Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
File:                     139934661CE07BEBBFA824F7225502B15AE8B653.cer (raw, json)
Hash identifier:          4STgbuTzAge7Vd0RxDuzfiX1CfsU9MKKmqtwt67J23I=
Subject key identifier:   13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       278DCEBF164E22D528B419E825166B30DE80B477
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 Nov 2024 03:00:46 +0000
Certificate not after:    Fri 14 Nov 2025 03:05:46 +0000
Subordinate resources:    IP: 103.179.218.0/23
                          IP: 2001:df0:54c0::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8d:ce:bf:16:4e:22:d5:28:b4:19:e8:25:16:6b:30:de:80:b4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 15 03:00:46 2024 GMT
            Not After : Nov 14 03:05:46 2025 GMT
        Subject: CN=139934661CE07BEBBFA824F7225502B15AE8B653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:29:66:5a:1d:60:e2:8e:6a:18:a6:67:bb:
                    af:64:21:26:18:7a:eb:0c:c8:fd:58:40:bd:23:21:
                    5f:45:28:af:f6:bc:1e:e2:eb:2c:59:9b:63:15:73:
                    49:ce:fd:1e:e3:9e:85:3c:23:15:4d:5b:5e:ae:4a:
                    b6:3b:4c:0b:c4:b8:af:ad:14:4d:f6:d5:67:c9:2f:
                    3b:25:f1:0d:bc:b1:9c:a7:0c:29:f5:41:b7:f4:04:
                    32:0d:a1:8d:80:d9:f6:2c:3e:bf:be:f6:f2:ce:a0:
                    86:40:f9:23:71:eb:93:d2:35:9d:20:71:7e:95:14:
                    50:e4:7f:cd:03:be:79:9c:bb:a2:ab:57:2e:ef:24:
                    f0:67:70:bb:29:e8:09:59:88:4b:9d:39:d9:0e:1c:
                    e7:18:7e:49:4e:7d:be:00:6b:d3:1e:a0:a1:1c:93:
                    e2:b5:33:95:ef:5b:d4:a2:b4:be:df:dd:68:16:d4:
                    99:d9:c3:b0:49:47:7f:ee:1a:14:33:42:55:41:75:
                    11:68:8e:16:f2:22:f7:0d:6f:80:14:9a:71:c5:82:
                    06:ff:30:17:15:43:6b:6c:b2:49:40:1c:20:67:71:
                    7a:7e:54:b8:fc:a1:19:15:e1:70:ac:af:30:5d:51:
                    9c:ea:88:96:a6:fa:e7:f9:c8:2c:88:68:1d:27:6d:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.218.0/23
                IPv6:
                  2001:df0:54c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:db:fa:27:d3:c6:16:33:43:e3:aa:25:d0:80:0b:24:cf:5d:
         91:a9:47:ed:94:05:ec:2c:bf:1a:1f:c9:0a:f0:d9:ac:ed:12:
         70:84:13:71:ed:97:ac:20:27:70:e9:c1:ef:6b:2d:51:60:4d:
         92:db:8b:11:fd:83:0a:52:8b:59:51:78:c5:6d:f5:1f:ff:71:
         3f:98:b9:7a:59:80:00:ed:af:ab:7f:70:9e:93:8d:e3:a7:53:
         b6:01:8b:4a:b8:8d:36:27:df:c6:a0:c5:5b:69:cb:14:14:24:
         26:25:93:7a:a3:96:cd:60:3e:2c:d7:81:c9:59:f2:eb:3f:57:
         0c:55:0f:33:7e:5e:81:5d:b7:58:9e:81:e9:62:45:dc:b1:45:
         61:86:b3:be:cf:ca:c3:b6:37:e0:61:fc:2b:af:34:31:17:c4:
         b1:57:0f:af:11:2d:46:c0:59:4b:0a:f5:72:e0:92:b9:34:ef:
         e7:4b:c1:8a:73:6e:ad:3b:10:6c:5b:00:34:22:7c:5b:80:26:
         13:32:23:8b:c6:47:7e:41:27:c3:dd:4b:c6:1d:ea:82:f9:4d:
         d6:f1:66:4e:35:3d:15:dd:51:ae:77:62:00:86:75:3e:0d:52:
         84:22:46:aa:52:b2:46:0d:b6:cf:0d:fd:a4:92:ff:49:d2:73:
         6a:f3:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org