Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
File:                     06C079105A8A7FB53C97370CDE636B0A22588747.cer (raw, json)
Hash identifier:          96nI4QeVwXvAaBe2KkSPMYOEEWnhjK0mu8Bb2b08avU=
Subject key identifier:   06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       296E8696F65A0FB5006517093C4BEF30205DD1DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 07:11:12 +0000
Certificate not after:    Mon 30 Jun 2025 07:16:12 +0000
Subordinate resources:    IP: 103.125.104.0/22
                          IP: 2403:f1c0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6e:86:96:f6:5a:0f:b5:00:65:17:09:3c:4b:ef:30:20:5d:d1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:11:12 2024 GMT
            Not After : Jun 30 07:16:12 2025 GMT
        Subject: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:08:ea:34:63:bd:00:52:86:51:e5:00:37:
                    94:14:31:d9:f3:1e:8d:90:f4:13:da:5a:9b:d7:b2:
                    5b:3c:94:3e:c8:d5:44:d4:80:d1:94:42:98:5d:49:
                    f9:68:df:43:53:bb:e9:a0:81:a2:dc:68:e4:fa:99:
                    ad:3c:e9:5e:d3:25:6d:07:7b:65:2e:68:4c:6a:56:
                    60:39:e0:71:bb:75:d6:c3:ba:50:18:21:21:ee:4f:
                    be:ec:3d:1e:4b:35:ea:65:3e:ed:d9:b6:ef:c2:d8:
                    24:76:56:3a:d6:75:11:93:fd:22:b7:ac:54:ea:dd:
                    1b:e6:23:1d:f1:af:68:6f:4b:a7:2e:8b:66:23:79:
                    56:8f:19:8d:e2:ea:bd:0b:a8:2d:c3:11:e5:11:f1:
                    50:ce:80:3d:d0:d6:58:ed:d7:45:a9:a7:dc:d8:87:
                    ba:a5:0c:da:7b:bd:d5:6c:87:8b:3a:c1:2f:7b:20:
                    98:a7:de:86:29:6f:a6:7e:a0:c4:e8:50:91:b4:6c:
                    a9:48:45:f0:d5:63:91:35:05:d8:91:67:31:e4:4f:
                    77:38:66:c4:c6:1f:50:84:27:5b:59:e3:64:25:52:
                    c5:9f:e9:f2:54:f0:1c:1e:35:cc:d2:6a:24:07:76:
                    64:00:28:1d:d0:98:2e:61:ea:9a:9b:77:0d:03:c9:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.104.0/22
                IPv6:
                  2403:f1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:8a:e5:86:68:fc:8c:11:cd:af:22:d8:41:81:c3:90:ad:
         e7:e1:53:de:22:0c:23:59:a3:c2:6c:1f:0e:4d:44:cd:7b:46:
         69:75:24:01:84:2b:0d:5d:21:7c:54:ed:54:9b:71:b1:7d:ed:
         c0:b2:d0:9e:33:da:8f:f7:8a:6a:21:75:b0:e4:0c:57:32:f9:
         f5:b4:f3:3d:ce:d0:1f:53:a6:c1:79:33:11:4d:2b:6f:92:4c:
         de:61:c4:18:af:be:72:7d:c3:42:eb:3e:a8:c9:c1:ee:f2:51:
         a2:b3:5e:06:78:b4:48:d4:6f:60:46:f3:46:24:44:48:d8:1b:
         0c:f8:78:15:e2:fb:46:d5:6f:f0:a7:36:1c:bd:8f:a6:03:7e:
         30:4c:ff:23:67:1c:5b:32:12:76:a4:84:ee:e2:96:41:c2:a7:
         a7:91:90:72:ee:3f:ed:fc:40:e8:49:66:43:5f:00:26:3f:38:
         0f:41:f3:72:33:47:b5:51:e0:57:50:20:92:83:7d:4a:5b:4f:
         af:c7:ff:90:51:40:10:c3:90:10:93:f1:c3:29:81:a6:b2:73:
         bd:9d:09:54:86:cc:7a:bf:d3:4e:56:7c:49:b1:fb:6c:e4:fa:
         37:64:fb:a1:63:e3:f0:2b:d2:bc:ae:75:64:e0:07:dd:44:66:
         fc:72:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:17 2024 by rpki-client on console-ams.rpki-client.org