Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer
File:                     2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer (raw, json)
Hash identifier:          Ueg+oMZGNy2Y3mQ3aRPoXDMJ69LtQpT5EWsJGQm4X4I=
Subject key identifier:   22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       58D2F47A80211361D3235C8E62234C17810A3B04
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Apr 2024 04:48:08 +0000
Certificate not after:    Mon 28 Apr 2025 04:53:08 +0000
Subordinate resources:    IP: 157.15.144.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d2:f4:7a:80:21:13:61:d3:23:5c:8e:62:23:4c:17:81:0a:3b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Apr 29 04:48:08 2024 GMT
            Not After : Apr 28 04:53:08 2025 GMT
        Subject: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:e8:d2:aa:e0:65:53:8f:33:72:5d:49:e2:
                    8a:2e:8b:8a:69:9e:5b:c1:d3:7a:fd:00:44:d2:37:
                    7b:be:ff:cc:7a:b4:74:8a:a2:ad:fa:8b:70:05:06:
                    b6:1d:8b:e9:a8:59:50:64:2b:06:e6:f0:ba:0e:33:
                    3f:a2:9b:a2:75:db:f9:46:08:cb:48:fc:25:3f:e2:
                    51:77:43:59:b7:8e:e4:8a:9b:22:ef:89:5a:ff:ab:
                    91:97:a6:3b:da:58:ad:bc:b2:39:37:ea:a6:46:3d:
                    26:18:bc:53:1c:6b:c7:ec:5d:ea:bf:99:b1:84:37:
                    d0:25:a5:ba:eb:e4:ea:2b:ca:0c:30:63:50:a0:da:
                    29:bc:7f:16:e9:db:cf:26:21:d1:19:db:a0:ba:8b:
                    81:fa:14:e7:12:22:31:47:a0:0c:aa:40:83:a4:a4:
                    ab:5e:d5:af:5c:b5:9c:2b:e5:81:d7:d7:17:f1:01:
                    3e:7b:58:b1:24:f0:9c:b4:c3:e4:f1:7d:91:8c:ea:
                    7f:4a:8a:02:fe:84:4a:ae:ad:7b:18:df:93:2a:67:
                    ed:f1:fa:2c:af:db:4f:4f:33:eb:01:02:2d:c3:5f:
                    bb:c6:2a:50:89:0d:38:1a:aa:46:e1:18:7e:63:e7:
                    ee:16:a7:aa:26:8b:cf:7b:50:d2:76:4d:f0:59:e3:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:8b:18:12:e3:4b:a3:2d:2b:3d:3a:50:8a:c0:3d:9e:29:
         8f:ac:2c:1f:89:a3:f4:61:ba:a4:fe:33:d3:f4:ac:dc:67:5e:
         bd:64:d0:e6:91:97:65:21:fa:06:7c:fa:aa:e6:fb:4b:dd:61:
         ba:d0:80:3a:50:4b:48:b9:a5:36:48:ed:c0:91:4a:2a:e9:48:
         40:31:17:e7:84:6a:27:1f:24:73:22:e1:71:bd:d2:26:f8:f7:
         45:70:0a:4b:f1:2b:20:b2:f2:ff:b8:05:5c:32:bd:e2:4e:fd:
         4e:49:d8:64:90:e8:f9:e6:13:5d:de:d3:a4:18:ba:95:6b:d5:
         5a:6a:e5:ca:73:55:df:f0:0a:b2:3c:bd:6e:2b:11:c5:9e:27:
         a3:6b:d1:1c:6e:07:54:18:e8:7b:af:76:11:e3:84:6b:d4:1a:
         f3:64:46:60:ba:ed:1c:ab:be:42:80:e9:70:bc:c7:05:ed:52:
         95:62:18:c3:cd:cf:7e:a3:7e:c8:71:ea:5e:df:45:87:8e:ac:
         72:2a:94:b1:eb:f7:82:4d:22:d1:8d:22:20:05:44:25:2c:18:
         37:25:f4:9d:2a:70:6b:17:33:0f:4d:e8:22:f3:16:d8:97:46:
         e5:8e:44:6d:5c:ea:9f:bf:2c:b7:c9:2b:d8:68:e4:52:8c:51:
         01:f6:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org