Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer
File:                     952177DE616DE181FF461A8481C060AD744E2603.cer (raw, json)
Hash identifier:          y0bJ8azRMUo5PKRdcZ2UAR8IN2jajnB8kBHGYLlqdGo=
Subject key identifier:   95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6E122707794CD5B9D6BD09EDD70B9D1880CA4650
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 12 Jul 2024 08:28:57 +0000
Certificate not after:    Fri 11 Jul 2025 08:33:57 +0000
Subordinate resources:    IP: 157.15.174.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:27:07:79:4c:d5:b9:d6:bd:09:ed:d7:0b:9d:18:80:ca:46:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jul 12 08:28:57 2024 GMT
            Not After : Jul 11 08:33:57 2025 GMT
        Subject: CN=952177DE616DE181FF461A8481C060AD744E2603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:07:a0:74:06:68:05:81:a5:05:57:9e:82:
                    f9:35:c5:23:f2:a6:1f:2f:13:23:96:28:9d:66:b5:
                    18:7b:16:88:ee:9c:14:e4:1f:9f:f1:16:4e:ed:e8:
                    d3:b9:d0:95:bc:82:0b:4e:57:0c:f1:ea:ba:d5:e5:
                    3c:62:66:8c:27:31:e2:f3:6f:41:11:31:96:5e:ef:
                    90:b1:a9:bc:8d:a6:a9:ff:b2:2b:91:64:b2:fe:42:
                    88:b9:45:8e:5c:15:91:bb:1b:53:1c:cc:08:28:19:
                    80:70:de:87:1f:0b:77:6a:17:b2:b6:ad:dc:96:c9:
                    10:d5:62:ed:e4:74:e7:ff:5f:0f:28:a0:2a:50:da:
                    09:06:b9:1e:97:cd:25:cd:12:4a:38:b9:3d:72:84:
                    c1:3d:af:95:2e:e2:26:12:78:61:d0:04:6e:6f:49:
                    77:43:4f:f6:20:cb:c4:c3:89:c3:e4:24:a8:40:ce:
                    30:b5:62:c0:73:e9:1d:04:1b:9e:75:cc:e1:86:d9:
                    03:2a:21:cb:33:f4:82:f7:f0:70:e8:14:32:b6:b1:
                    ab:4c:eb:92:0c:e0:28:fa:96:db:46:61:2d:1b:e5:
                    b1:5b:4f:d7:69:e8:28:df:b2:ca:12:43:97:77:37:
                    78:65:d4:c2:1e:07:0d:a8:76:bd:40:7f:6a:27:89:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:81:57:82:71:9a:88:6c:45:af:70:35:b1:dc:09:06:1e:
         fd:37:00:f0:ba:d5:64:b9:c1:40:5f:f1:e3:20:3a:30:72:65:
         31:97:5e:b2:0a:eb:8f:4e:2b:55:f9:4a:58:30:37:4b:7b:8f:
         e0:f7:4f:a9:91:ca:e1:a9:3e:5e:c5:f8:67:86:71:1f:08:02:
         92:6c:fe:e2:53:2c:72:f0:8c:dd:6a:8e:59:16:36:db:90:5a:
         21:7d:94:25:71:5a:34:d6:81:de:07:23:0f:04:94:cf:3c:98:
         9a:03:56:ce:9a:dc:67:00:74:83:39:75:2a:ad:07:fe:5a:1e:
         59:00:fa:c2:04:e0:f0:9f:a2:0b:74:72:f5:9b:02:81:1e:ca:
         a8:30:b7:da:2d:a9:f4:52:47:63:83:2e:cd:af:3b:c4:b6:dc:
         43:c1:43:83:d5:ef:1c:e4:e3:06:44:d3:fc:8f:a1:32:ec:78:
         e3:ef:4f:53:29:61:69:cd:c4:dc:a6:92:14:47:13:aa:bc:97:
         cd:98:d2:f6:a7:07:bf:17:d1:74:b8:f6:9b:8e:72:4e:8f:cf:
         3d:70:2d:27:27:3b:a7:a2:89:40:84:91:a3:7f:59:75:47:f7:
         ce:27:62:40:14:cb:75:83:9f:03:33:f5:f5:27:53:bf:e8:11:
         be:7e:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org