Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
File:                     C005531488F38475CA53CB4A7ABCEC0C32F75962.cer (raw, json)
Hash identifier:          YT+pr4WqP4rlycporTj1HFlLbxGOt35rkPuZS5h0D1Q=
Subject key identifier:   C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2CF2CBAF30B7DA3EE2943BFA589493A91B418D2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 30 Jul 2023 23:33:33 +0000
Certificate not after:    Sun 28 Jul 2024 23:38:33 +0000
Subordinate resources:    IP: 103.146.188.0/23
                          IP: 2405:9d40::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 16:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f2:cb:af:30:b7:da:3e:e2:94:3b:fa:58:94:93:a9:1b:41:8d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 30 23:33:33 2023 GMT
            Not After : Jul 28 23:38:33 2024 GMT
        Subject: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:31:1b:3b:07:ea:06:f0:c2:ef:a4:76:f8:
                    92:f9:53:f2:e4:d4:2c:8d:76:cf:db:a6:86:ee:71:
                    26:32:3f:81:59:c4:b5:ef:b2:90:9f:a0:9c:ca:80:
                    f4:f4:99:18:9f:2a:55:69:c6:a5:e1:7b:12:03:16:
                    a2:3a:5d:0e:9a:52:0f:d5:ae:cf:8f:9a:24:f7:70:
                    73:4d:f9:00:f7:d4:dd:43:11:2b:4b:31:0e:60:15:
                    52:fc:3e:53:7a:aa:2f:2c:97:04:6d:b3:0b:4b:df:
                    ed:5f:ee:19:d7:5d:b0:7c:bd:9a:49:a7:15:f3:cf:
                    aa:e6:2f:f9:6f:c9:84:b4:bc:3d:d4:12:65:60:ac:
                    3a:96:ed:6e:87:82:05:08:d9:3e:5c:ca:6e:5e:9e:
                    cf:9b:0d:62:81:19:af:56:aa:e2:22:31:50:7d:e7:
                    69:cb:2e:ca:46:80:e3:ff:9c:39:7c:7b:d8:76:02:
                    62:14:9e:84:aa:07:07:81:e5:73:ec:3d:af:2f:6b:
                    55:0c:26:c7:0c:17:9b:16:5f:65:5f:3f:35:a9:76:
                    b6:c3:0a:c7:27:7d:d8:8e:15:19:cf:b1:b4:3d:4c:
                    91:08:09:ef:3a:2e:22:f7:cf:c3:7e:cd:f0:c8:be:
                    4d:0c:eb:dc:a3:ec:7a:94:df:44:e5:36:1d:f5:49:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.188.0/23
                IPv6:
                  2405:9d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:2c:ef:05:fc:ef:04:6a:17:fa:17:9c:66:84:95:9d:d9:f8:
         56:db:ba:73:c3:f7:2f:15:45:57:77:d4:2f:eb:74:3c:a3:ea:
         9f:29:a3:79:a0:e6:87:6b:78:df:f9:8d:fe:51:6c:b6:ef:ea:
         73:dc:d8:ec:27:0a:ea:45:c3:3e:88:5d:31:fb:9a:f4:7f:ab:
         18:52:76:83:79:7a:ac:ce:ab:d4:f5:ea:94:f5:12:2b:39:3f:
         50:cf:d9:5f:dc:8c:71:aa:f2:45:12:2c:4a:53:fe:43:cc:e4:
         2f:ec:82:df:16:7e:90:0c:72:3b:3f:f1:91:bb:92:d4:25:bb:
         79:19:df:42:e4:eb:22:da:3b:76:99:c7:16:19:00:d0:06:67:
         6e:b2:53:12:9f:87:16:cb:e3:bb:4a:3d:11:11:ef:2c:d0:22:
         26:1e:68:64:08:21:4b:df:a3:2e:8a:58:61:21:29:61:4c:04:
         c4:ab:51:ea:d8:57:5c:6e:9d:56:df:8a:2c:d8:24:b7:2c:5f:
         ec:d8:fc:21:bc:26:fe:e0:a8:cb:5a:94:29:c7:2f:a0:67:c3:
         85:51:40:98:65:70:e1:39:ad:1c:39:6e:43:61:74:69:8c:f4:
         53:19:40:a7:8b:57:c3:d4:72:9a:be:31:80:19:5f:69:0f:30:
         25:84:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:42:14 2024 by rpki-client on console-fra.rpki-client.org