Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
File:                     E0B1DDE4FA587276778B8ED650B682C82290CC74.cer (raw, json)
Hash identifier:          2Gci6mdbThbmtdFhfTirzBzVghGA4f/p4NVhqW0uHJE=
Subject key identifier:   E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       707F55058F46522D768D41E18D91DB98A5BF9754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Feb 2026 17:27:36 +0000
Certificate not after:    Mon 01 Feb 2027 17:32:36 +0000
Subordinate resources:    IP: 103.176.68.0/24
                          IP: 103.176.121.0/24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7f:55:05:8f:46:52:2d:76:8d:41:e1:8d:91:db:98:a5:bf:97:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 17:27:36 2026 GMT
            Not After : Feb  1 17:32:36 2027 GMT
        Subject: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:87:71:56:3e:f8:71:e9:17:0e:ae:85:ea:
                    bf:c1:f2:be:30:e9:d8:32:55:48:36:e3:80:b2:7d:
                    ff:5b:11:26:9a:91:e9:8a:b4:0e:00:6b:92:df:8c:
                    b7:ab:5b:9c:27:c4:35:b2:6d:73:9b:e0:c2:3d:63:
                    e9:19:fc:ff:29:ba:ae:2f:6d:56:0e:2b:b3:3f:e3:
                    e9:8f:59:f4:e1:9a:c1:4b:05:bb:cc:10:65:04:76:
                    f0:d4:a6:02:8d:8e:7a:08:4b:f2:81:06:dc:75:38:
                    ba:ff:f7:a7:df:3b:74:b2:25:19:5a:78:8c:58:6b:
                    15:05:88:c8:8f:78:a6:69:d9:45:fb:43:89:22:d0:
                    52:31:1f:3b:83:a8:9d:55:d6:2e:8f:60:7a:25:30:
                    35:a5:2f:ee:78:b4:7b:79:c0:fc:84:30:98:91:dc:
                    68:70:96:d9:dc:75:e4:be:01:06:d9:90:68:51:43:
                    09:5c:89:e9:45:07:06:c7:8e:99:86:d8:10:f2:00:
                    26:ac:12:cc:ed:8a:d3:13:14:13:09:a8:b1:d7:90:
                    c1:d0:d2:27:0b:6e:ac:4f:22:b3:45:38:ce:cf:ef:
                    23:ac:a0:ff:4d:45:71:15:ee:b5:36:19:3c:c6:f9:
                    90:1d:db:25:23:0e:d3:76:32:76:1b:48:b3:25:09:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.68.0/24
                  103.176.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:39:44:2b:28:1a:17:b5:8f:95:d4:42:c4:d2:01:84:46:
         2c:95:5f:86:77:44:d8:49:18:0c:fc:46:dd:f6:3b:50:2f:7a:
         91:5c:e3:2d:4f:f2:68:56:0c:f8:8d:ac:dc:a7:9b:27:87:e1:
         b2:4c:64:83:b0:d4:41:d9:d5:c7:3b:c6:1f:27:86:7b:24:0a:
         9a:73:04:eb:3a:0e:ae:0c:b1:5b:69:56:89:0c:09:e3:2c:fa:
         73:ed:21:7c:ab:87:07:db:f8:f4:c2:96:9e:c3:69:f6:4e:c3:
         e0:7d:3a:ae:f0:5b:1b:76:ed:57:c4:2a:42:12:f0:90:1a:8d:
         29:2b:f8:a7:36:a2:12:79:54:8d:f5:e9:ca:bc:7e:16:1f:fa:
         74:4e:5f:ca:e9:c4:64:2d:71:0d:ee:1a:2c:e5:96:49:2c:23:
         0a:2d:78:07:1c:e1:03:b0:60:79:71:f6:f8:6b:14:85:f8:89:
         1c:53:64:db:7c:73:b8:ec:c4:a2:20:e0:61:65:6a:75:47:03:
         cd:bc:eb:90:a1:32:3b:d6:ac:03:f8:5b:84:5f:6c:3e:21:20:
         74:f6:39:17:f2:5c:e9:e6:02:c2:01:c5:9c:a5:2b:8e:0b:1a:
         01:75:65:53:f8:99:eb:50:d5:4d:dd:fd:d4:35:ed:15:86:4d:
         f1:27:ac:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:19 2026 by rpki-client