Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
File:                     368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer (raw, json)
Hash identifier:          VZJYl65pBNwg0fNzh6tpIakhEtbbtGkVzhwnqh5qH2E=
Subject key identifier:   36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6234E1A05CA098C26A2AFE787209711A2AAC0A0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 08:21:41 +0000
Certificate not after:    Mon 30 Jun 2025 08:26:41 +0000
Subordinate resources:    IP: 103.148.44.0/23
                          IP: 2405:cac0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:34:e1:a0:5c:a0:98:c2:6a:2a:fe:78:72:09:71:1a:2a:ac:0a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 08:21:41 2024 GMT
            Not After : Jun 30 08:26:41 2025 GMT
        Subject: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:d2:f8:2b:88:19:29:3a:dc:1f:92:f9:87:
                    44:c5:72:a1:52:f1:b3:ee:89:1c:45:8d:96:e8:41:
                    e7:47:cd:91:07:34:c8:5d:a2:ab:00:07:1e:57:c0:
                    6b:60:c0:e6:4a:73:4b:97:df:f6:11:8a:43:6b:1d:
                    14:86:bb:f7:c4:17:09:4e:0d:65:9e:3a:23:1a:c3:
                    7e:32:70:5b:48:d9:7a:26:03:2f:3d:cb:69:02:36:
                    d9:f4:60:2d:d1:88:88:1c:7a:79:47:27:74:4c:0a:
                    44:f3:c4:19:8c:8e:4d:a1:ef:35:2c:af:72:e7:aa:
                    1f:b6:bc:80:b0:f3:06:44:4f:e4:12:e0:37:b9:5f:
                    8a:8e:4c:55:2b:03:6c:9f:39:67:62:29:61:90:97:
                    dd:c9:d7:88:b7:95:90:52:ed:9b:d2:af:50:d0:75:
                    7a:8a:64:39:18:c2:9a:58:6b:9c:cb:1c:b9:86:f4:
                    cf:07:c6:26:e6:db:34:ad:92:58:79:c3:36:8d:9a:
                    ca:7b:b1:6c:9c:e6:08:9f:35:a9:a1:dc:71:15:5d:
                    dd:36:39:d5:a9:a4:db:c0:71:0e:c6:af:c7:2f:a9:
                    d7:98:ea:d3:89:32:81:61:24:4e:b6:60:32:51:97:
                    12:f4:2a:2c:dd:65:31:ce:8a:c9:53:cc:b7:fa:6a:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.44.0/23
                IPv6:
                  2405:cac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:5d:57:e6:51:bf:61:25:81:9d:65:ff:86:72:66:66:ba:
         a8:bf:56:0e:76:c0:5a:fe:9c:58:fc:83:99:f5:f2:6c:70:65:
         3d:19:31:ce:4e:be:de:80:1d:89:e2:d5:8f:57:10:39:6d:d1:
         b2:9a:79:68:b1:32:7f:8c:4e:9a:c3:8e:9c:a9:5c:d2:e7:7b:
         c9:3f:26:eb:5a:1b:84:35:5d:72:2a:6e:59:66:65:42:d0:b4:
         15:a7:79:26:26:6d:33:a7:a3:11:2c:7d:8b:8b:35:38:9a:62:
         06:f7:9b:43:55:26:90:e9:81:86:72:d1:32:c5:fc:02:55:5a:
         63:65:67:03:2a:6c:2e:df:3c:15:98:d9:0f:97:60:60:01:af:
         cc:c6:80:5a:8e:89:92:11:0d:29:60:6d:e6:b5:90:0d:97:e4:
         80:db:4e:af:15:6d:1d:32:87:14:54:37:fe:fa:b6:f7:a0:c5:
         fc:e8:ec:05:fc:02:de:26:54:3f:c3:2f:d1:b5:10:12:d9:ec:
         69:83:80:c9:fa:f2:ea:1d:e4:8b:a0:f8:34:41:b3:a2:97:4e:
         94:f6:d1:71:43:89:e8:5b:59:b9:63:a8:e3:f5:b1:dd:6b:a2:
         df:4e:cd:85:c0:42:a7:d2:80:13:86:4a:c3:47:28:5a:92:d8:
         c8:e5:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:46 2024 by rpki-client on console-fra.rpki-client.org