Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
File:                     056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer (raw, json)
Hash identifier:          4RLEuZfOWL86g/aocpz7UZ6Ua79VczTnJ1uB6dyXN1w=
Subject key identifier:   05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7DE270E607387C4938BF4188B167DAE690407381
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 15:00:03 +0000
Certificate not after:    Thu 21 Nov 2024 15:05:03 +0000
Subordinate resources:    IP: 103.102.26.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 13:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e2:70:e6:07:38:7c:49:38:bf:41:88:b1:67:da:e6:90:40:73:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 23 15:00:03 2023 GMT
            Not After : Nov 21 15:05:03 2024 GMT
        Subject: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:74:fc:8e:e1:06:99:ed:f9:55:7c:7a:27:
                    2c:d4:30:01:6a:43:71:3b:c2:a3:2f:72:fa:7e:fc:
                    68:f0:86:7c:b2:b4:a2:ed:ea:73:36:c5:41:e9:47:
                    01:44:6b:fe:99:3a:35:01:25:6a:7a:0d:16:75:6d:
                    e7:c3:71:3d:0a:6c:e9:6d:49:28:05:dd:1b:44:e3:
                    71:9b:ee:d5:a4:e0:58:63:70:33:2a:42:9c:fc:fc:
                    8a:a3:32:65:ef:ed:92:17:e9:ea:be:3b:a5:91:6c:
                    3b:33:46:e5:df:d1:b8:fe:af:c3:5a:a7:7e:d4:5a:
                    80:0b:c7:6d:75:0f:26:d6:ec:ae:94:d6:ad:3d:4d:
                    d6:43:87:3b:f1:4d:02:cd:d1:cb:61:4c:06:d1:03:
                    0a:d0:6a:73:17:88:d5:77:19:d5:45:18:8c:ae:7f:
                    2c:4e:c3:f1:24:56:2a:a2:f9:78:c9:76:8a:9b:03:
                    c1:2c:2a:cb:a2:ab:b2:ab:eb:ca:a8:36:ce:22:2e:
                    9c:8a:d6:7f:44:e0:12:da:5e:64:a1:96:7a:f2:ab:
                    08:0d:9c:cb:c2:d0:a3:3e:3a:7e:91:d3:84:c4:52:
                    f8:22:17:d3:61:cb:d9:df:a7:c7:bc:60:63:6d:33:
                    b5:af:75:67:14:fd:6f:04:ae:43:bd:74:c8:8f:82:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d4:84:39:f4:a0:8f:1c:03:05:8a:0f:63:dd:ec:e0:0e:44:
         58:89:56:30:13:ee:70:ba:6c:08:b5:66:47:bf:36:70:92:7e:
         82:bb:df:11:41:d7:13:f1:18:3a:bb:e1:46:13:6a:c8:c5:bf:
         35:b3:bd:2d:97:5d:99:8b:12:5f:de:94:a6:37:a3:c8:89:55:
         2b:c5:5a:b3:c0:6c:a9:1d:b8:db:1e:ba:c1:3c:74:53:e2:9d:
         09:3d:d7:a5:af:c8:25:cc:13:b6:c8:ab:dd:87:e3:bd:a1:92:
         f7:46:7a:cf:92:9b:29:7c:af:5f:ff:50:8b:b4:cf:40:1d:6e:
         a6:34:a4:b1:8c:17:0d:c7:f8:23:0a:72:9b:e9:5e:4d:d9:65:
         a7:e3:36:e1:d6:ad:3b:93:f0:a7:b2:35:c9:62:a4:f0:e2:5f:
         49:03:13:7e:0e:21:47:f4:2b:58:12:b3:2e:90:9b:41:fc:6c:
         8e:f9:d3:98:39:08:77:cb:45:98:2e:cd:82:2c:5f:75:82:4a:
         aa:75:a7:c6:4b:49:16:5a:2f:a9:4c:96:71:21:f2:9d:55:ee:
         02:bf:7c:be:b8:ef:c0:31:ee:53:8b:6f:2d:99:6d:57:65:6e:
         b9:b5:66:59:36:06:d8:e5:a3:9c:23:7c:9b:70:8d:91:69:db:
         e4:e8:0c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:50:24 2024 by rpki-client on console-fra.rpki-client.org