Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
File:                     365454AF0090F9E623861AF2120855412F7447D1.cer (raw, json)
Hash identifier:          TgpphQt9vs274DK/bumifCGI4kfW0PcxP3FdNeR52WU=
Subject key identifier:   36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       75CDA29FEB4F35FEFECC96C831BF110F41D2418C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Sep 2024 02:32:54 +0000
Certificate not after:    Fri 12 Sep 2025 02:37:54 +0000
Subordinate resources:    IP: 202.180.48.0/21

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cd:a2:9f:eb:4f:35:fe:fe:cc:96:c8:31:bf:11:0f:41:d2:41:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 13 02:32:54 2024 GMT
            Not After : Sep 12 02:37:54 2025 GMT
        Subject: CN=365454AF0090F9E623861AF2120855412F7447D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:da:74:e0:de:4e:43:2d:74:dd:03:0d:85:
                    b7:fa:10:b9:f8:7d:4d:3e:27:6d:5c:dd:8f:aa:56:
                    74:51:a2:c4:41:a7:88:90:d5:e8:4f:22:5a:c7:dd:
                    27:69:3b:b9:0d:c2:df:db:8b:c5:d5:74:2c:a8:a1:
                    4f:9e:92:82:4e:78:cf:40:90:2c:eb:ba:f5:eb:13:
                    c7:40:c6:29:0d:f0:ed:11:2b:70:5d:49:b8:8f:07:
                    e1:0a:ee:96:b5:93:46:92:7d:c9:14:3f:db:7a:54:
                    dd:97:5a:41:1a:af:e4:81:3c:6e:9d:12:0f:43:0d:
                    1f:ca:3f:5b:2b:1a:14:55:4f:9c:6e:83:de:35:d4:
                    f4:1c:94:b4:65:fd:d8:e4:80:1b:ef:96:80:68:19:
                    47:fd:46:51:8e:ee:f5:3a:96:26:44:3e:aa:38:e0:
                    08:12:a3:83:2b:74:28:21:b5:9f:4a:a2:5b:35:91:
                    51:fc:69:0d:f5:73:fc:c7:79:d5:5a:b0:89:d5:6f:
                    fc:cc:5c:58:e5:da:15:c5:99:a4:08:8a:d4:01:43:
                    e3:c7:a3:7d:b5:ea:a9:ba:0e:9d:19:fd:ae:4d:37:
                    2c:91:df:34:01:92:61:07:e8:e2:4e:73:6e:14:96:
                    ad:5e:0c:31:45:6d:cb:51:1b:44:64:c5:f0:c9:95:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:c1:22:05:73:e8:76:ab:52:bf:33:4f:ba:9f:76:32:6f:
         44:40:01:99:d5:66:0f:61:05:46:f0:33:c3:5c:d8:02:be:70:
         61:1f:50:93:cb:97:8e:91:66:96:5f:5f:22:e4:7f:e2:5b:f2:
         9c:c0:b3:dd:af:49:30:ab:8f:e5:9d:68:59:61:8c:2b:f5:f2:
         bf:be:71:23:09:42:f4:f0:d4:de:af:47:91:12:49:44:73:90:
         76:65:f4:1d:a7:85:d4:3d:12:01:3f:ea:1a:31:d0:8f:07:96:
         b0:17:3f:e8:96:1a:1c:95:47:7e:82:f6:b8:f1:a5:87:13:aa:
         c7:ec:56:65:69:f6:ef:7d:41:6a:6f:c7:06:45:ad:7b:d2:0a:
         ef:69:2f:fa:83:3a:ca:bf:3e:4f:6c:ac:73:88:17:12:96:1f:
         93:be:63:dc:9d:85:4e:c5:3b:6f:ad:8b:c6:23:60:6d:be:ce:
         e2:78:19:ac:48:6b:8f:1b:18:e1:a5:ae:93:42:5c:6c:2f:da:
         18:55:63:a1:99:67:55:34:5f:5f:61:60:37:50:be:1a:3d:62:
         fd:2e:53:70:7c:1d:ec:f7:9b:e2:f1:32:19:88:86:8d:9c:26:
         ab:d6:b5:cb:88:4e:dd:1c:b3:aa:57:5f:ac:fe:70:d7:64:4e:
         a2:57:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:15 2024 by rpki-client on console-fra.rpki-client.org