Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
File:                     E74A2346929DE84143E5DF0DD921764C285B01A2.cer (raw, json)
Hash identifier:          ugkxm5oXGgHCQmMQM3D3B7t/jM+tDHKro3S09sthkPQ=
Subject key identifier:   E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       111945D39BAB77FF132383C7D5453FCEC2CBD7F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Jul 2025 17:50:59 +0000
Certificate not after:    Mon 06 Jul 2026 17:55:59 +0000
Subordinate resources:    IP: 103.110.100.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 00:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:19:45:d3:9b:ab:77:ff:13:23:83:c7:d5:45:3f:ce:c2:cb:d7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  7 17:50:59 2025 GMT
            Not After : Jul  6 17:55:59 2026 GMT
        Subject: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:74:07:0a:31:fb:af:9a:22:0b:fb:3c:17:
                    30:ba:bb:ef:ec:4a:5d:74:7f:14:32:2d:01:f1:6b:
                    3f:b4:95:88:4e:c2:2f:8e:c3:7b:f8:c2:31:6b:9e:
                    06:5f:ad:ab:8c:67:df:8f:e7:ca:f3:83:e0:9b:bc:
                    c2:73:a7:94:10:95:22:c2:3f:4b:c5:4b:d1:2e:30:
                    a3:b8:5e:c4:81:ba:4d:0b:07:67:6b:fe:08:49:76:
                    3b:36:32:3e:fc:5b:7e:0a:4b:fc:1f:35:6a:97:b9:
                    42:4f:0b:c3:83:e5:bd:2e:7e:24:a1:91:12:f6:2e:
                    18:23:9a:e2:d3:b1:13:2f:83:8a:1b:d6:78:16:e7:
                    d0:4c:45:59:0c:a1:7b:5a:a6:87:b2:e8:19:2b:53:
                    47:88:59:9f:7a:53:65:a6:d6:9b:05:c5:44:f0:48:
                    97:c8:f2:12:eb:95:d0:75:04:9e:d4:14:2a:5a:84:
                    6f:84:3c:3a:c8:7f:5a:81:40:fb:da:16:e6:c5:4f:
                    73:f4:ae:6a:e3:ed:10:20:5f:ba:b0:04:71:4a:bd:
                    1a:bd:02:43:a3:a6:34:55:7d:80:dc:6e:b1:83:20:
                    c6:cc:55:d5:4a:ae:d0:b7:1f:73:a0:fb:ce:5e:a4:
                    f8:6f:92:64:c8:5a:88:6e:33:20:ed:01:33:55:56:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:6d:69:cf:1e:f9:9a:c4:40:2a:0f:22:78:f1:e6:59:8f:30:
         43:76:35:9d:8e:32:9d:6c:92:a5:43:99:d3:33:1e:3f:a8:3b:
         28:23:30:84:2f:43:e6:70:90:29:4c:69:40:f3:6a:f5:26:58:
         2e:ae:f0:6f:dd:eb:46:ae:50:e8:e2:3a:ad:8a:15:38:9c:41:
         a5:42:e8:f2:c3:1b:6f:6d:08:a7:6f:4e:bb:91:28:fe:89:82:
         b5:a9:b6:c2:d9:34:46:15:bc:58:d4:d8:73:3a:e7:ac:9d:11:
         e2:0b:96:69:cb:51:fa:e9:53:05:2e:55:83:a3:6d:5e:a6:0b:
         38:ca:be:35:81:26:a4:a4:a5:fa:b7:5d:1b:04:ee:b9:d1:53:
         83:0f:e2:8f:d5:31:ce:64:1a:2f:b6:9a:28:da:72:92:c8:61:
         41:5e:14:9a:58:76:7a:6f:e9:56:8c:6a:d0:71:83:b3:66:4a:
         9e:1f:92:dc:5d:71:07:ae:5b:92:78:ff:50:3f:b3:05:72:c3:
         0a:33:69:5a:0f:b9:11:10:23:34:21:de:49:97:2a:ec:d8:a0:
         84:96:54:f5:7e:4f:42:3c:f9:54:21:29:7e:ec:3c:ad:74:6d:
         3d:14:4b:cf:f3:9b:2b:de:8a:13:09:f5:d0:e4:52:31:99:c6:
         ee:41:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:30:48 2025 by rpki-client