Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
File:                     D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer (raw, json)
Hash identifier:          k5Xj37jtkcp4m2Nwczu3gsttmOFYCW4cnPBJvq6krXg=
Subject key identifier:   D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       4754385C771D16374C31AE661F680E41D7751973
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 May 2024 16:23:47 +0000
Certificate not after:    Fri 23 May 2025 16:28:47 +0000
Subordinate resources:    IP: 157.66.176.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:54:38:5c:77:1d:16:37:4c:31:ae:66:1f:68:0e:41:d7:75:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: May 24 16:23:47 2024 GMT
            Not After : May 23 16:28:47 2025 GMT
        Subject: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:ad:b9:29:30:8b:63:8a:d9:46:28:a1:6e:
                    b9:e3:4f:ec:62:dd:7e:b3:71:4a:08:9b:97:c2:58:
                    7b:a9:64:6f:dd:6e:2a:64:8c:bd:d0:e1:d4:e0:18:
                    70:53:c5:7a:71:b2:49:dc:7e:2d:df:ad:a0:b5:55:
                    98:c8:bf:04:58:66:03:c6:1c:d0:10:3c:85:79:00:
                    62:77:9d:8c:2d:38:b5:81:3f:ea:9e:28:cf:bc:b1:
                    c3:ce:c5:a9:b1:56:e2:e4:4d:cd:96:63:e5:0e:dd:
                    ee:43:ec:fe:a8:3b:bc:cc:3a:c4:45:b6:ab:5c:0a:
                    88:94:f2:3c:b7:0b:4e:6b:0e:42:83:ac:a7:c4:9a:
                    ca:fd:d3:f7:67:9e:4d:0e:ec:84:ef:38:75:bb:a1:
                    4e:e9:17:63:62:2c:45:d0:88:c6:b0:6a:34:35:ac:
                    3a:fe:aa:79:5b:34:99:42:57:82:ec:ed:ea:87:dd:
                    c6:a8:0d:22:12:e2:ab:dc:69:74:61:c1:3d:e7:5f:
                    75:c8:ae:ee:31:a9:ba:d6:c8:dd:09:da:9c:80:83:
                    af:f6:cb:8d:27:28:aa:cd:ab:e0:4d:a6:0b:84:d0:
                    da:51:b1:d7:a7:4e:4b:75:c5:bb:49:14:bf:9b:86:
                    fd:d6:0f:cc:7e:e7:4c:dd:b1:90:c6:64:a6:6e:38:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:a5:14:5e:83:36:37:1d:de:e6:41:8d:24:f3:a9:b8:e4:
         3c:56:aa:fe:99:d7:c5:2e:6c:73:19:ec:df:c2:ae:a3:53:52:
         3d:6c:47:e1:30:86:7f:10:5e:04:10:69:59:fb:08:ea:98:05:
         0a:af:d1:f1:5d:a3:f2:78:9c:19:f5:02:b5:2e:eb:5e:53:02:
         96:97:b4:24:44:30:1f:c4:ca:ab:67:72:ce:90:22:4e:10:c4:
         f4:2e:64:d8:89:98:4f:4d:04:99:9d:62:9d:5a:78:a2:db:66:
         3f:ff:91:15:ac:b8:b8:7b:24:a1:00:76:ec:df:1f:0e:4c:50:
         fe:24:87:bb:0c:87:86:d9:2b:a0:60:55:15:70:58:65:08:21:
         a7:58:38:be:40:cc:c3:f1:ec:0d:1c:f1:52:53:a4:fe:a4:e0:
         df:08:64:8e:6f:ed:a7:4c:a6:2b:b7:24:b3:04:0c:77:f2:ce:
         e1:52:90:63:64:fe:b7:06:45:89:10:be:58:35:40:d7:43:7f:
         32:fc:af:4a:7e:93:1c:64:f0:b7:a3:d2:49:b2:df:aa:e0:2c:
         45:26:92:a3:bb:cd:00:7b:21:15:14:9b:ec:c8:32:a2:d6:43:
         d0:18:af:cc:4c:a9:61:bf:17:1f:05:f3:82:1c:0d:ad:3a:fa:
         8d:1c:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org