Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
File:                     E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer (raw, json)
Hash identifier:          tqcU6My/GWMSCJgEETFznlt5QaTr/mM2nsmQceIA0VU=
Subject key identifier:   E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       4C0D5D30465427DFA2313395A8F66D2612AB32E1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 02:02:41 +0000
Certificate not after:    Wed 19 Mar 2025 02:07:41 +0000
Subordinate resources:    IP: 157.15.118.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0d:5d:30:46:54:27:df:a2:31:33:95:a8:f6:6d:26:12:ab:32:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Mar 20 02:02:41 2024 GMT
            Not After : Mar 19 02:07:41 2025 GMT
        Subject: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:10:e2:e3:1e:03:4f:d7:e3:5f:42:2b:4e:
                    8c:76:3d:75:25:1a:ca:e0:b7:e1:56:b4:a1:bd:31:
                    d0:63:e4:c8:0e:4a:52:59:6a:55:c4:ea:45:a7:85:
                    ed:18:c7:5d:8b:b2:b2:12:b3:80:ff:59:4d:51:d5:
                    7a:1f:d9:fc:04:67:49:83:56:f0:29:fd:72:8e:26:
                    bc:df:d7:1b:bb:8d:5e:52:12:0d:6e:f6:62:88:35:
                    01:70:09:e3:c8:62:ff:69:03:6f:52:03:f8:b3:79:
                    0d:b3:41:e6:fd:2b:ba:dc:11:9e:24:e3:ff:67:31:
                    d7:9e:2f:2d:c1:21:62:20:29:c1:2d:1b:68:b8:4d:
                    d6:94:c3:8b:46:ad:97:c3:38:68:8f:5b:7f:3b:67:
                    0d:ca:bb:56:0c:4a:3d:33:8b:36:ab:66:ce:32:a6:
                    9e:8c:d2:8d:07:7c:57:9e:93:ee:bd:ca:53:93:a5:
                    be:37:d9:5a:f8:8f:13:49:20:40:3c:6f:f3:2b:f0:
                    dd:db:72:59:06:59:d4:fe:fc:07:5c:9e:8d:98:b9:
                    c9:d0:dd:fd:d8:b5:56:e6:dc:2a:a5:6d:c5:c8:43:
                    5b:7d:7d:5b:19:39:08:3e:d8:bf:53:87:fd:25:ea:
                    2b:22:3f:7f:5f:2f:d8:6e:63:ef:90:2a:7f:87:01:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:39:d6:06:67:c2:34:36:35:a0:67:3c:65:03:32:2b:86:57:
         df:4f:55:9f:a7:25:72:f6:d2:ac:16:7b:a5:46:99:e0:19:86:
         7f:24:b3:32:2d:0a:b4:99:ce:83:01:c2:cd:43:5b:af:e2:6a:
         a0:8f:c9:94:eb:e0:3c:87:e6:c8:f2:0e:d8:48:fa:0a:83:ad:
         65:ac:c3:65:ae:ac:60:ad:1e:58:b8:c8:f9:45:d4:d7:6c:79:
         69:e6:b9:51:e1:41:69:46:35:98:59:e3:b0:66:ba:b7:d1:04:
         84:3d:68:92:fd:eb:44:a7:45:07:77:33:96:20:87:bf:f0:c4:
         3a:fa:90:98:b6:db:37:d4:f9:fe:1b:74:c8:62:9c:19:84:2a:
         80:41:1b:7e:b4:bf:17:1d:23:d8:9e:e1:13:98:1b:bf:c5:81:
         9a:ab:6a:df:60:fe:70:31:9f:31:ac:19:f5:17:1d:71:ec:1d:
         ec:77:f5:c0:9c:2f:1c:ff:79:66:35:a0:74:8e:74:0b:a0:48:
         ff:7f:30:50:2d:27:06:84:df:3e:8c:90:8e:0d:ff:80:12:a2:
         ef:44:d2:15:2b:4e:54:69:a5:ba:10:dd:92:83:ef:68:0e:48:
         0a:30:e9:fd:01:2a:b6:66:4e:12:cd:df:f8:36:8b:db:4d:a4:
         d9:22:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org