Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
File:                     19D983F92968E71520E086B32ACAFEFB5BF04943.cer (raw, json)
Hash identifier:          b1RcdflOcSA1CEaGfiXCCsbMQZTyrNEldwHC3l7AMkM=
Subject key identifier:   19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       47D4CF351D39E120F858A77F7540A60FDBFF1D02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 07:21:07 +0000
Certificate not after:    Mon 29 Jul 2024 07:26:07 +0000
Subordinate resources:    IP: 103.18.144.0/22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 16:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d4:cf:35:1d:39:e1:20:f8:58:a7:7f:75:40:a6:0f:db:ff:1d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 31 07:21:07 2023 GMT
            Not After : Jul 29 07:26:07 2024 GMT
        Subject: CN=19D983F92968E71520E086B32ACAFEFB5BF04943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a4:19:dc:c2:02:28:6c:6d:c5:e3:7a:50:cd:
                    87:9d:40:c9:ce:ff:16:9f:24:25:b9:a1:fe:b0:37:
                    00:48:f9:ae:ec:ce:f3:f4:28:c9:0d:eb:4b:4c:7c:
                    95:41:7c:d2:b2:56:c6:9c:09:4e:65:9b:dd:86:71:
                    61:2a:81:10:5b:5d:bf:b6:6b:0c:bf:13:48:77:ee:
                    c0:87:d0:41:da:8a:05:71:c3:a7:45:fc:76:2f:c9:
                    73:f5:48:8c:30:4e:fd:71:ab:73:13:68:e1:22:2c:
                    08:8b:b2:c1:80:11:91:cb:81:db:19:3c:f7:e9:32:
                    1b:7e:a0:86:5c:6c:74:35:cf:ed:1c:ff:96:51:99:
                    3d:05:ae:0a:a4:f0:75:8d:6e:06:5b:3e:4f:0d:01:
                    66:86:ba:4a:22:c8:5f:e2:f0:2b:b6:68:59:6a:59:
                    ec:53:d4:31:c7:68:95:42:8a:39:da:0a:80:16:a7:
                    11:91:bc:ad:54:95:50:11:0f:e2:5a:e1:b7:bd:2a:
                    43:e1:8d:75:ae:d2:64:50:2b:b0:8d:74:26:e9:4f:
                    b2:50:c8:9a:69:c8:3c:fa:24:f4:a5:f7:b0:e2:1c:
                    28:b7:9d:d1:10:70:21:21:db:b1:a1:42:e2:a0:cc:
                    99:e0:2b:97:50:cf:09:91:6c:ae:53:de:48:c2:bf:
                    9f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:e8:ff:be:f4:c6:e9:0e:82:58:68:8c:bb:fc:d6:93:a0:20:
         41:c6:df:8b:70:d3:91:20:02:0a:eb:38:bd:ae:17:03:b1:d1:
         7c:93:de:94:db:83:ba:ef:04:a1:47:71:c1:c8:f6:f7:fb:83:
         98:14:aa:f1:27:63:dc:e7:51:ac:5f:40:0c:2e:30:fc:45:1d:
         a2:f8:56:ec:4a:0a:bd:1c:86:1e:a1:b0:49:ea:28:59:48:75:
         7d:66:da:1e:dd:f9:4f:37:78:eb:f1:f6:e1:ce:82:4c:4c:fa:
         4b:11:89:24:4f:47:93:b1:59:71:d0:0e:18:74:89:35:d5:7d:
         3c:08:d8:18:3d:39:61:7e:bb:08:39:bd:0e:94:99:ec:76:a9:
         37:04:11:f7:49:de:70:54:33:4b:ca:c9:3b:32:9b:91:f4:f4:
         4b:ef:60:5d:c8:0c:31:95:1a:33:9b:08:d8:53:65:5f:2e:af:
         24:4d:fe:1c:8a:af:99:29:30:f4:58:58:2b:17:78:b4:01:a2:
         b6:2b:fe:2b:aa:22:ea:31:44:81:77:d5:01:36:e0:3d:61:83:
         6f:62:0d:90:d8:11:30:e1:28:b4:b6:00:05:db:4d:cb:8a:4d:
         11:1b:07:17:1a:ef:b2:d2:da:f3:ae:af:9d:2d:0a:ad:45:82:
         3a:ee:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:42:00 2024 by rpki-client on console-fra.rpki-client.org