Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer
File:                     13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer (raw, json)
Hash identifier:          2F977Mwvsk15cXKHtqxB7chbKsPmd5RJIYPw6NERRUs=
Subject key identifier:   13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1943AB2235211049D887B3A48988C6CD53DAD89A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jul 2024 16:49:22 +0000
Certificate not after:    Mon 07 Jul 2025 16:54:22 +0000
Subordinate resources:    IP: 103.147.220.0/23
                          IP: 2405:c1c0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:43:ab:22:35:21:10:49:d8:87:b3:a4:89:88:c6:cd:53:da:d8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  8 16:49:22 2024 GMT
            Not After : Jul  7 16:54:22 2025 GMT
        Subject: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:2a:9f:70:9e:b0:ee:7f:ef:db:03:d5:91:
                    b7:77:65:a2:54:77:db:dd:b4:72:f5:72:73:c5:3d:
                    06:48:45:3d:59:3d:5a:96:85:ae:9e:c4:1a:22:38:
                    2e:71:cd:06:c1:2f:ea:34:98:7a:29:59:31:23:a9:
                    4f:e2:7b:f6:f1:bb:5c:f1:5b:2a:ca:70:d5:3a:bb:
                    e3:5a:4d:d8:62:c4:95:94:28:3a:36:59:13:7d:b7:
                    0a:63:2d:cc:ca:7c:46:74:57:81:cf:88:7f:09:83:
                    0a:b6:1b:ca:87:fc:c5:a6:70:45:83:5d:8b:8f:03:
                    79:5c:b3:a0:bb:df:bd:08:4a:39:b6:44:f4:45:99:
                    87:92:8d:ce:9b:0f:54:fe:7e:ab:b4:9b:12:1f:dd:
                    fc:40:da:5a:4c:a8:89:74:a5:d1:9d:a9:d6:ca:71:
                    b0:9e:b9:4f:80:6c:a5:0c:ea:5a:a2:96:8e:ec:62:
                    df:d3:97:f7:85:bd:8b:eb:1a:c9:11:17:24:9c:2a:
                    d4:9b:73:2c:f4:7f:73:b6:20:2f:56:f3:71:d1:74:
                    7f:80:98:10:32:c7:bb:3d:d7:32:b4:2e:59:79:be:
                    07:24:5b:a1:c2:bb:6b:12:38:69:a2:57:61:4d:16:
                    8b:55:12:d9:13:4f:5c:8b:7d:24:25:2d:96:f5:34:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.220.0/23
                IPv6:
                  2405:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:b5:8e:f5:d8:af:64:70:04:02:9a:ab:02:19:d1:9f:81:
         85:c3:f9:06:fe:5f:e2:b4:58:ad:f6:09:f5:84:cf:c1:51:8f:
         d1:7b:45:b1:ea:8d:b8:20:c5:5b:7f:44:07:6b:c5:d8:fa:e3:
         7d:6a:f9:02:6d:0c:e1:42:98:96:c3:9e:a0:86:cd:49:19:34:
         6f:e4:94:ab:25:87:aa:15:25:2b:57:4a:de:b2:25:e5:50:07:
         c5:9f:48:66:8b:19:ad:51:c3:4c:0a:88:69:9c:be:d4:59:13:
         ab:5b:56:84:49:ec:d0:ee:85:e7:05:e2:9f:95:93:9d:d0:1d:
         a8:58:cc:19:f8:26:b4:cc:67:57:91:aa:cd:14:2d:52:e5:fc:
         55:3f:07:f7:83:1d:9b:53:52:27:2c:a7:10:00:9f:a3:15:8d:
         98:8e:10:c0:82:8f:67:81:f7:28:83:99:d2:79:74:5c:07:a6:
         18:27:f9:3a:7d:50:51:e1:c2:03:48:3f:25:6f:1d:00:a3:42:
         9e:a1:88:7b:11:ae:cd:fe:a2:d1:68:86:0f:08:95:3c:4d:a4:
         fa:b3:55:d6:69:ee:94:fb:8c:7b:84:0b:31:9a:fe:07:59:de:
         3f:e5:41:95:4f:20:6c:ee:13:b9:a4:90:72:72:30:fe:5f:92:
         60:73:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:18 2024 by rpki-client on console-ams.rpki-client.org