Certificate

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/2C548D336677E22047CF76F6F7D59344898B0CE3.cer
File:                     2C548D336677E22047CF76F6F7D59344898B0CE3.cer (raw, json)
Hash identifier:          /mntLp4BvpvqiBosJKr//zOTj0KwpcHxYw+vDGNqe60=
Subject key identifier:   2C:54:8D:33:66:77:E2:20:47:CF:76:F6:F7:D5:93:44:89:8B:0C:E3
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       2B80E987B714F332925BAAE4D487E5A1B530AB03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest:                 rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/0/2C548D336677E22047CF76F6F7D59344898B0CE3.mft
caRepository:             rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/0/
Notify URL:               https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Nov 2026 12:58:23 +0000
Certificate not after:    Thu 04 Nov 2027 13:03:23 +0000
Subordinate resources:    AS: 154719
                          IP: 2001:df7:20c0::/48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 08:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:80:e9:87:b7:14:f3:32:92:5b:aa:e4:d4:87:e5:a1:b5:30:ab:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Nov  5 12:58:23 2026 GMT
            Not After : Nov  4 13:03:23 2027 GMT
        Subject: CN=2C548D336677E22047CF76F6F7D59344898B0CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:da:64:8d:fe:54:9b:bd:62:f0:3f:62:65:
                    c2:7a:8f:3d:81:8d:f1:95:96:b7:66:48:53:c5:8f:
                    6b:34:94:18:4c:99:2a:34:6b:f3:8d:f9:5c:da:7a:
                    ac:80:01:99:fd:2e:13:17:e0:c5:7a:6c:ae:d0:a1:
                    a5:36:a1:33:24:ff:84:c7:01:ca:64:4c:c1:11:bf:
                    88:33:89:10:1c:01:59:fd:e5:1a:69:e1:19:8b:3a:
                    5f:34:04:ea:04:e0:ff:0c:ee:0a:30:f0:59:7c:86:
                    5e:19:8b:16:aa:98:18:cf:97:e0:0d:11:fe:c9:f7:
                    1e:4f:e8:0d:48:bf:c9:3f:08:a4:73:49:84:bb:34:
                    8f:24:9d:3d:f7:29:9d:47:6f:06:44:50:c4:e1:c9:
                    09:4e:77:bd:86:72:c0:c7:fc:f7:b5:5b:d7:a5:e2:
                    28:cc:3d:cb:67:89:e6:ca:a5:e0:5b:e9:f6:24:9c:
                    12:91:e8:38:39:c9:c3:6d:e1:f9:da:6f:61:4d:e2:
                    d7:43:93:77:88:d0:67:39:b4:0e:f2:34:1e:cc:1b:
                    ec:31:df:20:be:5c:62:c5:fb:f5:38:e6:35:fb:b2:
                    0b:c4:2b:3e:ca:b0:9f:55:a7:70:18:47:76:c7:68:
                    e7:0f:f2:81:21:59:ca:7b:b6:3f:e7:8c:f2:f9:68:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:54:8D:33:66:77:E2:20:47:CF:76:F6:F7:D5:93:44:89:8B:0C:E3
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/0/
                RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/464d9706-354e-4cdf-a586-ae75e5af861f/0/2C548D336677E22047CF76F6F7D59344898B0CE3.mft
                RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:20c0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154719

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:f6:8a:40:c7:50:9d:57:98:ad:5c:1e:ab:83:dd:d1:30:
         49:83:18:60:37:0e:ae:e7:c2:31:ff:96:ac:51:d0:12:aa:b3:
         eb:94:fb:09:b9:e2:d1:96:2f:23:ba:e4:b1:47:0a:27:36:27:
         95:83:ce:64:b5:3a:09:04:86:23:6f:e6:21:91:3e:0d:44:25:
         fa:fe:fb:d3:02:fc:8b:ee:e3:db:f6:97:bc:60:25:d3:b7:bc:
         a3:f0:6a:c0:b4:d9:62:b6:f6:50:12:d6:44:1e:5f:de:02:0c:
         71:8d:4d:d3:c5:cb:48:36:bf:f8:0a:34:d0:73:5b:27:db:07:
         60:42:ca:46:7d:85:c1:b0:52:a8:b9:28:36:47:9a:28:4c:64:
         12:a7:85:30:7f:c3:e7:36:27:27:fc:6e:d6:57:94:dd:95:c9:
         04:c1:9e:c0:be:d3:c4:4d:98:46:2b:48:ab:30:1c:8d:88:e3:
         f9:61:96:18:82:64:f0:54:e7:37:f4:f8:da:f9:55:56:d8:78:
         e0:9c:25:bd:6a:36:25:10:28:16:65:bf:8d:19:b3:44:b8:87:
         e2:d6:9c:77:fb:3c:e4:30:1e:65:b5:e2:44:ff:7b:25:b5:eb:
         73:f4:24:9a:6c:36:3c:2b:a2:71:00:a5:11:e0:d4:d7:ba:bc:
         ef:cf:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 17:32:43 2026 by rpki-client