Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
File:                     056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer (raw, json)
Hash identifier:          UDgnkDPp8COodgGGUOK22U1jQpi0XyJ3M6vH+A1r+/A=
Subject key identifier:   05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C1440F7A42C33C61FBBF4B1E3239C57D1A8A9BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 03:32:24 +0000
Certificate not after:    Fri 24 Oct 2025 03:37:24 +0000
Subordinate resources:    IP: 103.102.26.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:14:40:f7:a4:2c:33:c6:1f:bb:f4:b1:e3:23:9c:57:d1:a8:a9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 25 03:32:24 2024 GMT
            Not After : Oct 24 03:37:24 2025 GMT
        Subject: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:74:fc:8e:e1:06:99:ed:f9:55:7c:7a:27:
                    2c:d4:30:01:6a:43:71:3b:c2:a3:2f:72:fa:7e:fc:
                    68:f0:86:7c:b2:b4:a2:ed:ea:73:36:c5:41:e9:47:
                    01:44:6b:fe:99:3a:35:01:25:6a:7a:0d:16:75:6d:
                    e7:c3:71:3d:0a:6c:e9:6d:49:28:05:dd:1b:44:e3:
                    71:9b:ee:d5:a4:e0:58:63:70:33:2a:42:9c:fc:fc:
                    8a:a3:32:65:ef:ed:92:17:e9:ea:be:3b:a5:91:6c:
                    3b:33:46:e5:df:d1:b8:fe:af:c3:5a:a7:7e:d4:5a:
                    80:0b:c7:6d:75:0f:26:d6:ec:ae:94:d6:ad:3d:4d:
                    d6:43:87:3b:f1:4d:02:cd:d1:cb:61:4c:06:d1:03:
                    0a:d0:6a:73:17:88:d5:77:19:d5:45:18:8c:ae:7f:
                    2c:4e:c3:f1:24:56:2a:a2:f9:78:c9:76:8a:9b:03:
                    c1:2c:2a:cb:a2:ab:b2:ab:eb:ca:a8:36:ce:22:2e:
                    9c:8a:d6:7f:44:e0:12:da:5e:64:a1:96:7a:f2:ab:
                    08:0d:9c:cb:c2:d0:a3:3e:3a:7e:91:d3:84:c4:52:
                    f8:22:17:d3:61:cb:d9:df:a7:c7:bc:60:63:6d:33:
                    b5:af:75:67:14:fd:6f:04:ae:43:bd:74:c8:8f:82:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:61:c0:66:26:be:1d:64:4c:a7:da:fb:3c:8b:4e:55:9d:b0:
         8e:03:72:77:26:56:b5:b1:41:8a:91:74:5b:6d:d2:0a:f5:61:
         40:b3:b2:0f:15:6c:36:fe:6b:dc:f4:86:f3:3d:c1:90:a1:c1:
         bc:e4:b9:87:24:cf:af:05:22:8d:21:99:76:2a:72:12:da:2a:
         c0:79:26:62:b0:c3:00:c9:33:cc:ab:0a:51:f2:25:f3:33:90:
         f0:29:19:d8:f0:05:68:35:ce:6b:6a:6f:82:17:93:1d:2a:fc:
         57:e6:7d:a6:5b:62:ed:0b:df:8a:a4:05:54:9c:d6:f7:bd:02:
         71:d6:d0:e7:04:63:21:11:85:f9:3b:20:8a:a4:7a:79:c2:36:
         25:df:fe:ba:4f:2d:92:25:dd:8f:c5:f5:d8:71:2f:43:a9:57:
         e5:64:f6:8d:6d:e7:4f:80:3f:74:99:a7:e1:63:71:df:9d:93:
         c1:00:f0:3f:d6:f3:9c:24:b9:3c:58:b9:f3:f1:6d:fe:b1:a9:
         ac:b9:71:9e:0b:83:ef:2e:56:13:12:6a:a7:9c:e2:35:5b:73:
         d4:fe:2a:f9:8a:b4:b0:82:2e:a4:2f:9f:c0:c2:ee:4c:52:cf:
         5e:7c:87:d6:1c:51:13:f6:f9:9a:49:b3:04:d2:76:75:f9:42:
         8f:5b:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org