Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
File:                     05BC764F85F9F88CE41FD879C6125E65117E8E79.cer (raw, json)
Hash identifier:          7HJ99P9Pq1OZCPU+wE7Ei6NUfPEa8G24Zr5ep9paH+U=
Subject key identifier:   05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       55EFD5E7FFA57E2427192169115A3654B26E5928
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 03:21:25 +0000
Certificate not after:    Mon 29 Jul 2024 03:26:25 +0000
Subordinate resources:    IP: 103.65.238.0/24
                          IP: 103.96.116.0/24
                          IP: 103.96.118.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ef:d5:e7:ff:a5:7e:24:27:19:21:69:11:5a:36:54:b2:6e:59:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 31 03:21:25 2023 GMT
            Not After : Jul 29 03:26:25 2024 GMT
        Subject: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:7a:5e:e0:93:04:c6:36:e2:ac:37:3a:67:
                    04:c9:f7:70:16:3b:c2:40:b1:ee:ed:cb:d1:27:cb:
                    93:92:14:d4:aa:71:61:97:79:b4:68:b7:50:30:b7:
                    67:5a:b2:9a:a6:23:03:26:52:cc:6c:c1:37:25:f8:
                    b2:01:1b:89:9a:a9:a8:e4:be:59:a2:2a:fa:a0:6d:
                    4f:14:8c:75:ab:f6:d0:30:1c:66:8e:3e:62:39:5e:
                    ab:ea:bb:83:b9:19:2d:1c:3d:d3:b1:c5:54:cc:6d:
                    d1:81:eb:97:c9:c0:45:bd:a3:f4:09:d1:72:d8:73:
                    5a:dc:b8:d3:f4:42:31:cf:e8:85:c6:37:11:ce:a1:
                    e4:2d:ea:d5:e2:8a:8c:d9:7a:43:ad:47:1d:52:03:
                    3b:85:e3:f6:3f:e9:57:d6:bc:7c:c4:c9:76:ff:f2:
                    43:07:f2:38:1b:9c:47:09:e2:16:b2:81:6b:f3:0b:
                    8c:9c:c1:4c:ce:68:c0:e3:f6:b5:53:09:2a:b6:e9:
                    f5:ef:a7:53:a3:d8:ce:06:33:e8:36:7e:c3:22:75:
                    67:00:fb:cb:9a:aa:4b:5e:fd:b2:8b:3e:1a:cb:a6:
                    c3:93:89:65:91:c5:78:55:46:2b:88:f3:8d:80:f6:
                    d4:f6:04:9b:00:a9:fe:87:97:44:a4:0c:67:f8:90:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.238.0/24
                  103.96.116.0/24
                  103.96.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:e3:1b:d9:d8:29:ec:08:3c:62:f2:03:45:3e:4e:8c:52:
         d6:82:4a:02:55:3d:c3:af:96:9f:ff:97:e7:54:43:be:d1:59:
         4d:e7:9b:f3:06:f4:bb:53:d2:44:6d:81:be:35:4e:1e:9c:77:
         2c:45:aa:42:ca:06:10:39:82:d1:41:92:69:b7:17:4a:42:71:
         25:71:35:3a:0c:e2:cc:88:87:68:7f:5b:9a:a3:5d:5a:e8:64:
         24:e2:75:26:76:b2:bf:8f:5d:a2:ef:11:c9:55:57:51:e2:03:
         5f:b8:14:75:80:31:95:17:dc:6d:cd:20:62:60:7e:7c:9e:d1:
         29:3d:14:9e:70:f6:cd:34:40:1b:c4:10:2f:5b:ec:78:b6:c3:
         c6:f8:ff:cd:45:85:cb:e1:71:7b:01:47:c9:97:cc:ae:0b:3a:
         f0:28:bb:1a:f1:68:e5:2c:c5:22:c8:b5:69:d9:3b:65:19:dc:
         dd:86:41:38:7b:93:22:d1:96:3e:f3:13:3d:ef:72:d4:8c:af:
         8c:04:e9:79:33:af:b3:8a:22:8f:4e:32:fe:0e:03:49:a0:8a:
         51:0a:01:72:4e:be:f4:2e:d3:2b:da:6c:cd:5b:0d:e8:b4:94:
         b8:ef:ed:b4:e2:10:73:78:ca:45:bf:d6:12:3c:1b:ad:14:4f:
         95:43:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:24:01 2024 by rpki-client on console-fra.rpki-client.org