Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
File:                     411479424B4016269EB9E266CD48905F63DC9F0B.cer (raw, json)
Hash identifier:          78jGIoE3AQCDNplE4PxYW0PgX2g/TW2e9K7PJhYYtus=
Subject key identifier:   41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6F25BD2E248DF3DC48F2FBF190D4F767E5EFA2F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Sep 2024 23:34:16 +0000
Certificate not after:    Fri 26 Sep 2025 23:39:16 +0000
Subordinate resources:    IP: 103.178.90.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:25:bd:2e:24:8d:f3:dc:48:f2:fb:f1:90:d4:f7:67:e5:ef:a2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 27 23:34:16 2024 GMT
            Not After : Sep 26 23:39:16 2025 GMT
        Subject: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:6f:96:68:f9:6d:51:de:3c:7a:52:ba:ac:
                    8b:27:52:26:b1:45:1a:1c:56:b5:68:14:2f:f2:9c:
                    35:2b:44:a7:0a:62:72:40:4a:98:e5:38:ed:70:80:
                    09:8d:b3:66:11:a8:bf:bf:27:b9:9c:42:92:b8:7d:
                    1c:f4:fc:40:ab:a9:c0:27:aa:5e:39:1f:9f:26:b9:
                    4f:49:09:d9:eb:b3:42:f0:54:97:e7:09:82:2b:c0:
                    0b:62:02:e3:83:38:bc:24:5d:bb:80:f6:04:9a:83:
                    c6:3a:d0:21:97:da:6d:a1:e2:6b:6e:7f:8f:cc:fa:
                    93:4b:e4:1f:6d:f9:3c:c0:f3:e3:5c:47:71:85:96:
                    f4:f0:ff:a0:f1:7f:97:fd:18:ad:4f:7d:38:b2:de:
                    89:38:6c:33:6b:3d:96:6d:70:dd:db:ef:31:b8:63:
                    0f:b8:91:79:44:4e:aa:fb:75:d4:6a:76:9f:f8:08:
                    71:bf:05:be:66:8a:f1:30:2c:7b:0b:e6:d6:30:c7:
                    b2:8a:2b:74:97:c7:ee:00:37:40:0f:ef:c0:3f:fc:
                    68:f8:f7:ce:d5:6a:41:98:26:9f:15:8d:78:f1:08:
                    e1:42:c8:32:35:37:da:a6:f1:17:a9:c0:bd:e0:a2:
                    3b:31:90:bc:8d:73:0c:95:29:cb:e3:03:7b:c5:ff:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:32:4d:b9:b1:9d:e0:2e:6d:7a:89:d2:c8:68:a6:bf:7d:06:
         65:47:d1:a0:54:0c:06:39:8b:89:df:19:b3:dc:57:94:38:ee:
         97:77:fc:e5:b8:3e:89:93:0b:d0:e1:31:16:06:73:b7:04:95:
         73:07:79:ed:0a:66:84:fa:a1:8e:fa:1c:b3:63:c3:70:94:92:
         f8:9b:3a:76:09:1e:a1:7f:c9:bc:27:40:53:84:f9:08:ee:4f:
         4d:67:3f:05:59:b2:74:bb:50:31:94:1e:a1:57:76:ce:14:56:
         99:cc:32:78:fe:e1:75:7d:e6:2f:64:25:a2:62:50:24:e5:ec:
         42:5b:54:21:11:9a:46:db:a7:1e:b3:dc:e1:5f:bc:f9:a9:c3:
         f7:c1:e1:93:07:c7:5a:a1:f3:29:27:5e:ac:5a:69:7c:f9:6e:
         df:38:18:76:2f:71:1b:7e:13:2b:61:c9:38:6b:f7:b4:d5:c9:
         0c:89:c1:b5:7e:c4:a6:32:4d:4f:38:93:a9:87:ea:a4:72:df:
         21:b5:21:1a:44:9f:f0:80:93:18:67:07:8e:cc:9b:ab:cf:00:
         a8:fc:a4:0a:c0:85:d1:54:58:5f:6d:c0:d3:1d:e5:95:0b:c4:
         6d:ad:b0:80:26:22:30:9b:40:93:71:e3:2c:ca:41:6b:6b:82:
         11:ac:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:16 2024 by rpki-client on console-fra.rpki-client.org