Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
File:                     6176447D40001B20E000D73A3B5E66B74A431374.cer (raw, json)
Hash identifier:          EbaxBSjKG1K0Q3rq6XW0uMBRV8q4r5oNCxV2UQ6Rz3U=
Subject key identifier:   61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       5954BE581EE82DA422FE216E6EB70B426F3E02E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Jun 2024 04:20:37 +0000
Certificate not after:    Fri 13 Jun 2025 04:25:37 +0000
Subordinate resources:    IP: 160.19.144.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 03:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:54:be:58:1e:e8:2d:a4:22:fe:21:6e:6e:b7:0b:42:6f:3e:02:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun 14 04:20:37 2024 GMT
            Not After : Jun 13 04:25:37 2025 GMT
        Subject: CN=6176447D40001B20E000D73A3B5E66B74A431374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:81:53:ab:1c:e3:9a:c6:6f:35:df:7c:3e:
                    d6:64:b4:ff:18:86:9e:06:82:93:bf:89:ce:1b:63:
                    77:79:36:04:75:20:ae:4b:80:92:38:b5:b3:35:e1:
                    cb:9d:fb:df:f0:78:8f:1c:68:0e:79:9d:f3:8d:da:
                    dd:a2:91:dc:65:18:9a:65:8c:79:67:2d:82:80:d7:
                    9b:6d:7c:2d:68:8e:65:fb:48:8e:ea:08:d8:dc:a1:
                    69:f2:ce:9a:ee:e9:46:92:22:f8:50:aa:52:ec:75:
                    9b:5b:41:79:8c:b1:9e:9d:16:f3:17:ef:7c:cf:14:
                    7a:20:8a:b1:c5:7e:e1:9b:c8:c1:5b:a2:c2:7c:77:
                    ff:1b:83:57:e3:61:1a:44:d7:6c:ef:9c:12:9b:28:
                    7f:d2:fb:12:a6:2a:b5:5f:0e:f1:11:88:b2:11:d4:
                    fe:4a:e9:9d:e7:56:0a:47:e7:70:1f:c4:10:6c:5e:
                    96:6c:6b:70:b6:69:55:1e:2a:b0:be:6e:f9:45:19:
                    47:a5:c3:6b:7b:d9:dd:2f:e2:de:3a:7d:4a:b1:5e:
                    46:d7:cc:1b:cd:cd:82:a7:bc:f7:0b:9b:35:3c:e6:
                    69:f0:46:4d:70:e5:0b:9e:33:5d:ca:b3:b8:92:19:
                    4d:6e:61:f7:d6:85:6c:62:ec:0b:1c:30:3c:05:e0:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:c8:cb:2b:9d:61:bf:fc:c2:a4:46:97:97:f9:cc:d5:f5:
         cf:4d:f7:bd:d2:65:48:31:7c:88:54:38:d4:ed:1a:16:67:c4:
         f5:19:6f:5a:1e:49:c0:f7:bd:e1:af:d7:e6:c6:a9:31:92:6a:
         c1:d1:e2:68:09:83:7b:3f:de:7b:fe:de:1e:f3:ac:bf:b8:94:
         ff:12:41:69:c3:87:ca:de:e1:0c:45:90:64:c6:37:49:62:c1:
         16:c7:f8:4b:47:57:ef:74:c9:cb:dc:c5:c7:b0:04:f0:10:16:
         18:7b:69:93:1f:d4:70:95:7c:3d:ce:87:e2:46:22:73:14:2e:
         00:ad:1e:da:be:a1:e2:6f:aa:0f:2e:63:39:2c:51:7e:8c:8d:
         dc:2f:b2:cc:61:96:e1:9d:8f:a8:4a:9a:66:de:0c:54:2b:d7:
         06:4a:bd:44:4f:1b:74:45:6d:d3:a3:c2:0f:49:18:75:ee:10:
         28:c8:0c:33:57:fd:de:84:f1:e3:6c:f9:40:b0:3c:89:2a:26:
         e0:03:f6:b1:7d:3b:f2:d0:17:54:f3:de:41:36:ad:a7:b7:c8:
         32:31:fd:5b:8e:a3:e3:8d:f3:d5:d6:52:65:e0:b5:b5:db:d4:
         4f:a6:fa:2f:48:dd:a1:f0:81:50:fd:2f:22:bd:3a:3a:47:31:
         ec:3a:69:4d
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUWVS+WB7oLaQi/iFubrcLQm8+AugwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYxNDA0MjAzN1oX
DTI1MDYxMzA0MjUzN1owMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBE
NzNBM0I1RTY2Qjc0QTQzMTM3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZTgVOrHOOaxm8133w+1mS0/xiGngaCk7+Jzhtjd3k2BHUgrkuAkji1szXh
y5373/B4jxxoDnmd843a3aKR3GUYmmWMeWctgoDXm218LWiOZftIjuoI2NyhafLO
mu7pRpIi+FCqUux1m1tBeYyxnp0W8xfvfM8UeiCKscV+4ZvIwVuiwnx3/xuDV+Nh
GkTXbO+cEpsof9L7EqYqtV8O8RGIshHU/krpnedWCkfncB/EEGxelmxrcLZpVR4q
sL5u+UUZR6XDa3vZ3S/i3jp9SrFeRtfMG83Ngqe89wubNTzmafBGTXDlC54zXcqz
uJIZTW5h99aFbGLsCxwwPAXgAqECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGF2RH1AABsg4ADXOjteZrdKQxN0MB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9kNDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0MGJkNmU0
LWI0ZmItNGY0OC1iODNhLWFjYjhmMmQ3NDU4My8wLzYxNzY0NDdENDAwMDFCMjBF
MDAwRDczQTNCNUU2NkI3NEE0MzEzNzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGgE5AwDQYJKoZIhvcNAQELBQADggEBAFw9yMsrnWG//MKkRpeX+czV9c9N973S
ZUgxfIhUONTtGhZnxPUZb1oeScD3veGv1+bGqTGSasHR4mgJg3s/3nv+3h7zrL+4
lP8SQWnDh8re4QxFkGTGN0liwRbH+EtHV+90ycvcxcewBPAQFhh7aZMf1HCVfD3O
h+JGInMULgCtHtq+oeJvqg8uYzksUX6MjdwvssxhluGdj6hKmmbeDFQr1wZKvURP
G3RFbdOjwg9JGHXuECjIDDNX/d6E8eNs+UCwPIkqJuAD9rF9O/LQF1Tz3kE2rae3
yDIx/VuOo+ON89XWUmXgtbXb1E+m+i9I3aHwgVD9LyK9OjpHMew6aU0=
-----END CERTIFICATE-----
Generated at Fri Jun 21 21:25:33 2024 by rpki-client on console-ams.rpki-client.org