Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer
File:                     07560F77A1685B4C155E037BCDB207359FA510B4.cer (raw, json)
Hash identifier:          x6+4Y6nejTqOZ447G2ioHECgSrRvx9x9SFmUdraG7lY=
Subject key identifier:   07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2A3AE6CB56BF45A5E35563C6A2368FFD1B54C144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 31 May 2024 00:35:47 +0000
Certificate not after:    Fri 30 May 2025 00:40:47 +0000
Subordinate resources:    IP: 103.172.18.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3a:e6:cb:56:bf:45:a5:e3:55:63:c6:a2:36:8f:fd:1b:54:c1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 31 00:35:47 2024 GMT
            Not After : May 30 00:40:47 2025 GMT
        Subject: CN=07560F77A1685B4C155E037BCDB207359FA510B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:ff:5a:7a:5f:84:2c:6e:c2:fe:4a:0d:b7:
                    6d:66:6d:83:a5:4b:de:1c:d6:f3:c9:e8:05:b6:d7:
                    1a:dc:9e:fe:15:bd:3e:65:3b:23:e0:f0:66:0c:7f:
                    17:58:8c:c9:2d:0e:9c:60:b8:d5:69:31:e5:e1:a5:
                    3c:d1:7c:36:b1:8f:94:f4:da:4b:98:ee:5d:03:1c:
                    7c:c9:0a:6e:6f:53:c2:f5:51:b7:ee:06:fe:c7:20:
                    d0:cc:30:7a:4a:ce:69:95:75:ce:1b:2a:96:99:3f:
                    39:dd:9c:62:0d:98:ee:ff:1c:07:cc:cb:e4:15:44:
                    17:1f:5e:3a:fa:39:8d:2f:d6:0f:75:1f:16:46:d5:
                    c3:6b:87:8e:72:f7:e4:f6:bd:3d:11:e2:75:fd:c0:
                    f4:ba:2e:f7:6f:ca:0c:5f:a6:8d:fd:d0:95:44:55:
                    f2:1f:2b:2a:b6:0a:ef:6b:6b:bc:2b:f9:70:d8:23:
                    76:5c:0e:fb:1d:bc:ca:97:4a:d3:25:51:31:50:ae:
                    c6:93:b9:0c:45:da:97:ca:40:38:69:33:b0:e3:21:
                    dc:eb:f8:5c:b2:78:8e:8b:1e:b1:98:d4:2a:e1:e2:
                    8d:c7:9f:ca:26:95:fa:22:6a:8a:f9:a0:75:da:d6:
                    b8:1f:e1:99:d3:72:84:ac:2d:40:e8:f3:b8:38:3d:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:27:dd:51:e1:74:62:43:cb:66:4d:03:1e:d5:8d:24:97:21:
         cf:b7:2d:d7:5c:f1:75:05:ed:70:5f:50:a2:3f:80:7a:dc:72:
         19:8e:fe:c9:82:11:da:ec:f5:6e:c0:58:b4:02:02:82:98:bb:
         bd:0f:68:ac:9c:98:47:f4:80:23:a7:25:12:38:2c:02:5f:de:
         2a:46:17:34:8f:1f:23:d5:12:1c:bf:8b:9c:fb:93:43:52:1a:
         0c:8a:bc:79:dc:49:ea:23:20:28:16:38:b9:2a:47:40:25:ee:
         26:ee:79:3d:40:b8:1e:1b:41:ab:df:d3:82:2d:ff:ed:3a:81:
         84:85:03:b7:3f:f6:5a:db:e3:7d:de:53:39:ac:61:eb:e6:d6:
         a8:1b:32:ef:03:a7:d7:5f:c9:c2:35:e9:43:07:90:d9:c5:8c:
         0e:6d:37:0b:67:06:c5:90:bc:95:f7:49:84:7a:fe:36:be:22:
         74:73:f7:5b:f8:e3:7c:fa:11:73:8c:e6:8c:a6:4d:b1:0d:88:
         c2:fe:bd:d6:aa:0a:7b:3c:bd:8c:f8:fc:22:03:ef:11:be:8f:
         42:04:b4:40:15:17:fd:19:1b:4e:a2:fd:5c:07:94:2a:e2:ec:
         1d:5e:3f:95:93:61:f9:76:c0:46:bd:f5:54:28:11:d6:c7:3a:
         0d:b3:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org