Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
File:                     11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer (raw, json)
Hash identifier:          W9laDoM8vvzGvdZ0tQsx0rpvCgVIM3bYVqiRgTyWkwM=
Subject key identifier:   11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5D35B97852EA567A9CD0928ACE3B6C6B24B07A9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 02 Jun 2024 04:51:54 +0000
Certificate not after:    Sun 01 Jun 2025 04:56:54 +0000
Subordinate resources:    IP: 2001:df3:c240::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:35:b9:78:52:ea:56:7a:9c:d0:92:8a:ce:3b:6c:6b:24:b0:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  2 04:51:54 2024 GMT
            Not After : Jun  1 04:56:54 2025 GMT
        Subject: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:e6:03:15:73:da:1a:33:a8:6d:01:7c:aa:
                    9a:49:f8:5f:f0:c4:09:3d:40:3e:1c:d3:d3:55:e3:
                    cc:68:cf:84:9f:47:ef:e6:40:03:d8:f6:c7:61:d5:
                    ae:a1:02:46:5a:99:17:b0:7a:ba:15:df:96:34:b0:
                    de:c7:d0:f4:9d:11:b6:4e:91:47:1f:83:03:5a:9d:
                    cc:83:30:5f:9b:35:13:4e:c5:25:dd:c3:aa:02:f4:
                    35:50:73:e4:26:90:ed:d0:ad:9d:e2:da:e8:0d:cf:
                    73:9d:b6:e7:24:14:9f:3a:71:0e:38:35:42:93:15:
                    c2:9e:d5:f9:df:3f:55:49:e5:be:5f:29:ff:2c:4f:
                    cf:6e:1a:e1:c5:bd:65:78:bc:dd:c1:d2:22:c9:e7:
                    8d:e4:37:a4:ae:c7:3d:b4:3b:77:a8:46:9e:ca:e0:
                    21:c3:ba:fb:5b:d1:5a:6e:b1:51:b9:ce:99:62:6c:
                    05:5e:a4:5e:fb:66:b7:97:31:5e:5e:a8:48:87:b6:
                    f0:da:be:92:5a:10:e1:6c:ed:63:dc:53:14:25:e5:
                    85:0a:fa:32:41:56:3e:6e:49:76:c3:33:24:e6:79:
                    d4:e7:4f:14:75:fe:fc:33:cf:f6:72:e4:4a:58:9a:
                    92:a8:ab:57:9c:c9:be:9c:e2:7a:4a:e5:bf:5f:fc:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:c240::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:be:d3:6b:1e:d3:eb:74:2e:1d:dd:e8:c1:0e:74:c6:1f:
         01:6f:42:49:5f:80:58:18:7a:6e:27:b5:61:15:bc:8d:1d:fc:
         b6:2f:c4:de:5c:65:26:28:d2:e4:38:e4:da:b6:f5:e4:27:41:
         1f:83:85:2b:3b:9f:6b:81:6b:94:b1:da:52:f7:7d:4b:aa:df:
         7d:a6:5e:04:0a:3e:2d:48:14:83:ca:f6:f5:d4:75:f8:21:da:
         54:c4:ad:78:0c:50:ee:f3:f4:9b:14:9b:eb:0b:4f:3d:cb:b2:
         ab:ef:8d:3c:ea:23:d9:ae:2d:74:a3:77:56:46:18:c6:35:bf:
         a4:f7:0d:17:ca:30:45:f5:00:c3:41:79:50:da:d1:51:75:0a:
         e8:5f:bf:d4:a8:36:9c:f8:d5:f7:e0:47:13:80:b4:7e:fb:ca:
         65:7c:9b:45:71:b9:cd:57:90:6c:67:32:d2:68:5a:b4:38:aa:
         9a:a5:2c:7f:7e:d3:b3:2d:a9:cd:f1:60:6d:9a:f2:0e:39:78:
         53:4e:9c:fb:a0:d0:a8:38:86:90:30:d6:37:30:f1:4f:59:73:
         7b:76:f8:4b:b2:77:54:86:f6:7e:1f:bc:27:a8:3b:84:58:f7:
         d2:ef:39:c7:eb:5a:1f:30:19:0d:0a:fc:88:95:5d:73:5c:62:
         f1:b8:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:03:51 2024 by rpki-client on console-ams.rpki-client.org