Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
File:                     DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer (raw, json)
Hash identifier:          237vlpO4gqawomSaf1vojdnwpW/q4GmwhcUB3XR3Y6s=
Subject key identifier:   DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       56C7EDB6AF8002AA69F52F84780EB105800DB45B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Aug 2023 12:09:43 +0000
Certificate not after:    Mon 05 Aug 2024 12:14:43 +0000
Subordinate resources:    IP: 43.252.144.0/23
                          IP: 103.14.110.0/23
                          IP: 103.233.88.0/23
                          IP: 120.89.94.0/23
                          IP: 192.140.224.0/23
                          IP: 2001:df0:222::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 16:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c7:ed:b6:af:80:02:aa:69:f5:2f:84:78:0e:b1:05:80:0d:b4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  7 12:09:43 2023 GMT
            Not After : Aug  5 12:14:43 2024 GMT
        Subject: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:c6:c7:bc:a4:f8:11:b3:a5:e5:30:3c:5d:
                    d3:b7:24:f8:4b:a7:7f:67:e2:cd:c3:43:a5:28:46:
                    f8:2b:9e:ec:12:f3:92:60:ee:77:8e:6e:23:0e:ec:
                    7b:72:a4:0a:1f:d4:47:af:e4:d0:8b:91:dc:38:3e:
                    67:4f:ec:c5:fd:ec:a0:06:6a:aa:0a:c0:65:cc:5f:
                    d5:4f:23:c1:68:ed:5f:db:04:c8:2c:5a:35:19:ce:
                    d4:7c:b0:ea:d5:f1:e3:49:40:d1:1d:b4:b0:bd:0c:
                    81:43:5f:bf:98:37:0e:8f:b2:c2:66:d5:d0:31:1a:
                    c5:0f:e1:d5:5d:ef:2d:17:ca:1a:77:6e:eb:53:49:
                    6e:6f:92:a3:10:9f:b0:63:43:8b:88:a8:ee:8d:28:
                    dd:aa:a0:8a:a9:b3:f6:34:65:d3:c3:00:cc:71:c0:
                    2b:4f:b8:ba:a5:ce:6d:c0:a0:9e:44:1c:3c:29:b2:
                    4b:1f:05:d3:f9:fe:fa:d8:0c:b9:0c:2e:4b:65:d1:
                    89:57:5e:52:5e:f7:3c:fb:43:9e:1d:9c:de:61:b5:
                    66:82:56:cd:f9:e7:ff:54:d9:13:bd:cd:12:34:09:
                    6b:46:41:2b:30:e4:c0:e2:94:6f:a1:4b:68:03:19:
                    28:dd:a9:c0:ce:dc:42:f7:89:2b:95:c9:eb:50:f4:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.144.0/23
                  103.14.110.0/23
                  103.233.88.0/23
                  120.89.94.0/23
                  192.140.224.0/23
                IPv6:
                  2001:df0:222::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:60:02:b5:85:f0:32:b5:3f:65:15:ef:40:a5:96:7e:78:
         f8:ec:6f:56:0b:ec:be:d4:0d:04:f5:31:a1:82:79:c4:9c:82:
         96:ff:54:2f:ec:7c:8c:6d:ef:d4:fa:c6:b3:ce:70:b8:c1:99:
         19:61:bf:60:23:73:6b:64:f5:48:90:b9:7f:49:5b:13:d4:f4:
         fd:dd:1a:c2:8d:0c:1b:7a:d3:42:28:1b:22:a5:69:28:c1:75:
         77:60:84:b6:70:06:e6:a4:9b:df:e7:60:20:ff:19:b1:1e:54:
         3b:2f:69:3c:47:2e:cf:f1:6e:c4:90:11:1c:ee:b6:09:af:e0:
         ef:39:15:77:5a:31:4b:79:0b:e1:ae:65:3c:a4:98:8f:0a:73:
         2a:2c:65:e9:39:b8:fc:6c:38:67:ad:1b:bb:1e:e1:43:d0:dd:
         1c:06:14:71:2e:b0:79:68:67:b5:8a:76:25:45:b7:a2:ae:a8:
         9e:2a:55:69:86:a7:9c:9b:d2:8c:56:9d:b5:2b:64:d5:44:16:
         3d:68:9e:ed:c5:c8:3b:3b:6b:c9:a4:73:fe:e3:be:b8:2d:48:
         0d:26:ca:82:90:fe:78:12:7b:45:56:b0:85:25:8a:05:f2:79:
         f1:84:df:84:87:da:85:49:a1:78:19:96:72:32:61:04:ff:d6:
         1c:76:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:42:16 2024 by rpki-client on console-fra.rpki-client.org