Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer
File:                     9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer (raw, json)
Hash identifier:          TpCUY0FVLyCoCOw9kDqVsuQ3PTDiqXOYRAYAtp8UdvU=
Subject key identifier:   9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       0FC090460BF2E06FCDBAB199B385478E65486DFF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 07:29:12 +0000
Certificate not after:    Thu 26 Jun 2025 07:34:12 +0000
Subordinate resources:    IP: 160.22.192.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c0:90:46:0b:f2:e0:6f:cd:ba:b1:99:b3:85:47:8e:65:48:6d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun 27 07:29:12 2024 GMT
            Not After : Jun 26 07:34:12 2025 GMT
        Subject: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:d8:1f:f5:b7:b5:31:67:70:c3:f0:46:7d:
                    11:a7:75:15:08:51:db:ee:3e:f0:9c:e2:cf:df:c1:
                    5a:fd:e9:20:51:be:0a:a8:c3:00:17:e4:9d:1f:d8:
                    f1:9d:26:e3:e4:84:15:a2:30:b1:c6:5d:74:63:8b:
                    00:8a:42:b6:0c:d9:eb:ed:a1:03:b5:7b:15:5f:ea:
                    5a:f8:12:e4:b4:0b:cb:cf:1d:49:1d:32:e2:04:3b:
                    57:23:56:e1:61:94:6c:99:29:1b:7a:70:61:31:af:
                    95:6f:9f:22:94:b7:47:a6:80:c5:9c:0c:09:70:13:
                    56:57:8c:6e:2e:c6:47:ca:4f:cd:4c:e0:e7:41:d2:
                    64:93:9d:58:a9:96:6a:fb:f7:57:e7:dc:e4:2b:53:
                    d2:99:a2:22:41:46:4d:d5:92:18:a2:31:77:dc:3a:
                    58:1a:02:29:2c:96:88:68:f2:e0:ae:b9:a1:22:2a:
                    29:cb:77:1c:46:cf:b0:53:25:c2:cc:e9:dc:bb:10:
                    37:e9:66:05:1a:57:20:dd:18:29:07:75:83:ca:48:
                    2b:b2:cd:21:42:d3:f1:bb:84:a5:39:39:75:a0:a1:
                    46:48:e3:37:a9:8f:dd:13:6d:61:18:d6:2d:10:fa:
                    f1:18:1c:55:34:6a:8b:02:38:94:1b:2f:55:78:04:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:a2:b7:57:5d:43:55:20:df:cc:e5:15:aa:7d:be:e8:98:
         37:3a:9e:af:c6:46:b4:66:c5:e6:cb:fc:fc:8d:58:07:cc:06:
         ce:45:72:e3:6d:6b:c9:6f:32:cb:18:19:d2:b6:b3:c3:57:38:
         f9:57:7c:d2:5f:b9:37:5f:2f:46:99:ff:d0:0c:ec:af:4a:86:
         97:e8:ec:5b:48:1b:3a:fb:ba:ce:c2:dc:ac:c0:74:76:45:fd:
         5f:d9:bc:a8:5d:87:c7:ea:d5:6b:98:e3:ac:47:cc:a2:1f:13:
         f6:b6:9d:6a:af:5e:95:e1:5d:35:53:cb:c7:bd:f2:67:69:13:
         51:7a:09:d0:20:77:c8:3d:8f:95:ed:f8:03:18:02:c0:35:a8:
         25:0e:57:2f:f7:6b:0b:3b:c3:87:ed:72:b5:b7:46:41:a9:14:
         b6:ec:91:50:c6:7e:ae:57:78:a4:4c:be:19:9f:ae:86:81:02:
         33:85:ed:4d:66:a8:15:48:3c:67:70:1b:74:23:b3:0f:4c:3f:
         6e:e1:d0:79:23:23:6e:55:5c:2a:67:a6:5b:59:05:cc:d8:b8:
         6e:5c:d2:ff:64:4a:9e:48:68:ac:6b:b8:fa:8a:0f:e3:24:6f:
         d3:35:31:98:35:af:b6:fd:80:db:7a:9e:a8:90:95:d8:8f:2f:
         e6:9f:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org