Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
File:                     1073C0AF2447C17B85643987B72701D1AE52823D.cer (raw, json)
Hash identifier:          thjmBUUD2R2DLEQCYfQGeoQ4TAamHljwKMK6yOawzOA=
Subject key identifier:   10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       64340E15AFDF9DE1FAE47D996048325D2A243CC8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jun 2024 01:28:41 +0000
Certificate not after:    Tue 17 Jun 2025 01:33:41 +0000
Subordinate resources:    IP: 157.15.122.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:0e:15:af:df:9d:e1:fa:e4:7d:99:60:48:32:5d:2a:24:3c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun 18 01:28:41 2024 GMT
            Not After : Jun 17 01:33:41 2025 GMT
        Subject: CN=1073C0AF2447C17B85643987B72701D1AE52823D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:f9:2f:7d:bb:27:a8:96:df:d7:33:29:e6:
                    86:a3:ca:43:43:15:42:b6:ea:d9:4d:f4:47:4b:db:
                    ae:be:d1:e3:86:10:ff:00:46:1a:20:1f:b4:59:07:
                    bd:87:e1:29:d3:1b:ae:6d:a4:c5:44:53:59:68:90:
                    72:fe:41:6b:50:dd:6b:ba:f5:08:bd:27:7d:4b:eb:
                    04:27:12:df:55:54:29:e5:64:ac:a5:35:5a:ab:0c:
                    a9:d1:4f:29:24:80:d6:b9:98:be:51:1c:47:89:f0:
                    60:bd:aa:db:cb:52:7c:a9:a5:00:cf:be:b2:f0:8e:
                    7e:d6:03:ce:c5:d5:c5:43:38:36:e7:7b:b2:d5:d2:
                    43:e0:dc:66:f4:8a:da:41:38:59:c7:12:ca:07:56:
                    9c:94:d0:85:fa:14:13:d9:f4:d2:a7:3b:cd:eb:0d:
                    3f:57:4d:9c:1d:ca:0a:6b:67:c9:4b:cd:85:8a:db:
                    26:12:1b:b2:17:35:27:9b:37:8f:da:3a:3c:8a:90:
                    57:57:c3:55:25:25:bc:77:c9:de:99:31:c7:d5:33:
                    2a:a7:d2:c0:81:ea:41:3a:6f:1c:28:52:d0:31:e0:
                    a2:17:17:c7:75:36:05:df:b7:64:1c:12:b4:86:4a:
                    ca:41:4f:58:a5:e7:21:b7:88:66:d9:4e:fb:ec:74:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:af:9b:23:7b:2c:64:52:20:4a:b4:f5:62:84:4e:00:0e:d7:
         9f:84:10:02:03:5c:50:a1:88:79:36:be:bf:d7:04:c7:4c:ad:
         23:54:6d:e8:96:f2:99:8f:69:5d:99:58:35:c9:0a:19:06:1c:
         37:dc:fe:e8:78:52:2d:72:b3:0c:46:33:2d:e8:c0:cd:b5:21:
         2e:3c:42:fd:cc:96:a5:24:8f:48:46:c5:30:ec:fd:6d:c0:dc:
         de:ea:04:ea:d6:b3:ac:ac:a5:5d:b9:57:c6:8b:84:d0:0c:2e:
         cb:cd:f3:1b:24:61:d1:a7:3f:f3:bc:d9:b7:26:27:fc:cf:fd:
         40:9a:0a:84:f0:fb:ca:38:53:9d:80:ed:5a:23:44:35:3c:7e:
         b4:bd:13:7a:b9:32:d2:d1:29:2f:23:d6:b2:16:ae:dd:68:1e:
         cd:99:39:78:6e:cc:de:37:6e:7e:bb:3e:de:9b:e6:6b:27:40:
         f2:9c:c4:41:3d:16:21:74:3a:c8:59:86:20:1c:aa:1f:ad:b2:
         e3:14:4f:2f:3d:8a:3d:a2:f5:dd:f7:2e:0d:bb:29:ff:1a:15:
         b3:a9:99:d2:1d:8c:57:a4:93:de:72:58:83:17:23:93:40:7a:
         d5:c6:89:67:f5:1a:b7:5b:da:b7:8e:a0:45:91:3d:48:5e:1c:
         7d:55:15:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org