Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer
File:                     11489A5805B7FE2710AE32C3077C3450579D1288.cer (raw, json)
Hash identifier:          CKu/JioRfEpOdwfHw1Jr59OTCN9pUKBfH0qyNYZhnxw=
Subject key identifier:   11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       08D17F179DE34D91269F0950BE1254B4BEDDC50E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 15:51:56 +0000
Certificate not after:    Wed 25 Dec 2024 15:56:56 +0000
Subordinate resources:    IP: 103.113.26.0/24
                          IP: 2001:df4:c700::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d1:7f:17:9d:e3:4d:91:26:9f:09:50:be:12:54:b4:be:dd:c5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 27 15:51:56 2023 GMT
            Not After : Dec 25 15:56:56 2024 GMT
        Subject: CN=11489A5805B7FE2710AE32C3077C3450579D1288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:46:7e:42:75:d1:fb:ae:45:00:5e:ee:86:
                    c0:ca:4f:ae:b4:86:43:9b:b3:59:b2:cf:6e:e9:a5:
                    47:50:65:11:79:af:9a:67:65:43:5a:85:2a:28:fb:
                    cc:32:7d:78:6d:20:78:96:cf:c6:5f:c1:c3:d5:d1:
                    50:14:e7:5a:e9:77:b7:74:52:e5:43:60:d1:6d:0f:
                    56:4b:6f:18:05:80:4e:a5:a4:4b:c1:29:e8:8b:47:
                    d9:58:54:11:90:c0:60:a7:e9:cc:85:ba:3b:90:0b:
                    3d:04:e3:f6:f3:6e:d3:76:2b:1b:af:f3:e4:a8:13:
                    2f:7a:dc:33:0a:ad:c6:85:c8:89:8a:1d:bf:71:b4:
                    7b:13:aa:0b:f4:f8:9b:d0:cc:77:80:71:5f:e6:23:
                    a0:2d:c6:23:24:e7:7c:49:d3:99:8d:39:ae:e8:bd:
                    2e:5e:b0:4c:45:5b:21:8c:c6:9d:89:20:08:fa:cd:
                    3c:12:10:f0:77:75:a6:46:19:31:71:27:0b:b5:ff:
                    1b:9b:7b:60:e4:4c:e8:35:9b:a5:33:0d:0d:79:df:
                    7e:86:e2:67:ad:32:89:ec:ed:bc:96:a5:72:7f:c1:
                    b4:73:2e:26:55:2e:3e:41:f6:9a:72:91:90:c2:7e:
                    c1:72:f1:3b:9a:76:c2:75:40:04:98:16:80:46:29:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.26.0/24
                IPv6:
                  2001:df4:c700::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:fd:de:e1:79:be:7c:df:bf:73:22:e1:e7:0d:a5:41:5e:
         cb:99:d6:0e:fb:69:fe:29:f0:b8:b5:fd:ea:95:f5:32:84:ce:
         b1:e7:6a:04:84:80:7f:77:97:17:47:16:0f:8d:ee:7d:57:c4:
         62:8e:ca:5e:19:af:fa:a8:7a:b2:f8:2a:4d:8b:7d:e9:f4:e3:
         79:5e:6a:be:de:c1:32:ad:f5:d8:4f:eb:c8:b8:db:63:ac:7f:
         2e:ab:6f:40:d8:79:bf:e4:12:d2:a0:ac:c6:fd:08:6f:99:19:
         13:72:4f:65:79:ff:a9:69:07:9c:27:ac:36:f3:a4:a6:3f:de:
         70:f9:cf:9f:da:20:59:21:aa:54:55:1b:c7:80:f5:01:61:ae:
         7a:22:49:bb:7c:40:71:45:7c:96:d7:1a:e7:6d:1e:c0:29:25:
         bf:d8:25:d9:0b:57:43:af:10:67:27:e4:bc:cd:d7:f3:dc:8e:
         f2:c4:91:fa:88:2a:16:42:5b:8a:10:b4:e7:82:4f:96:41:a0:
         7e:93:29:ab:ec:cc:e3:59:c3:11:be:9d:e8:7c:be:5e:8c:0c:
         6d:b6:76:72:73:31:6f:33:6a:23:1d:91:9a:db:e2:29:97:d3:
         78:bf:cc:33:e0:98:b5:61:b8:6b:25:5f:1f:7f:f4:fe:0b:9d:
         27:34:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:12:03 2024 by rpki-client on console-fra.rpki-client.org