Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
File:                     6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer (raw, json)
Hash identifier:          m5biTY3XtoySu4GE5d+jd5Nt1JwiGrn/sSXH77Ip/V4=
Subject key identifier:   6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       29515F5C30883B98B938673C0BC6E81EE8FFC8D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 08:50:19 +0000
Certificate not after:    Mon 29 Jul 2024 08:55:19 +0000
Subordinate resources:    IP: 103.50.24.0/22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 16:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:51:5f:5c:30:88:3b:98:b9:38:67:3c:0b:c6:e8:1e:e8:ff:c8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 31 08:50:19 2023 GMT
            Not After : Jul 29 08:55:19 2024 GMT
        Subject: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:fa:5f:04:32:c8:11:4a:c6:7d:6e:bd:0a:
                    91:14:b8:c6:1e:38:1b:ec:bc:29:28:7b:1e:bf:36:
                    2b:9b:97:64:75:cb:df:7c:38:a7:05:4d:78:a7:97:
                    59:54:08:d7:1b:d7:c1:65:e2:02:60:ba:03:67:a3:
                    c1:32:40:d1:6a:6b:fa:5b:cb:39:d5:1c:85:a1:5f:
                    46:06:12:79:64:4c:0b:42:1f:90:9d:62:21:a6:18:
                    13:59:cd:77:2d:cd:6f:5b:15:4f:ee:16:74:72:04:
                    80:41:a1:12:3b:1d:c1:14:b6:2b:1b:49:cb:dc:4c:
                    c8:d7:bc:84:1b:a7:43:78:4f:a7:64:b6:45:f1:8a:
                    39:02:1b:ec:32:4c:b6:91:be:43:0c:5d:50:4f:fd:
                    2b:70:4a:80:f3:fa:28:60:44:6d:06:98:20:47:e5:
                    66:6e:11:4b:4e:ec:8b:04:63:4e:64:e0:fd:e1:ef:
                    4d:20:df:da:ec:86:a4:2f:14:de:af:bf:37:da:a8:
                    15:48:e2:f3:08:a9:40:9b:0a:2f:d2:24:31:aa:b7:
                    83:c6:27:54:2f:bf:8a:76:da:d5:f0:2a:25:b4:b4:
                    ed:5a:8b:02:88:ec:3c:76:72:8d:86:c1:b0:91:d9:
                    c9:9f:1f:f3:5b:99:8b:c3:9a:91:0f:1a:98:98:e2:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:35:f4:3e:7e:2c:ae:bf:6e:64:b2:95:34:53:5d:6b:63:
         35:9f:b8:a6:14:01:c3:92:47:ae:d5:e3:f0:d0:e1:2e:4d:22:
         aa:7d:cd:2f:4e:82:a4:8a:af:58:0e:f3:b2:d1:e0:bb:8f:0c:
         98:b8:45:ec:89:64:44:07:b4:d5:bc:3e:33:ec:ab:84:f4:87:
         c9:73:57:b9:b3:81:73:4a:ed:b4:3c:65:39:49:a2:6f:6b:65:
         fe:a2:18:8f:04:69:c5:a1:e4:ad:0b:b9:c6:f1:38:d5:92:a1:
         5c:fa:2f:76:58:26:0d:22:38:c9:87:12:91:14:04:a2:0f:8b:
         92:49:97:c9:9c:dc:a4:5c:1b:31:6c:db:b5:54:b5:4b:a9:1b:
         b5:91:bd:ed:c1:de:ad:2d:ac:f0:c8:79:98:a9:a6:42:ba:21:
         8c:a2:54:81:06:01:02:dd:d1:41:b6:01:55:bd:74:94:68:50:
         9e:0a:b6:63:82:44:8d:16:3e:3b:58:55:5b:ab:2f:35:0f:c2:
         51:a1:5e:f5:0f:5b:3a:da:b2:1f:cc:50:ee:f2:55:94:a3:9f:
         20:fc:4f:5b:2a:07:74:fb:f3:a6:2d:a7:bf:2c:95:b1:9f:fb:
         18:75:21:52:2c:33:53:56:94:34:af:3c:52:c0:b3:2f:6d:6a:
         74:ba:f6:83
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUKVFfXDCIO5i5OGc8C8boHuj/yNEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA4NTAxOVoX
DTI0MDcyOTA4NTUxOVowMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBD
RjQ4RkYzMUJBRkQ3MUQyRDEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkT+l8EMsgRSsZ9br0KkRS4xh44G+y8KSh7Hr82K5uXZHXL33w4pwVNeKeX
WVQI1xvXwWXiAmC6A2ejwTJA0Wpr+lvLOdUchaFfRgYSeWRMC0IfkJ1iIaYYE1nN
dy3Nb1sVT+4WdHIEgEGhEjsdwRS2KxtJy9xMyNe8hBunQ3hPp2S2RfGKOQIb7DJM
tpG+QwxdUE/9K3BKgPP6KGBEbQaYIEflZm4RS07siwRjTmTg/eHvTSDf2uyGpC8U
3q+/N9qoFUji8wipQJsKL9IkMaq3g8YnVC+/inba1fAqJbS07VqLAojsPHZyjYbB
sJHZyZ8f81uZi8OakQ8amJjiNs0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGwVl2B6DD6sPjDPSP8xuv1x0tEhMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8zNzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQx
LWQ2YzYtNDA5ZS04YWQxLTVlODlhNGIyODUwZS8wLzZDMTU5NzYwN0EwQzNFQUMz
RTMwQ0Y0OEZGMzFCQUZENzFEMkQxMjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnMhgwDQYJKoZIhvcNAQELBQADggEBAC1pNfQ+fiyuv25kspU0U11rYzWfuKYU
AcOSR67V4/DQ4S5NIqp9zS9OgqSKr1gO87LR4LuPDJi4ReyJZEQHtNW8PjPsq4T0
h8lzV7mzgXNK7bQ8ZTlJom9rZf6iGI8EacWh5K0LucbxONWSoVz6L3ZYJg0iOMmH
EpEUBKIPi5JJl8mc3KRcGzFs27VUtUupG7WRve3B3q0trPDIeZippkK6IYyiVIEG
AQLd0UG2AVW9dJRoUJ4KtmOCRI0WPjtYVVurLzUPwlGhXvUPWzrash/MUO7yVZSj
nyD8T1sqB3T786Ytp78slbGf+xh1IVIsM1NWlDSvPFLAsy9tanS69oM=
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:42:05 2024 by rpki-client on console-fra.rpki-client.org