Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
File:                     19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer (raw, json)
Hash identifier:          RTN4Qv9z/t1FSpzb8bxgfaye8GBlWd602QBBcoR4PT0=
Subject key identifier:   19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       60058F7F9267CB152F682A7236B9F8A4DE2DAA4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Jun 2023 09:54:11 +0000
Certificate not after:    Fri 28 Jun 2024 09:59:11 +0000
Subordinate resources:    IP: 103.180.196.0/23
                          IP: 2001:df0:60c0::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:05:8f:7f:92:67:cb:15:2f:68:2a:72:36:b9:f8:a4:de:2d:aa:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 30 09:54:11 2023 GMT
            Not After : Jun 28 09:59:11 2024 GMT
        Subject: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:d9:0c:38:ae:f8:6d:35:6f:e3:42:fa:e0:
                    39:f5:82:d6:9f:05:b1:31:45:57:bc:0d:b5:01:59:
                    91:80:17:0c:4e:d9:34:72:51:7a:3e:91:58:41:b6:
                    a5:ff:6f:16:ca:8d:b1:f0:2d:97:f6:5e:e3:29:53:
                    2c:05:00:4a:9f:d3:54:74:82:84:7c:54:55:1f:3c:
                    4c:ab:a5:90:0c:e1:fa:2f:6b:02:25:a8:08:02:f3:
                    cf:a2:f9:ed:c1:1c:29:7d:09:84:c2:fa:9f:8a:d5:
                    1d:e2:7d:88:e6:d1:51:d8:e8:f9:8b:6b:e4:f2:eb:
                    41:0c:e3:02:b7:f4:3d:9b:33:00:92:a8:eb:cb:24:
                    05:6d:10:a0:e4:c6:e6:45:f2:0f:7a:7b:f7:76:cc:
                    aa:cc:cc:24:2f:65:5f:f5:5c:1b:a1:ae:d4:63:fc:
                    a8:fb:a8:32:3b:12:2e:20:ea:23:b0:51:4c:2e:14:
                    4f:2f:97:0c:09:f1:8d:ab:48:70:7b:9f:74:06:a0:
                    c5:8c:d9:e7:84:54:04:5c:df:c1:04:14:ed:48:2a:
                    7e:b6:9f:c6:7e:eb:5d:c3:ae:82:2c:1d:f0:03:7f:
                    91:52:a2:0e:d7:e8:f0:fb:cb:90:21:81:e2:81:cb:
                    d8:19:d2:60:a5:a9:27:b4:06:1c:5c:b9:ab:d2:08:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.196.0/23
                IPv6:
                  2001:df0:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:0e:3f:c6:96:54:9a:8f:64:e8:2b:ee:f5:20:bf:6c:74:
         ed:2d:47:eb:75:9c:84:75:fb:44:3b:81:52:fe:e1:a0:4b:b5:
         ff:ad:93:e7:53:f0:40:d0:f5:73:a0:93:29:85:5c:fb:1a:78:
         d1:29:b2:b7:ef:28:e0:23:93:b0:7b:7b:02:68:2b:ea:6a:31:
         03:36:a7:74:3a:2e:69:49:de:ab:d9:8d:fb:de:81:64:92:b3:
         72:93:36:43:ed:f2:3e:77:bf:5a:dc:ef:a2:4b:9e:ba:2f:6a:
         8b:bc:22:e8:8f:0c:69:ef:c2:62:4e:0a:87:a8:95:eb:41:78:
         eb:a9:84:a7:05:d6:9e:f7:83:dd:d1:c6:8d:d1:01:1f:f1:9a:
         3e:51:86:3a:3a:c4:9a:78:28:72:66:14:29:0c:83:ae:a6:22:
         93:83:75:1e:25:c0:ea:35:56:2a:5d:32:b0:02:24:07:53:6a:
         ef:3a:41:cb:0c:aa:10:8b:58:7b:df:32:5e:0f:75:df:84:9f:
         46:5b:13:91:b7:08:f8:46:88:8c:36:a8:a4:c8:a8:b9:16:8f:
         42:d1:be:61:9e:80:bf:2b:6c:8e:dd:2e:ef:a3:5d:66:fd:2c:
         26:39:44:87:9b:a7:c2:82:5d:10:02:fc:aa:7d:6a:84:f1:98:
         56:c9:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:33:14 2024 by rpki-client on console-ams.rpki-client.org