Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer
File:                     ABF793B534686EC2D5820CF153E43AAEF088BE41.cer (raw, json)
Hash identifier:          wvVjN5x2c6R1SG/DO5IeIkCPTuIFRqsyF3DFKbiNDl0=
Subject key identifier:   AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       1A37007923E808185950208CF2DFC5FA9424A72E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 29 Jun 2024 11:31:01 +0000
Certificate not after:    Sat 28 Jun 2025 11:36:01 +0000
Subordinate resources:    IP: 157.66.132.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:37:00:79:23:e8:08:18:59:50:20:8c:f2:df:c5:fa:94:24:a7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun 29 11:31:01 2024 GMT
            Not After : Jun 28 11:36:01 2025 GMT
        Subject: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6a:57:91:6b:25:b8:84:e9:56:d1:84:ef:ed:
                    54:1c:83:f3:f5:a3:d4:75:c9:a5:ae:df:af:da:1b:
                    5d:d0:92:60:a8:2c:a7:f1:18:ee:86:2b:3a:a2:19:
                    46:78:2c:a7:c2:6c:96:c1:ec:15:9c:0b:35:c5:27:
                    27:5e:ba:16:05:1b:6f:b4:bd:b4:25:4c:d1:9c:76:
                    2d:17:22:7b:2a:cb:c2:97:12:80:d8:09:06:eb:cb:
                    13:ac:f5:78:d7:7b:78:0e:3a:b1:e5:56:16:da:0e:
                    30:86:dd:5d:76:4f:fe:20:fc:a2:6c:ac:63:06:b0:
                    a5:38:4f:67:74:49:9c:8b:dd:f1:93:56:c7:58:60:
                    09:d1:0c:02:31:33:2c:12:ba:a5:78:77:6a:fc:cb:
                    67:4e:27:55:7d:96:fe:8a:b8:c2:0a:76:df:46:b8:
                    6b:85:79:cf:44:e1:81:50:59:4b:be:73:4f:b9:03:
                    35:22:57:f1:ba:09:3d:24:db:70:5a:5a:ce:ed:75:
                    72:23:95:82:64:16:7c:f6:5c:13:55:7d:bd:ba:be:
                    ee:b7:b1:76:4c:5b:cd:69:6c:e8:26:21:21:81:d9:
                    3f:00:c8:09:aa:fa:2a:d5:10:27:1c:b2:be:d7:04:
                    0e:5f:c1:92:0e:49:2c:c6:74:53:f4:49:44:82:94:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:9e:25:9a:59:f9:a5:2e:6f:73:00:74:69:ac:0d:8c:eb:
         8c:86:b5:0e:02:0c:da:15:34:99:40:09:e4:29:54:a4:2b:7d:
         ca:6d:8a:ed:25:a9:8f:56:5f:1c:73:82:35:df:68:b5:8f:ea:
         bd:db:f6:01:08:d9:2c:c3:a8:fb:8f:0f:c0:3b:26:0a:a7:c2:
         e6:eb:67:d3:fd:73:3a:17:58:32:02:c5:ea:53:b4:2f:d2:ee:
         80:af:3c:0e:12:d8:02:0f:4a:5e:71:97:b3:f6:14:50:eb:72:
         54:1b:b8:82:ef:4c:8b:ab:75:50:29:c5:1d:74:39:91:ea:fa:
         c6:51:e6:4b:90:4a:ea:13:e7:a3:e6:1b:73:e5:05:68:46:b8:
         95:2c:09:b2:01:40:8d:02:bb:46:ae:bf:5c:69:d4:9e:f6:95:
         83:bd:27:b3:66:a6:2b:ec:b4:c2:4c:96:ed:d0:ee:7c:40:1f:
         3c:d6:9c:d1:c2:38:58:4b:69:f1:91:da:64:bf:60:6d:89:f1:
         d3:c5:cc:63:61:29:59:1e:d8:08:e8:74:f3:26:10:98:2f:9c:
         59:01:99:85:ba:28:15:9a:6a:0b:dc:cb:bb:9c:c1:ba:78:c4:
         af:fa:ac:51:e6:a7:f2:7a:dc:f0:e4:fa:9a:01:d2:05:28:a6:
         0e:fb:ae:e2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUGjcAeSPoCBhZUCCM8t/F+pQkpy4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYyOTExMzEwMVoX
DTI1MDYyODExMzYwMVowMzExMC8GA1UEAxMoQUJGNzkzQjUzNDY4NkVDMkQ1ODIw
Q0YxNTNFNDNBQUVGMDg4QkU0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOZqV5FrJbiE6VbRhO/tVByD8/Wj1HXJpa7fr9obXdCSYKgsp/EY7oYrOqIZ
Rngsp8JslsHsFZwLNcUnJ166FgUbb7S9tCVM0Zx2LRcieyrLwpcSgNgJBuvLE6z1
eNd7eA46seVWFtoOMIbdXXZP/iD8omysYwawpThPZ3RJnIvd8ZNWx1hgCdEMAjEz
LBK6pXh3avzLZ04nVX2W/oq4wgp230a4a4V5z0ThgVBZS75zT7kDNSJX8boJPSTb
cFpazu11ciOVgmQWfPZcE1V9vbq+7rexdkxbzWls6CYhIYHZPwDICar6KtUQJxyy
vtcEDl/Bkg5JLMZ0U/RJRIKU6ccCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKv3k7U0aG7C1YIM8VPkOq7wiL5BMB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by84MWE0Yjc4Mi1jMzdmLTQzNzktYThhNi00ZGE1ZDgyYjIzOWYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxYTRiNzgy
LWMzN2YtNDM3OS1hOGE2LTRkYTVkODJiMjM5Zi8wL0FCRjc5M0I1MzQ2ODZFQzJE
NTgyMENGMTUzRTQzQUFFRjA4OEJFNDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGdQoQwDQYJKoZIhvcNAQELBQADggEBAB1NniWaWfmlLm9zAHRprA2M64yGtQ4C
DNoVNJlACeQpVKQrfcptiu0lqY9WXxxzgjXfaLWP6r3b9gEI2SzDqPuPD8A7Jgqn
wubrZ9P9czoXWDICxepTtC/S7oCvPA4S2AIPSl5xl7P2FFDrclQbuILvTIurdVAp
xR10OZHq+sZR5kuQSuoT56PmG3PlBWhGuJUsCbIBQI0Cu0auv1xp1J72lYO9J7Nm
pivstMJMlu3Q7nxAHzzWnNHCOFhLafGR2mS/YG2J8dPFzGNhKVke2AjodPMmEJgv
nFkBmYW6KBWaagvcy7ucwbp4xK/6rFHmp/J63PDk+poB0gUopg77ruI=
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org