Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer
File:                     132FE11D02592F9985A978A727BF9B772762CDF8.cer (raw, json)
Hash identifier:          PImbUSm/vznJmoOB1RFvjnmP4vm87WcOqYSLKpUSQ6Y=
Subject key identifier:   13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       384AB7D2CCAB823D5542BA84E068E2FBBA2DB840
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 14:32:31 +0000
Certificate not after:    Wed 04 Dec 2024 14:37:31 +0000
Subordinate resources:    IP: 103.178.224.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 16:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4a:b7:d2:cc:ab:82:3d:55:42:ba:84:e0:68:e2:fb:ba:2d:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  6 14:32:31 2023 GMT
            Not After : Dec  4 14:37:31 2024 GMT
        Subject: CN=132FE11D02592F9985A978A727BF9B772762CDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:e4:53:5b:0d:ca:4c:e4:ce:84:d5:ee:36:
                    e5:cc:55:97:b3:55:b9:49:a0:b9:cf:a3:9e:96:70:
                    e7:63:54:1f:03:33:81:29:a8:f4:64:48:1e:63:de:
                    8b:0a:fe:b4:5b:18:c0:30:06:74:9f:43:3d:dc:59:
                    e6:d1:51:26:61:ff:e3:f8:ca:44:20:a3:db:d1:16:
                    88:a5:18:5c:0f:00:18:5b:07:a7:e6:7f:e8:39:60:
                    d1:da:4d:4a:3a:8d:35:05:30:54:4b:15:d7:db:8d:
                    62:bd:0d:b0:3e:4f:d6:fd:95:9f:86:e4:07:07:16:
                    25:28:bf:a1:5b:05:fc:6b:d5:75:a5:c3:8d:79:c7:
                    2b:50:1b:58:d4:e2:15:d3:d4:ad:68:30:0e:ba:f0:
                    35:d2:14:6d:e9:85:1f:d7:8e:9f:e7:26:11:bd:00:
                    9b:b8:20:7a:84:40:91:9a:e9:1e:a9:ad:2e:ad:22:
                    55:72:39:89:4b:15:76:47:2c:9e:68:a6:36:e4:82:
                    44:57:ff:aa:b2:d0:16:d8:43:30:f2:4f:15:eb:73:
                    19:d3:58:6c:c7:38:4f:65:a8:4e:84:2c:b3:79:f8:
                    53:0f:dc:bf:86:4a:79:de:5e:49:ac:cc:67:77:01:
                    52:70:a7:79:96:81:32:16:66:6a:a9:32:9d:32:87:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:ce:c4:76:98:e0:cd:07:3a:48:84:a5:4b:65:ca:9f:41:
         4c:59:3d:cc:62:56:77:f1:ce:2c:74:12:d1:28:c7:ed:12:c4:
         10:8c:8d:71:b2:ad:9d:7b:b5:fd:71:0a:b3:1c:01:fb:ca:2a:
         7f:fb:f5:95:32:4b:e1:a2:b6:20:f9:2d:ce:d4:06:d4:79:5b:
         17:20:3b:b0:6e:ca:1d:d4:4f:7d:8b:e2:78:13:28:e4:97:d2:
         8d:50:f0:81:2c:56:f9:70:01:fe:01:c1:0d:ed:1d:64:19:34:
         89:85:1c:c6:f9:57:12:83:99:92:de:8b:46:fe:9d:54:f0:dd:
         0b:8a:9e:fa:07:9b:57:44:94:a8:8d:f1:1d:b1:c5:5b:41:22:
         90:b1:fe:0d:4d:32:2f:dc:d0:34:9d:f9:65:b1:03:0d:06:6f:
         e6:bc:3b:e1:3c:cb:3f:d9:26:71:77:a6:f1:4c:e1:49:df:4f:
         a7:62:4b:a9:68:05:19:fd:80:17:3e:db:77:f5:0a:e6:87:4a:
         4a:9e:50:e7:ef:d9:6f:6b:1b:53:f0:73:dc:28:7b:1f:ee:8d:
         a3:a6:2f:e8:ca:21:f3:60:ea:6f:fc:65:61:32:cf:c9:14:c8:
         a8:5c:ee:ef:70:9b:50:c4:ed:60:01:13:af:78:10:96:22:85:
         e7:51:2e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:07:05 2024 by rpki-client on console-fra.rpki-client.org