Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer
File:                     157748842D6BEE36DEE3B1999F10079808FF41C0.cer (raw, json)
Hash identifier:          nC6mqAUzsKNK2Z3lZzkixdjpP8hTFzKjLQXzcf/Ua74=
Subject key identifier:   15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       218D130CC11F78D24DAA6692F94F9714B3B8F76C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 13 Oct 2024 06:10:51 +0000
Certificate not after:    Sun 12 Oct 2025 06:15:51 +0000
Subordinate resources:    IP: 103.148.196.0/23
                          IP: 2001:df2:e780::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8d:13:0c:c1:1f:78:d2:4d:aa:66:92:f9:4f:97:14:b3:b8:f7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 13 06:10:51 2024 GMT
            Not After : Oct 12 06:15:51 2025 GMT
        Subject: CN=157748842D6BEE36DEE3B1999F10079808FF41C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:fd:98:e9:a0:a5:bd:40:52:7b:4c:73:b1:
                    ba:ce:1b:b5:c9:58:9a:da:0c:f2:17:1d:5d:3b:5a:
                    35:54:22:e1:62:16:f8:1e:ba:5c:93:f1:d5:cc:4e:
                    23:bb:ae:96:b4:1f:7f:0a:76:25:b2:a0:00:9f:23:
                    24:5f:aa:a5:b2:2d:ae:aa:c2:79:9f:72:5c:49:d9:
                    60:15:c6:3d:be:88:d9:cb:89:49:ef:04:43:9d:4b:
                    1c:ae:64:9f:c8:77:ea:b1:70:46:e6:84:79:e9:f5:
                    9b:a4:07:07:8d:a0:0a:95:d0:a1:19:7b:90:67:b0:
                    18:2c:e6:83:28:58:ae:af:57:c7:11:0f:2d:82:7d:
                    7f:31:30:e3:31:4b:62:d4:1b:36:98:f1:1b:96:29:
                    27:17:7d:74:cd:2a:e9:b5:2b:0d:75:32:74:f9:8a:
                    dd:e6:33:f5:71:d7:ad:96:91:81:2c:67:b0:a5:ba:
                    43:f4:da:66:26:0c:44:08:58:4f:a5:bb:37:2f:2d:
                    41:78:17:a0:91:68:29:eb:dd:92:33:56:81:ec:89:
                    2a:62:5e:52:01:1a:1c:f8:00:88:c4:fa:26:98:6a:
                    e1:e5:f6:1e:66:dd:ec:40:47:a8:0e:02:69:16:25:
                    5c:22:d4:53:3d:79:a0:80:a8:21:f5:88:d4:35:90:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.196.0/23
                IPv6:
                  2001:df2:e780::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:20:7b:67:c2:a1:45:b8:08:76:d4:6e:49:29:b9:e8:bb:a8:
         e1:aa:95:6d:38:02:c4:21:e8:13:c8:1a:04:53:6c:d3:30:47:
         7f:45:fe:18:48:4b:3d:36:3c:92:34:03:5a:e0:f5:3b:13:d8:
         4f:d8:1c:8b:27:47:0c:85:ba:5e:1b:49:fd:24:72:ec:78:e4:
         22:a8:c2:cf:df:76:54:17:c2:8c:f1:d7:0d:ff:98:b2:2d:c2:
         98:a5:9a:d8:92:a4:8f:ad:99:b3:36:b4:ac:df:37:a8:5a:d2:
         0f:e5:eb:42:32:3d:f5:81:fa:4c:7a:ec:0e:53:9e:2e:6f:20:
         b4:93:80:a7:da:6f:a1:68:94:28:fa:d5:79:10:de:f4:60:ce:
         33:c3:ba:18:67:4d:04:88:2a:8e:18:b8:ac:0e:81:de:b2:c2:
         2d:da:27:da:75:17:d2:20:6e:f4:c8:e7:fd:75:3d:1b:49:bd:
         a1:2b:33:ef:73:8b:44:06:f2:a6:de:39:99:38:aa:dc:14:57:
         b3:89:2e:4f:4f:9a:11:b8:76:10:48:18:30:95:1c:58:a9:0a:
         51:18:3f:dd:60:55:4e:99:39:b9:b3:d8:66:91:4f:35:c1:cc:
         aa:5c:a4:c4:46:c1:40:24:6c:c0:2d:6f:b6:59:56:53:6d:3c:
         ee:6c:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:18 2024 by rpki-client on console-ams.rpki-client.org