkBIkTnOHy9Nuq863a2bnMGhSg2+e1VSDe5cmQXQY=
Subject key identifier:   6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       403D3FE11F9452D727210C4370755563E556C9AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Aug 2025 07:33:00 +0000
Certificate not after:    Fri 31 Jul 2026 07:38:00 +0000
Subordinate resources:    IP: 103.101.194.0/23
                          IP: 103.103.180.0/23
                          IP: 2001:df2:ab00::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 17:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3d:3f:e1:1f:94:52:d7:27:21:0c:43:70:75:55:63:e5:56:c9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  1 07:33:00 2025 GMT
            Not After : Jul 31 07:38:00 2026 GMT
        Subject: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:21:d1:be:2c:06:4c:39:9e:e8:15:6c:56:
                    e7:ef:a7:cb:d1:18:87:f3:f1:39:eb:dd:36:13:21:
                    1e:d6:ad:06:b3:76:66:e6:05:34:4e:c6:22:cc:ac:
                    fb:00:39:ae:a9:38:f3:50:f7:0a:87:9c:af:13:cc:
                    8f:08:f4:fd:8b:95:a9:b7:a1:8f:de:1a:28:c8:01:
                    3e:94:c5:2b:cc:a2:3a:62:ee:a9:82:18:a3:b6:78:
                    d4:8a:f4:38:01:f1:17:b2:cb:aa:3a:1c:61:2f:0b:
                    18:14:d5:62:b0:4b:ee:fc:3f:01:e9:b9:3c:91:01:
                    93:48:d6:db:0e:cb:d9:d4:0e:65:e1:6c:a2:f4:5c:
                    51:bb:8b:b6:42:0b:d5:98:b5:42:d5:93:e5:e9:cc:
                    ad:69:2d:d5:07:b1:56:70:d0:5e:67:61:3b:f9:fd:
                    09:44:0e:3c:d0:d1:d3:38:be:46:a0:21:a9:3b:c4:
                    fd:ad:ff:39:ca:4f:f4:47:ac:71:ef:cb:6e:33:ba:
                    cc:e9:87:0c:6e:29:0c:14:c0:d2:11:03:54:24:02:
                    e8:4b:e6:cc:27:df:bf:5d:7b:1b:cf:c1:7e:ab:a2:
                    df:01:88:a2:aa:e0:50:85:a3:2e:ca:fb:c0:83:f0:
                    d6:c5:11:f3:2d:4b:01:97:6b:29:e7:27:f5:53:c4:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.194.0/23
                  103.103.180.0/23
                IPv6:
                  2001:df2:ab00::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:a5:e5:0b:b6:4b:eb:ca:22:3f:bd:2c:9a:f0:f2:f0:23:74:
         bf:8b:84:4a:ac:71:ec:74:06:1a:ff:4b:bb:45:5f:ba:74:fb:
         f4:03:97:66:ab:0e:2c:76:73:22:d6:d1:f2:f1:c3:25:49:1d:
         63:b8:25:9a:a5:bd:a4:0a:e0:27:e5:f5:97:26:af:6a:fd:d7:
         9a:5f:d3:cd:a8:07:ab:62:3d:1a:23:2b:ef:cd:32:eb:83:f3:
         e5:8f:f5:14:b5:77:a0:a4:4e:c0:c0:fa:16:ab:20:a8:50:f0:
         c8:01:48:3a:74:29:bc:87:6c:e0:d1:87:49:88:3d:d7:e0:02:
         02:88:c1:20:08:f0:3b:f9:67:3b:12:ef:3c:e3:38:bf:fa:44:
         36:14:58:8f:e3:a8:66:df:20:8c:1e:de:8a:b1:63:06:3f:ed:
         27:d3:47:78:90:7e:10:6b:30:5d:20:0a:71:ce:e8:49:91:bd:
         b5:58:f7:13:50:6f:c7:6d:63:25:29:17:97:91:e6:46:a2:fa:
         f0:03:af:36:07:b0:69:fb:44:d2:ab:4b:cd:28:37:bc:8e:6e:
         0a:32:10:74:e9:d8:a7:6a:5d:be:1f:ef:5c:f3:ac:74:53:ab:
         5d:a3:f6:fc:30:6b:79:a5:08:92:89:65:2c:83:fa:c5:cf:94:
         01:c2:06:b3
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIUQD0/4R+UUtcnIQxDcHVVY+VWyaowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwMTA3MzMwMFoX
DTI2MDczMTA3MzgwMFowMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZD
RUU1NDM5Q0ExMjcwRERDQkM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtWIdG+LAZMOZ7oFWxW5++ny9EYh/PxOevdNhMhHtatBrN2ZuYFNE7GIsys
+wA5rqk481D3CoecrxPMjwj0/YuVqbehj94aKMgBPpTFK8yiOmLuqYIYo7Z41Ir0
OAHxF7LLqjocYS8LGBTVYrBL7vw/Aem5PJEBk0jW2w7L2dQOZeFsovRcUbuLtkIL
1Zi1QtWT5enMrWkt1QexVnDQXmdhO/n9CUQOPNDR0zi+RqAhqTvE/a3/OcpP9Ees
ce/LbjO6zOmHDG4pDBTA0hEDVCQC6EvmzCffv117G8/Bfqui3wGIoqrgUIWjLsr7
wIPw1sUR8y1LAZdrKecn9VPEPPsCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGogDW/FQ02tYQbO5UOcoScN3LySMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8yOGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4ZDBmY2E4
LTVjMmQtNGUzNS1iZDdkLWI0NDhhYTc1ZjJiZS8wLzZBMjAwRDZGQzU0MzREQUQ2
MTA2Q0VFNTQzOUNBMTI3MEREQ0JDOTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD
BAFnZcIDBAFnZ7QwDwQCAAIwCQMHACABDfKrADANBgkqhkiG9w0BAQsFAAOCAQEA
IKXlC7ZL68oiP70smvDy8CN0v4uESqxx7HQGGv9Lu0VfunT79AOXZqsOLHZzItbR
8vHDJUkdY7glmqW9pArgJ+X1lyavav3Xml/TzagHq2I9GiMr780y64Pz5Y/1FLV3
oKROwMD6FqsgqFDwyAFIOnQpvIds4NGHSYg91+ACAojBIAjwO/lnOxLvPOM4v/pE
NhRYj+OoZt8gjB7eirFjBj/tJ9NHeJB+EGswXSAKcc7oSZG9tVj3E1Bvx21jJSkX
l5HmRqL68AOvNgewaftE0qtLzSg3vI5uCjIQdOnYp2pdvh/vXPOsdFOrXaP2/DBr
eaUIkollLIP6xc+UAcIGsw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:39 2025 by rpki-client