Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer
File:                     809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer (raw, json)
Hash identifier:          4kqZhIN90JxTTPpvX4iNy3VCh5A8JHPvNNsoQeR+byM=
Subject key identifier:   80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       19821AE4C432244B51961E5B0FDE43D39C9C9AE1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Jul 2025 15:57:52 +0000
Certificate not after:    Fri 24 Jul 2026 16:02:52 +0000
Subordinate resources:    IP: 103.62.202.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 10:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:82:1a:e4:c4:32:24:4b:51:96:1e:5b:0f:de:43:d3:9c:9c:9a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 25 15:57:52 2025 GMT
            Not After : Jul 24 16:02:52 2026 GMT
        Subject: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:17:4e:db:85:5f:56:f7:3d:1e:3c:22:d2:
                    70:a3:3b:11:1e:2e:ce:1d:05:fc:80:53:54:94:4b:
                    f5:80:e3:28:71:f0:3f:55:cc:98:3f:11:38:20:a4:
                    6d:64:40:5a:74:fa:d1:61:59:ab:de:9b:39:2d:44:
                    de:2b:86:02:94:6a:84:c5:76:3e:43:6b:75:2f:a8:
                    07:db:c5:cc:23:93:e6:8d:aa:34:6c:ce:36:82:22:
                    f0:61:1b:50:42:e7:d3:d5:9c:4b:95:1f:b5:bc:ae:
                    ad:77:09:ff:13:0d:c7:d8:ec:42:6d:6b:e6:7b:cb:
                    83:37:36:22:f6:f5:d9:57:1b:95:dc:df:4b:25:8d:
                    57:3d:aa:aa:ea:ca:69:20:72:c1:45:f5:2c:b8:c8:
                    9a:20:32:f6:ab:50:9f:9d:cd:13:a4:84:67:29:e7:
                    7d:c1:74:97:6d:55:d9:19:a4:5e:0a:c4:24:9f:5e:
                    a9:25:90:00:1d:bf:36:bd:ca:76:e1:26:cc:d5:fd:
                    9a:27:32:4f:1d:3f:ab:f6:4c:82:57:97:d1:4c:0e:
                    3d:61:e0:c9:7c:ca:9e:15:84:b5:7e:c2:4b:34:c1:
                    ec:7c:92:e0:d8:e4:73:42:bf:c8:14:0e:b2:b5:f7:
                    69:87:ab:af:d4:fd:bd:7c:4f:40:0b:e5:88:b1:ec:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:43:8a:a1:84:82:88:b3:1f:34:8b:f8:2f:89:e1:3a:e3:da:
         6e:e3:d7:ee:fd:d8:af:08:ff:ce:f9:9e:63:06:c5:b5:78:bd:
         10:e8:b1:cf:9f:9e:d5:05:6b:26:11:f5:19:98:c4:9b:cb:25:
         85:d8:2d:fd:44:ee:f4:c8:be:ab:67:b4:07:f9:49:76:60:1b:
         0f:92:0b:d0:1a:6d:bf:72:9a:b3:d7:b5:6e:d6:92:38:c4:7e:
         ac:8f:b3:e4:d1:2d:d0:e2:bf:f6:57:68:c6:37:29:73:0f:12:
         cd:83:ed:a0:65:6d:55:af:e6:09:18:4b:cf:ae:28:6b:da:45:
         e2:1d:b1:7b:97:92:02:66:2c:b5:8e:d9:03:a3:db:cf:86:d1:
         55:8d:02:60:30:02:ef:c4:52:a7:b4:43:3c:5a:aa:b8:fa:d3:
         bc:9b:5d:92:84:9b:8b:c8:d3:41:29:be:a9:40:a5:1a:cf:9b:
         13:a7:58:ac:06:8c:d9:90:65:52:ec:6a:5e:86:2f:5b:c4:96:
         4a:26:6f:f1:4c:97:a0:c5:44:9e:b9:02:e1:29:8c:d6:37:df:
         27:0d:9e:3a:24:9d:96:e0:c3:99:5a:9d:a9:cc:70:0f:4b:71:
         27:92:93:a1:a3:5e:23:87:53:ab:24:34:78:4e:3c:ef:12:5f:
         c4:4f:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:46:42 2025 by rpki-client