Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
File:                     15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer (raw, json)
Hash identifier:          OZqNpmdztpagDFyC5tRmc360ZPw+V9J4WRaVwm8HfhI=
Subject key identifier:   15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1B00B3A9322E80B1239EFD8C34B89BB779AFD90C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 May 2024 21:02:31 +0000
Certificate not after:    Tue 13 May 2025 21:07:31 +0000
Subordinate resources:    IP: 103.205.56.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:00:b3:a9:32:2e:80:b1:23:9e:fd:8c:34:b8:9b:b7:79:af:d9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 14 21:02:31 2024 GMT
            Not After : May 13 21:07:31 2025 GMT
        Subject: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:fd:4a:63:16:3c:ac:a8:bc:1b:be:31:8d:
                    33:bb:3a:36:7e:60:1f:b4:fa:2e:03:7f:4a:96:db:
                    f9:57:41:0d:63:9d:95:88:fc:67:24:28:35:df:67:
                    47:ce:81:a4:18:30:6e:bd:5a:d3:4f:1d:63:77:7a:
                    b7:d6:66:14:0c:0a:05:04:90:4b:8b:e7:cb:77:8f:
                    59:e6:99:79:47:45:68:0c:20:cd:b7:78:29:f2:90:
                    8e:6b:54:02:33:e4:54:fd:56:5f:c2:ac:49:62:f6:
                    be:43:72:52:b3:65:00:1b:a2:16:78:ee:9b:80:01:
                    19:e3:02:61:8d:8a:c5:99:e7:01:c4:e1:70:d1:a4:
                    6d:76:08:de:19:77:c5:ef:32:60:2a:86:32:c9:0a:
                    67:56:2e:f4:b8:17:20:e7:ec:64:0a:af:37:87:5d:
                    d9:c7:28:c4:f5:ff:e7:10:c7:16:88:85:07:ad:9c:
                    cc:77:88:6c:27:b3:82:ef:b3:63:fb:f2:ef:c5:2a:
                    3d:94:ea:1a:2d:21:1b:24:cd:15:b2:5b:43:26:94:
                    19:88:70:17:85:59:19:31:8d:91:57:a1:0a:69:91:
                    69:8c:0a:74:3f:cb:af:2c:9a:da:b3:39:fd:a9:3e:
                    33:6a:98:4c:15:a4:02:1f:9e:74:19:fe:4f:ac:78:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:87:03:1e:a5:6a:6a:8e:8a:5a:20:7c:2f:30:30:4c:34:
         0d:95:e3:ce:d0:b6:4e:b5:29:5e:27:3e:9c:20:d6:34:99:eb:
         26:a5:12:23:4c:e2:1f:3c:6a:d8:39:07:60:bc:b0:94:54:31:
         a8:36:d7:6a:a9:15:3f:d9:f5:6e:b0:64:52:cd:3f:60:b1:7b:
         1c:db:4a:75:5f:8e:bf:71:94:63:e0:52:37:c5:ac:73:dc:46:
         f8:75:66:96:9d:80:a5:1b:4d:8f:82:fa:f2:42:ad:a1:1e:bb:
         2f:db:f1:6e:d8:6a:ff:de:a9:54:27:a5:e1:3b:8c:6e:df:93:
         84:da:06:ea:80:4a:cc:7c:71:0a:9f:7b:60:0a:81:f2:c3:91:
         b1:31:ce:da:25:59:9d:b2:b7:ef:74:43:e9:8d:02:ba:5b:c2:
         ce:0d:05:5c:da:26:9e:e5:19:6b:24:8b:ad:03:35:93:3e:80:
         54:e7:ce:26:be:83:3d:a8:3a:0a:ba:ad:dc:b0:6d:ab:e8:43:
         ef:8a:8c:fd:6c:0f:eb:aa:8d:a7:fd:e6:82:2e:03:f3:21:8f:
         c2:94:10:36:19:35:7e:b2:e8:8a:f8:97:92:4d:d6:92:8d:f2:
         fd:f0:73:46:23:55:ea:34:b2:16:61:5e:0b:fe:11:d4:b3:1c:
         05:f2:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org