Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
File:                     EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer (raw, json)
Hash identifier:          4dUcUagbU1CLITU0U+702LGr+WmKBztYIxqZl2ZAqlU=
Subject key identifier:   EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1839B2F83BC69F761F9D92F7BA549270C1829522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 02:46:27 +0000
Certificate not after:    Mon 29 Jul 2024 02:51:27 +0000
Subordinate resources:    IP: 103.6.214.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 17:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:39:b2:f8:3b:c6:9f:76:1f:9d:92:f7:ba:54:92:70:c1:82:95:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 31 02:46:27 2023 GMT
            Not After : Jul 29 02:51:27 2024 GMT
        Subject: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:f5:18:7e:93:4d:45:f2:cb:8b:da:21:01:
                    f9:eb:19:0d:22:ae:66:64:54:ca:8f:02:e7:8c:54:
                    bd:f5:74:75:c7:8a:e1:c6:bf:8f:0d:72:c8:59:f9:
                    a7:f1:29:ce:25:37:1a:e6:82:47:94:01:f0:d5:60:
                    bf:5a:ad:d6:9e:55:9e:4a:db:31:46:2d:bd:90:ba:
                    0a:62:4f:c9:06:3a:c4:39:b7:1c:1a:f3:87:f7:4c:
                    59:c5:0b:32:2b:57:c1:42:87:44:41:90:66:a6:67:
                    1e:84:b4:02:63:a9:89:57:7f:05:79:89:c3:69:6e:
                    bb:e0:52:ec:b6:00:b2:06:aa:75:b6:f9:e2:9b:20:
                    48:01:70:b7:2e:c5:c8:33:b8:5c:c0:e5:99:8e:7d:
                    e8:c0:bc:1d:f0:74:63:5a:fd:a0:10:f3:f1:49:fb:
                    da:30:2a:ea:98:e7:14:95:ff:59:86:4e:41:db:c7:
                    68:f1:03:f6:a6:1b:3c:02:c3:5e:d7:e8:1c:d2:19:
                    fc:45:e2:6d:15:d8:76:12:31:e0:99:81:46:8b:82:
                    2a:55:91:9a:4c:b8:b2:71:4f:da:f3:0d:44:ff:07:
                    26:06:94:de:cb:c9:02:5a:01:97:f2:ff:91:0b:bc:
                    00:a4:72:d4:f8:04:33:3a:66:e4:d4:52:e3:f1:b1:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:33:8b:a3:0d:63:be:6b:08:c7:0a:ad:58:b1:69:f6:87:
         6d:15:63:bf:04:d1:34:41:5e:a9:c4:e8:a5:5a:bf:a9:67:dd:
         02:e1:ce:e0:14:6f:48:c3:ef:29:80:e1:f6:b3:94:cb:a1:90:
         98:1c:2d:b8:ab:97:eb:da:37:f7:9f:4c:8e:34:09:27:b6:c2:
         4e:0e:7d:41:70:47:2a:ec:a1:b5:e6:0f:2e:a9:0a:00:33:f9:
         a2:9f:4b:90:bd:b1:29:55:5c:2e:2f:14:89:18:c7:71:f2:12:
         9a:3f:0f:b7:16:2c:51:15:be:9f:81:60:3a:19:0c:8a:e0:e0:
         4b:7b:6a:07:ed:b1:90:25:87:d8:99:ab:40:f1:c9:25:2f:de:
         c6:dd:11:b4:ed:af:09:8f:c1:c3:7a:76:e4:d8:19:93:4d:55:
         39:77:15:eb:bd:5a:65:96:44:92:4f:83:5f:33:7b:59:d9:79:
         fc:52:63:fa:75:8f:fd:b9:19:0c:e9:c3:2b:ad:1d:b0:09:7b:
         e5:a6:18:d5:c6:ae:44:b4:9c:ef:91:d8:3c:d2:76:98:37:49:
         c3:b4:f0:81:67:dc:7c:2d:10:01:92:b5:b0:b0:1a:7e:66:84:
         a7:1d:37:c6:a6:4f:9b:07:68:44:6c:37:28:a5:5d:c5:3b:a5:
         94:7c:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:27:44 2024 by rpki-client on console-ams.rpki-client.org