Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
File:                     2E55483B906244D2DA357F014F9AFA606D95C345.cer (raw, json)
Hash identifier:          foy3EJOilrsWvYY43nqs+56MpLlpIuSHoXhinWTakn0=
Subject key identifier:   2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       453DE4DD65067B6FB72B7C253D6CE40EE2C25814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 18 May 2024 04:30:18 +0000
Certificate not after:    Sat 17 May 2025 04:35:18 +0000
Subordinate resources:    IP: 202.52.58.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:e4:dd:65:06:7b:6f:b7:2b:7c:25:3d:6c:e4:0e:e2:c2:58:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 18 04:30:18 2024 GMT
            Not After : May 17 04:35:18 2025 GMT
        Subject: CN=2E55483B906244D2DA357F014F9AFA606D95C345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:d3:04:a9:af:e6:0e:92:53:9e:6f:ab:e4:
                    c7:b4:94:37:43:3f:5c:f0:dc:fb:3e:4f:a0:1f:b4:
                    3f:cd:0e:27:7d:4a:6c:20:33:44:78:cb:34:8c:a7:
                    ba:0a:fb:8c:90:1c:b3:eb:62:3f:bc:bf:1f:7f:77:
                    8b:c4:61:9e:58:91:43:ce:98:71:f8:e2:71:e7:a7:
                    f4:e2:3c:db:0b:19:ef:69:18:5a:22:0e:9a:d9:37:
                    ce:7b:d8:0b:02:07:a6:94:f9:be:9f:e0:b6:5e:27:
                    56:22:c4:b8:d6:74:a9:18:64:0f:ab:d9:fb:d0:78:
                    ba:f5:2a:68:1c:c7:03:a4:6a:4c:6f:9f:0b:f2:32:
                    44:45:d8:37:21:c6:74:bc:c2:bc:85:76:b1:0a:44:
                    e4:d4:df:cd:70:ab:ec:65:22:ba:1a:51:50:01:1e:
                    94:7c:52:51:8e:ec:64:13:4e:91:d9:4d:49:0b:90:
                    3a:7b:92:f2:80:46:df:24:86:86:8c:53:2f:95:cf:
                    66:c8:ac:1d:bc:6e:ba:7a:e9:59:e9:f7:4f:12:01:
                    a7:b3:4b:f8:57:7d:d5:b0:9a:1b:63:ee:10:18:79:
                    8e:0b:92:af:5e:b0:97:64:99:2f:d6:75:8e:8e:4d:
                    a0:31:9d:b9:38:15:e1:4d:48:45:fe:93:f1:2a:91:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:9a:21:ea:9f:dd:86:38:53:b0:50:23:ba:d4:ea:73:39:6f:
         e2:c8:70:8d:5a:d3:05:5e:4b:44:32:b5:00:ab:49:ca:c8:8c:
         d0:ea:d0:fe:44:f4:a5:85:c8:6a:19:00:04:6c:30:35:84:91:
         d6:71:c3:a3:4a:67:7a:17:43:b5:e8:1d:34:da:ae:4d:2b:98:
         91:01:db:ea:26:8f:46:72:91:87:87:16:4d:32:3a:8a:bc:f9:
         b0:3a:6d:fe:c9:23:55:c6:33:2b:48:4e:1e:40:d7:66:59:b7:
         b6:b7:19:1f:8a:0c:d9:ca:9c:77:e4:4e:d9:ae:e2:6b:49:96:
         c5:c7:d1:d6:f3:f5:00:e6:f9:08:7e:92:c7:69:d9:e4:40:a2:
         ac:cb:78:95:28:25:96:8d:3a:ee:ff:75:af:0d:2a:db:9d:2e:
         61:db:61:bd:b2:e2:fb:ae:d7:6b:82:b7:8c:69:12:21:93:1d:
         9d:3f:26:16:f8:11:b9:23:f3:5b:88:42:55:e6:b1:53:0d:67:
         93:4b:81:29:eb:8a:cc:d2:a9:9b:32:84:fc:b9:dc:57:dc:33:
         c6:71:9d:2c:98:bb:4b:d1:bf:95:dc:a2:44:9f:53:37:6e:4e:
         f9:67:37:68:b6:df:6c:d0:4a:7d:43:33:ed:41:63:b6:ba:34:
         fb:83:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 23:53:55 2024 by rpki-client on console-fra.rpki-client.org