Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer
File:                     279F9ED4B08F2103C13392D95636C445577A6339.cer (raw, json)
Hash identifier:          r2ZxMqweQoqmp3ih593H9DAR2dhg7GNcLh+n8fbemRo=
Subject key identifier:   27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1BFECF797306AD459E3EFB431858F4EBFCACE76D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 07:22:03 +0000
Certificate not after:    Tue 04 Feb 2025 07:27:03 +0000
Subordinate resources:    IP: 103.120.40.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fe:cf:79:73:06:ad:45:9e:3e:fb:43:18:58:f4:eb:fc:ac:e7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  6 07:22:03 2024 GMT
            Not After : Feb  4 07:27:03 2025 GMT
        Subject: CN=279F9ED4B08F2103C13392D95636C445577A6339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:03:ef:ea:e8:c7:6d:32:f8:a2:91:44:2e:
                    56:0b:53:e2:0b:ea:7e:3b:69:36:9e:ff:6b:0c:c4:
                    9c:23:0f:be:17:80:06:ed:5d:31:e1:99:07:ab:8c:
                    8f:ea:55:40:9f:26:ca:e7:03:a9:59:ac:d1:b6:88:
                    34:62:2e:37:48:3a:cf:24:7a:17:cb:86:c2:c0:b8:
                    05:8f:49:aa:36:cb:18:d1:ec:8f:4b:89:e4:d4:41:
                    8d:98:0f:43:15:55:27:a8:da:ce:26:05:3a:b6:3d:
                    e6:aa:2d:f8:32:9a:8a:c2:ab:12:42:41:24:38:83:
                    7c:1e:67:0f:46:fa:00:23:ee:79:86:d7:63:f2:18:
                    88:f6:7d:1d:ba:fb:fc:b4:2a:6a:12:72:cb:04:b3:
                    d3:1a:21:40:82:a4:f8:24:4f:f7:fa:b3:8a:04:b0:
                    19:70:3c:f9:e2:51:df:52:5c:30:ea:89:c5:60:d0:
                    98:cc:f5:eb:b8:49:0a:2a:80:1d:e8:54:de:19:11:
                    2f:af:8d:15:0b:88:cd:89:95:51:d7:84:88:ac:de:
                    52:27:ce:62:02:8f:24:44:be:76:20:60:0e:93:25:
                    8c:3f:03:2c:ba:93:3a:46:e1:b8:4e:2a:a6:0d:9b:
                    57:58:62:12:50:db:8e:c0:b7:ba:ad:e4:c2:8f:25:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:59:17:11:0f:69:bf:2a:ef:39:29:75:2f:da:39:a5:cf:61:
         e6:42:93:be:77:97:6c:38:e3:f4:75:9f:f3:7c:1d:9e:26:11:
         ae:a1:d6:7e:73:47:5f:8d:05:43:b9:03:7a:5f:9b:dd:dd:77:
         62:b2:3f:4b:33:e6:35:23:0d:8e:12:f2:5f:ed:10:f2:a2:62:
         65:c0:41:d1:9f:d7:81:3e:fc:e8:14:07:8c:4b:35:cb:63:47:
         f1:cd:72:e5:f9:1d:a3:12:02:a6:6b:6c:b3:17:75:21:69:7d:
         28:e3:eb:47:bf:26:4e:96:8a:2a:14:d6:97:3a:7f:83:ca:fd:
         68:0a:fc:f1:5c:0a:02:4d:be:c9:cf:81:5b:98:fb:3c:27:93:
         c2:fd:2f:0b:ca:49:56:3e:2b:76:d4:5f:ab:08:af:05:c6:38:
         3a:e9:fb:8c:05:6e:9a:4d:ee:7f:25:f1:7b:c4:fd:6d:54:40:
         81:c5:98:68:dc:1d:95:48:98:28:f7:13:18:d3:dd:37:47:d0:
         1e:b6:1a:e9:76:d3:59:9a:d9:80:90:da:b3:49:bf:66:99:3f:
         56:b9:08:74:a3:4c:7c:12:61:4b:e3:76:07:a4:e6:49:09:83:
         ef:64:68:e6:51:ba:a3:3d:c1:b4:f8:38:85:f5:70:9f:97:e9:
         84:72:d6:db
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUG/7PeXMGrUWePvtDGFj06/ys520wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwNjA3MjIwM1oX
DTI1MDIwNDA3MjcwM1owMzExMC8GA1UEAxMoMjc5RjlFRDRCMDhGMjEwM0MxMzM5
MkQ5NTYzNkM0NDU1NzdBNjMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMEdA+/q6MdtMviikUQuVgtT4gvqfjtpNp7/awzEnCMPvheABu1dMeGZB6uM
j+pVQJ8myucDqVms0baINGIuN0g6zyR6F8uGwsC4BY9JqjbLGNHsj0uJ5NRBjZgP
QxVVJ6jaziYFOrY95qot+DKaisKrEkJBJDiDfB5nD0b6ACPueYbXY/IYiPZ9Hbr7
/LQqahJyywSz0xohQIKk+CRP9/qzigSwGXA8+eJR31JcMOqJxWDQmMz167hJCiqA
HehU3hkRL6+NFQuIzYmVUdeEiKzeUifOYgKPJES+diBgDpMljD8DLLqTOkbhuE4q
pg2bV1hiElDbjsC3uq3kwo8lqbMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFCefntSwjyEDwTOS2VY2xEVXemM5MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8wYmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMTCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYjhlNjEy
LTdiYjMtNDhkZS05NjlkLTcxYjQ1ZjQ2YTE2MS8xLzI3OUY5RUQ0QjA4RjIxMDND
MTMzOTJEOTU2MzZDNDQ1NTc3QTYzMzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABneCgwDQYJKoZIhvcNAQELBQADggEBAEVZFxEPab8q7zkpdS/aOaXPYeZCk753
l2w44/R1n/N8HZ4mEa6h1n5zR1+NBUO5A3pfm93dd2KyP0sz5jUjDY4S8l/tEPKi
YmXAQdGf14E+/OgUB4xLNctjR/HNcuX5HaMSAqZrbLMXdSFpfSjj60e/Jk6WiioU
1pc6f4PK/WgK/PFcCgJNvsnPgVuY+zwnk8L9LwvKSVY+K3bUX6sIrwXGODrp+4wF
bppN7n8l8XvE/W1UQIHFmGjcHZVImCj3ExjT3TdH0B62Gul201ma2YCQ2rNJv2aZ
P1a5CHSjTHwSYUvjdgek5kkJg+9kaOZRuqM9wbT4OIX1cJ+X6YRy1ts=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:14 2024 by rpki-client on console-fra.rpki-client.org