Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
File:                     1259FE91D21610D4BA487C60C804F66EB6591CA8.cer (raw, json)
Hash identifier:          w429FHJ6YYMuUi1rIbnPi1CNoFokRA2EaIYvrGkb9zU=
Subject key identifier:   12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       79B7FC0A18E7C286B8E97170D5FBC9A938F0F026
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 19:53:52 +0000
Certificate not after:    Fri 08 Aug 2025 19:58:52 +0000
Subordinate resources:    IP: 103.78.44.0/23
                          IP: 2001:df6:a00::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b7:fc:0a:18:e7:c2:86:b8:e9:71:70:d5:fb:c9:a9:38:f0:f0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  9 19:53:52 2024 GMT
            Not After : Aug  8 19:58:52 2025 GMT
        Subject: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:6e:68:dc:d3:05:ff:1d:fd:bf:7e:5d:10:
                    4d:4a:2e:a6:a0:82:06:6d:ab:8a:13:a0:72:77:69:
                    a7:39:0c:66:57:e1:84:ff:1e:9e:ed:23:39:93:b7:
                    75:b8:e2:40:00:51:6f:ea:33:69:75:a7:ca:02:0c:
                    04:09:5e:9b:9f:d7:7d:76:e1:57:e1:ad:82:fe:0e:
                    dc:e3:94:7c:26:fd:8d:0e:c0:ac:7b:4b:6d:6b:c5:
                    2a:d7:ed:93:0f:07:f9:ad:b5:2d:44:b9:bb:dd:cb:
                    e8:3d:c7:1e:22:bc:a6:f0:86:cd:c2:7e:cd:03:02:
                    a7:02:a3:79:a4:48:8a:8f:61:a1:16:fa:f4:06:dc:
                    7d:97:71:74:62:b5:7c:1f:4c:ab:20:10:1a:96:14:
                    00:05:33:4a:64:e2:8e:d9:28:55:54:2a:10:d9:b1:
                    b0:54:f5:a8:4f:5c:65:54:36:d9:f6:13:50:f6:4f:
                    35:42:21:76:e4:7e:ec:cf:a7:8f:1d:69:41:5f:dc:
                    17:29:c7:cc:a6:d2:79:af:61:59:a5:2a:74:26:67:
                    72:1f:6a:bc:d1:9e:98:7d:89:92:5f:b9:2f:8d:19:
                    01:f3:0b:19:30:6b:21:6d:8b:cf:de:aa:90:9e:22:
                    3d:c5:e5:69:f7:78:9e:37:e9:cb:e2:82:c1:a4:92:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.44.0/23
                IPv6:
                  2001:df6:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:02:76:70:bd:e4:53:77:91:e7:15:c8:23:3d:c0:c1:ae:4e:
         af:a1:2a:64:82:52:58:a3:bd:c2:19:97:f6:ce:31:73:14:80:
         77:96:f9:f7:66:9c:cf:b2:7e:2e:96:a6:6c:4f:89:6b:70:db:
         e4:ef:eb:de:9d:8c:c1:93:1c:8f:ed:5f:69:c5:62:7d:d2:da:
         bf:99:e7:e5:41:b4:5e:d2:fb:bc:f0:fa:4d:02:b2:16:e3:d9:
         6d:26:e8:af:b3:f1:ef:5a:57:f7:a5:38:08:ca:2e:7c:dd:78:
         0b:a0:7a:d8:14:3a:a7:9c:06:27:5c:17:8a:99:7f:7f:d3:69:
         1c:2d:eb:c5:ec:06:e0:e9:20:77:18:05:83:77:4a:cc:e5:0f:
         57:3a:28:bc:8a:b0:81:ef:5b:db:1b:95:24:e2:58:e0:9c:03:
         7d:b5:f3:f0:9d:f1:b5:8e:f9:e9:39:ea:bc:80:17:df:87:23:
         76:61:34:47:9e:38:64:73:10:ba:de:f1:88:52:f1:24:1c:13:
         b7:ca:be:22:fe:30:a5:0d:56:e5:de:ae:71:e4:a1:d5:88:53:
         4a:12:73:42:56:0e:e5:b6:e1:c6:09:2c:58:85:d0:3e:c7:77:
         72:1f:f1:ae:a6:cb:3c:75:41:b6:e8:81:53:63:b4:37:d1:bc:
         34:98:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org