Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer
File:                     D5265466AE0186702AF52D11170A29AC32F54EF5.cer (raw, json)
Hash identifier:          x/Vpfli0tIWCdWezS3BVi///epbcTNRF6NPuctG9kuI=
Subject key identifier:   D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       74A1BDF53289BE6AD4308C1E65A7864354E142AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Jun 2024 05:50:46 +0000
Certificate not after:    Thu 05 Jun 2025 05:55:46 +0000
Subordinate resources:    IP: 157.15.0.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a1:bd:f5:32:89:be:6a:d4:30:8c:1e:65:a7:86:43:54:e1:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun  6 05:50:46 2024 GMT
            Not After : Jun  5 05:55:46 2025 GMT
        Subject: CN=D5265466AE0186702AF52D11170A29AC32F54EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:50:1f:56:72:32:ce:33:b2:bb:a0:8b:2f:
                    53:4d:35:62:6b:f4:64:58:e1:5f:a1:72:71:37:85:
                    2d:4c:b2:1a:b9:9e:41:da:06:5d:85:36:03:2e:20:
                    75:ed:f4:a9:5d:82:d8:cf:a3:7a:48:ec:f2:d3:9f:
                    1c:02:d0:3a:d6:41:59:79:19:ae:60:70:9e:1a:de:
                    93:86:10:a7:15:dd:14:19:6a:26:aa:d2:41:4b:0b:
                    3d:b0:dc:20:9f:cb:9d:d6:6d:1a:c9:9a:e8:1f:2d:
                    91:94:ef:b5:75:f4:8d:22:8e:61:6f:8e:c7:bf:5a:
                    46:6d:b7:6d:9c:96:db:b3:3e:63:3c:d0:5b:26:5a:
                    02:8d:fb:24:d1:65:c1:e1:52:e9:63:ff:45:c7:88:
                    f1:c4:66:f2:0b:68:e3:e9:88:fb:09:60:34:6c:a2:
                    9c:e0:b7:b0:4b:a6:81:96:7e:85:9d:23:91:8e:c6:
                    d9:86:bb:1c:9f:af:e6:f0:11:24:29:5c:90:70:0c:
                    2d:f5:ca:27:73:2d:10:23:bd:bc:a2:b9:23:fa:5a:
                    b9:52:43:28:14:1c:b8:72:61:4b:5a:a8:d7:b2:e3:
                    3e:4c:1b:9b:22:c8:53:53:89:7a:d4:a0:ff:50:68:
                    c9:65:94:92:99:4e:9b:dc:c8:09:70:b5:67:bc:4e:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:6b:87:d5:42:fe:15:96:7e:08:1b:97:34:3e:b5:81:5e:38:
         bc:61:3b:b7:8f:bc:2d:87:9b:4f:02:98:0c:68:04:3b:11:bd:
         18:4a:90:0d:f5:96:8a:4a:15:5c:be:6b:a6:ef:4f:01:79:86:
         d7:9a:cb:f8:8b:50:50:7b:4e:5d:9a:d6:c8:b9:59:2d:cb:06:
         5d:cd:61:df:e1:04:4f:61:f5:70:f6:13:16:36:49:a1:4b:41:
         53:c7:54:c2:70:54:97:ee:e1:b0:cf:e6:08:e5:d8:2c:fe:b4:
         aa:ed:2a:bb:aa:e4:49:3a:7c:bf:26:98:2e:49:b2:30:ab:0e:
         70:82:98:27:fc:bb:4b:61:b1:58:ef:74:c0:21:20:3e:f8:7d:
         00:0f:95:36:29:4f:99:bb:9a:d4:9f:8a:3d:31:77:c8:dc:f4:
         27:40:09:ed:3e:42:97:b0:e7:b7:dd:4f:a4:0c:93:71:13:cf:
         42:a2:b0:bc:b3:62:7f:46:f8:b5:dc:1a:d9:eb:32:f5:ed:b8:
         ac:41:ba:fb:84:14:35:9b:0f:13:ce:42:2c:c2:9c:be:be:39:
         8b:ae:72:1a:af:9e:77:60:e4:51:8d:2b:50:45:73:17:5d:36:
         e2:74:e0:a9:79:d7:a5:f6:85:fd:17:cf:b1:32:25:1d:a5:5d:
         71:66:d2:2c
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUdKG99TKJvmrUMIweZaeGQ1ThQqswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDYwNjA1NTA0NloX
DTI1MDYwNTA1NTU0NlowMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUy
RDExMTcwQTI5QUMzMkY1NEVGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCpUB9WcjLOM7K7oIsvU001Ymv0ZFjhX6FycTeFLUyyGrmeQdoGXYU2Ay4g
de30qV2C2M+jekjs8tOfHALQOtZBWXkZrmBwnhrek4YQpxXdFBlqJqrSQUsLPbDc
IJ/LndZtGsma6B8tkZTvtXX0jSKOYW+Ox79aRm23bZyW27M+YzzQWyZaAo37JNFl
weFS6WP/RceI8cRm8gto4+mI+wlgNGyinOC3sEumgZZ+hZ0jkY7G2Ya7HJ+v5vAR
JClckHAMLfXKJ3MtECO9vKK5I/pauVJDKBQcuHJhS1qo17LjPkwbmyLIU1OJetSg
/1BoyWWUkplOm9zICXC1Z7xOUX8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFNUmVGauAYZwKvUtERcKKawy9U71MB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iNDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NjEzN2Fl
LTJlZmItNDNjMC1iZGI3LTQzZjVkOTM5Y2YwYy8wL0Q1MjY1NDY2QUUwMTg2NzAy
QUY1MkQxMTE3MEEyOUFDMzJGNTRFRjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGdDwAwDQYJKoZIhvcNAQELBQADggEBADdrh9VC/hWWfggblzQ+tYFeOLxhO7eP
vC2Hm08CmAxoBDsRvRhKkA31lopKFVy+a6bvTwF5hteay/iLUFB7Tl2a1si5WS3L
Bl3NYd/hBE9h9XD2ExY2SaFLQVPHVMJwVJfu4bDP5gjl2Cz+tKrtKruq5Ek6fL8m
mC5JsjCrDnCCmCf8u0thsVjvdMAhID74fQAPlTYpT5m7mtSfij0xd8jc9CdACe0+
Qpew57fdT6QMk3ETz0KisLyzYn9G+LXcGtnrMvXtuKxBuvuEFDWbDxPOQizCnL6+
OYuuchqvnndg5FGNK1BFcxddNuJ04Kl516X2hf0Xz7EyJR2lXXFm0iw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org