Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
File:                     22476F90C7B08131974F5B19834906C325ABEF12.cer (raw, json)
Hash identifier:          bxxhWemTKG9v4h7Rn7zXqVXZU2JwEDvGg3iZoUuxMrw=
Subject key identifier:   22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6E0D20902770AD227A116A824D91090FA8B6EF9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Aug 2024 07:14:30 +0000
Certificate not after:    Thu 21 Aug 2025 07:19:30 +0000
Subordinate resources:    IP: 160.25.68.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0d:20:90:27:70:ad:22:7a:11:6a:82:4d:91:09:0f:a8:b6:ef:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Aug 22 07:14:30 2024 GMT
            Not After : Aug 21 07:19:30 2025 GMT
        Subject: CN=22476F90C7B08131974F5B19834906C325ABEF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:68:5e:f6:e9:c3:5f:bd:f5:31:57:e3:6b:
                    28:b3:28:32:99:0f:b4:f9:93:f3:d9:71:6c:bc:35:
                    2d:34:3b:26:c3:53:33:ef:91:c9:e2:7f:66:d4:6b:
                    84:78:35:4f:fc:79:5d:52:10:a1:27:ad:8f:1b:71:
                    20:9d:c0:ac:0e:28:39:05:f9:7c:40:ac:4b:c4:2c:
                    a5:a9:18:df:55:a2:47:ad:06:83:e8:b2:00:4b:e5:
                    60:77:6c:9c:9c:dc:46:e6:46:a2:cd:3e:a7:70:cd:
                    b3:7b:f1:fa:35:ac:a9:64:eb:02:6e:a4:ff:19:39:
                    5d:b2:41:80:90:6d:34:db:d1:41:c7:a4:0a:f8:49:
                    fd:2b:a4:7d:98:47:11:a9:df:bf:fd:c8:af:74:58:
                    47:3a:6e:8c:66:2e:8a:22:3c:6f:7b:7f:c9:eb:ec:
                    11:34:52:73:f5:af:e5:4e:e5:c7:db:5d:ec:f4:65:
                    06:74:9d:6e:fd:96:9c:dc:35:ab:9f:b8:72:89:b9:
                    ef:a6:83:20:bf:20:bf:64:0a:d5:29:6f:e5:a2:d0:
                    61:e0:f1:73:29:a8:ee:ca:4f:74:11:0b:d5:e9:3c:
                    bb:77:4b:2b:16:8a:43:82:c8:39:a0:a0:4b:88:cf:
                    08:aa:39:47:85:57:f3:4f:b2:3f:6d:f7:cd:04:48:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:34:29:8e:6f:89:2d:f2:82:40:1c:e7:38:9e:af:c5:30:
         31:5a:b3:79:8d:bd:ed:11:ff:cd:fd:71:38:e3:7b:01:3a:db:
         7b:8f:af:ab:81:64:12:c5:11:a5:82:fd:66:00:a0:36:d1:04:
         66:9b:0d:40:a0:37:3e:f8:67:62:77:dc:f8:b0:a6:bf:67:7a:
         f7:86:39:68:d8:8d:8d:f6:41:cd:5d:a5:69:fc:70:8b:97:0b:
         2a:9d:45:c3:57:5a:6e:0a:88:9f:c8:00:13:44:e8:20:47:51:
         9d:15:e9:c3:b0:72:0a:df:e3:0b:3c:ef:56:6f:0a:6d:94:28:
         de:d2:c1:f1:64:9f:3d:50:b8:df:a3:e2:8e:d3:93:69:25:19:
         bc:60:0e:e8:9d:2f:6a:7e:ef:b5:cf:1b:fa:12:58:4a:e4:44:
         f2:bd:b9:6d:fa:1d:76:b8:6b:bc:6b:5c:df:53:48:bf:69:8b:
         50:4a:e2:ae:c8:fd:c2:5e:4e:53:b1:a4:c5:29:33:ff:94:24:
         e0:eb:9b:49:09:96:92:2c:6a:69:ee:fb:54:2e:5e:c7:40:5a:
         6e:ab:e7:d7:57:a8:80:5a:b1:fe:37:46:2e:59:23:57:50:d5:
         16:48:e9:06:13:97:53:a2:28:5e:bb:d2:72:02:a3:69:b6:58:
         58:bb:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org