Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
File:                     09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer (raw, json)
Hash identifier:          tQdfxa4UyaAWhlbmDRa8IEYcWrVO4PxpsgxU+HFvmMM=
Subject key identifier:   09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       552878B5DE3DFE8483DC205C0D29E4E9C9D6D968
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 09:24:20 +0000
Certificate not after:    Mon 29 Jul 2024 09:29:20 +0000
Subordinate resources:    IP: 115.178.128.0/17
                          IP: 202.148.0.0/19
                          IP: 203.201.160.0/20
                          IP: 2404:1b8::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 19:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:28:78:b5:de:3d:fe:84:83:dc:20:5c:0d:29:e4:e9:c9:d6:d9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 31 09:24:20 2023 GMT
            Not After : Jul 29 09:29:20 2024 GMT
        Subject: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:24:03:c8:96:9e:57:1e:08:0e:ce:89:ee:
                    8f:10:6e:09:8f:2d:12:0b:c6:ce:bf:b7:76:ca:48:
                    6d:62:0c:c0:88:a3:2b:75:cd:e2:95:48:47:30:06:
                    b4:be:df:72:76:ca:77:c5:82:c2:7c:7c:b4:84:2c:
                    35:3e:62:ee:b9:3d:8f:83:f2:dc:25:e6:d3:96:ab:
                    91:e3:37:64:9c:2f:ce:5b:8c:23:b2:bc:74:60:dd:
                    26:34:e7:2b:60:b3:de:b7:87:1f:47:4d:86:a3:f1:
                    77:19:2f:de:74:d0:a1:69:b5:95:ea:33:63:cc:b6:
                    5a:2d:54:6e:e9:df:a6:05:1c:be:d9:83:7c:6f:f5:
                    63:94:3d:72:40:c6:2e:e1:c9:fa:ab:5b:93:77:0c:
                    97:da:67:b8:ba:cc:cc:c3:42:75:5e:46:f1:3d:83:
                    4b:42:df:4f:cb:5c:e1:73:28:a3:bf:08:65:16:19:
                    f5:82:87:0e:46:c1:90:6b:c6:f0:b2:3d:94:fb:1d:
                    6a:7e:b8:fb:65:ff:e3:d6:3a:61:68:55:e6:6d:a8:
                    2b:fb:3b:62:81:cb:a8:a1:8f:09:f0:dd:62:9a:32:
                    6a:70:66:26:07:d2:d8:bc:77:a8:ac:7d:3b:5a:ed:
                    65:74:25:ab:32:7f:f4:33:b3:08:08:e6:b8:f4:fa:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.128.0/17
                  202.148.0.0/19
                  203.201.160.0/20
                IPv6:
                  2404:1b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:60:44:94:bd:7d:b9:6a:ce:f0:e2:04:f7:f0:0a:31:45:
         3b:dc:0a:cf:61:1b:8b:4d:7f:66:36:46:e7:f0:7d:c9:94:05:
         82:14:f7:c7:59:63:1e:d3:ce:93:ba:fa:e5:b3:0b:b1:1b:ba:
         fb:63:49:1a:b2:63:bf:2c:26:77:f9:78:ae:7f:0b:0d:5d:52:
         94:9e:fd:f7:f0:06:22:d2:94:67:ba:d2:a1:3d:7c:dc:36:46:
         4b:62:a6:f0:e4:a5:77:96:5e:cc:69:1f:47:6f:db:a9:6f:4b:
         1b:1a:1e:80:5c:ea:c6:8b:2a:af:83:fd:0f:b8:12:41:24:af:
         ca:83:b0:69:ec:92:98:4d:bf:29:99:a4:2a:5b:85:ae:9c:20:
         f3:64:ef:ab:22:f9:76:d7:8d:63:06:f1:46:75:ee:c6:95:6b:
         ac:b6:76:5e:37:e5:27:eb:92:a9:38:cc:28:74:f0:1b:cc:63:
         6c:20:40:0f:1f:41:64:95:cd:51:42:b6:c2:c0:dc:b5:44:bb:
         18:e9:b2:43:55:0e:3c:f7:c2:51:e1:c5:98:92:7f:7e:a4:22:
         ca:ef:d4:4d:1b:aa:3d:ef:f3:95:d6:f4:7f:2b:3e:a0:d5:ee:
         13:19:ea:89:c6:d4:06:53:26:d3:09:32:fb:12:e2:8e:91:03:
         d8:75:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:17:14 2024 by rpki-client on console-fra.rpki-client.org