Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer
File:                     1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer (raw, json)
Hash identifier:          Qw6MwS8I1x2EUaGK/AKJqcubE1ps9F/3ZmkOwX+j2Bo=
Subject key identifier:   1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3144CD7E4D1E276E4F1789C4E88F4EFAD08A62A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2024 16:37:35 +0000
Certificate not after:    Tue 16 Sep 2025 16:42:35 +0000
Subordinate resources:    IP: 103.177.100.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:44:cd:7e:4d:1e:27:6e:4f:17:89:c4:e8:8f:4e:fa:d0:8a:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 17 16:37:35 2024 GMT
            Not After : Sep 16 16:42:35 2025 GMT
        Subject: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:58:9b:bb:c6:b6:de:19:e3:38:aa:3f:6b:
                    a3:0d:68:df:54:95:85:f1:27:28:50:5c:90:35:16:
                    93:d8:c5:27:b6:d3:0d:36:74:da:1f:67:e9:1d:4c:
                    d4:83:51:6d:b0:9f:c4:a2:bf:1a:5d:bf:2a:5b:79:
                    6d:d9:97:40:8d:fa:00:49:c4:88:bb:e4:fc:96:54:
                    85:c6:2b:92:3c:bd:a3:e9:7c:b6:a1:30:a2:3e:67:
                    97:d0:2b:7f:1c:ca:2e:4c:20:40:7c:cb:12:d0:03:
                    3b:3b:c9:c2:cc:4b:c3:27:0b:b5:a6:20:ef:a0:f9:
                    cd:05:1a:d0:fa:7f:f2:ff:d5:09:98:90:18:62:3c:
                    c0:12:cc:f2:3e:91:6d:61:7c:86:7d:58:b7:95:f3:
                    7d:a8:cc:74:8a:a0:48:00:7d:f4:cb:f0:45:98:19:
                    86:44:3f:69:13:2e:9a:93:28:2c:ec:0f:03:0e:18:
                    73:98:c4:f9:df:3c:f4:4f:05:82:66:b2:10:52:e6:
                    05:7d:03:82:9a:28:de:15:68:66:74:c2:cc:6a:bb:
                    a8:39:fd:06:54:0f:f3:2c:2a:81:75:3a:b5:13:d5:
                    91:47:8c:a9:6b:38:34:a3:7e:7a:71:f7:69:1e:fd:
                    34:d0:62:2d:02:16:14:a9:83:96:c1:43:53:d1:e1:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:19:d5:fb:c6:b2:b6:2d:00:5e:a5:24:17:df:1f:7f:93:
         c6:ee:38:d4:11:7e:04:bb:f9:b3:79:0b:07:20:7f:3c:e1:76:
         3c:89:f4:f4:fe:73:aa:23:a0:df:bc:5f:57:c9:f9:52:8d:1e:
         41:19:5c:e6:d0:a9:2b:8e:59:3a:5e:f0:f4:1f:40:9c:5c:fe:
         1e:a4:75:30:8e:fc:c2:6a:5c:3b:62:f2:56:8a:cc:1e:b8:c1:
         9a:5f:29:d5:2f:9a:1d:a7:05:59:f1:d0:8d:48:f7:a9:5f:f9:
         fa:b0:dd:39:f7:22:cd:c6:4f:15:ca:e3:ef:80:4b:84:90:20:
         6b:b3:b2:4f:f9:10:db:39:59:59:dd:c1:45:cb:3a:a6:a0:0f:
         1a:e7:ed:ab:5b:f7:3a:29:bb:12:6e:e3:01:cb:ed:f2:1f:91:
         84:bd:9a:d3:71:82:26:ab:f3:c7:fa:dc:53:6f:dc:d8:f3:10:
         35:e4:29:e5:c5:fd:06:34:97:dc:54:c6:e1:88:c8:e1:51:d0:
         88:08:b6:8a:5c:98:ad:ae:70:a9:2d:19:a9:00:91:77:73:90:
         e4:87:9a:30:de:5e:c2:de:3a:56:ad:de:11:e2:b3:cf:3a:db:
         06:3c:39:21:55:05:6b:30:31:7b:92:d6:3f:7c:84:aa:80:2f:
         55:22:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:14 2024 by rpki-client on console-fra.rpki-client.org