Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer
File:                     4551A032C44485FF6593E043527E3E1CE35B4C46.cer (raw, json)
Hash identifier:          +gQ4nFtRjxWe5omFNyLbER8XHvkQZa6E3L/TKPZIiS0=
Subject key identifier:   45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7B5F119DCEFBDB8357A86AE68EC13C7E90C8A3FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 15:57:18 +0000
Certificate not after:    Mon 30 Jun 2025 16:02:18 +0000
Subordinate resources:    IP: 103.219.72.0/22
                          IP: 2405:4c80::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5f:11:9d:ce:fb:db:83:57:a8:6a:e6:8e:c1:3c:7e:90:c8:a3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 15:57:18 2024 GMT
            Not After : Jun 30 16:02:18 2025 GMT
        Subject: CN=4551A032C44485FF6593E043527E3E1CE35B4C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:e5:be:13:e6:be:4b:44:5d:47:a6:22:b8:
                    18:ac:9b:23:eb:bf:a5:2f:0d:1d:4f:98:ea:85:76:
                    df:ba:31:c2:76:83:b2:f5:c2:c9:81:f1:b6:ae:8c:
                    9b:3a:c8:f7:72:7d:85:e9:4c:c5:fe:5f:2f:6d:cd:
                    a8:97:74:7e:d8:48:31:c4:7a:3c:17:aa:e3:b7:d1:
                    01:53:dd:12:c6:a7:9c:54:6a:1e:3d:83:49:45:64:
                    59:9a:6b:a1:19:46:2b:d7:a9:fb:ba:3c:83:87:46:
                    88:80:f3:c8:cb:48:5b:92:0d:3b:09:23:84:7f:21:
                    b0:a8:50:64:56:42:bb:c8:67:8c:20:0b:99:91:e0:
                    c7:f9:26:0b:d3:9d:fc:36:58:44:b4:db:0a:6b:06:
                    5a:a2:26:1d:53:db:83:2a:53:4a:45:ec:7b:f4:03:
                    e9:c2:fb:9d:82:d7:d6:76:97:5e:75:f2:41:82:9e:
                    08:df:a3:ef:1e:66:06:d3:33:71:05:33:40:68:4b:
                    6f:f2:a4:28:d1:76:ea:f7:f5:85:c6:c8:a2:60:bd:
                    92:18:f2:0e:5c:23:a2:81:e2:9c:0c:cd:8f:a8:d3:
                    30:72:b0:10:a1:f6:5a:53:71:1a:8e:08:a1:36:3c:
                    87:58:95:01:09:b8:e4:45:6d:77:c3:95:9f:46:b7:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.72.0/22
                IPv6:
                  2405:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:d7:a5:4a:5e:e0:2e:ae:61:ae:59:5b:53:1a:64:d0:57:b2:
         cb:a8:3c:56:0a:05:be:54:98:cf:14:45:d0:fe:0b:1c:d9:6d:
         6b:bb:50:6c:6b:85:38:3d:1a:97:a4:a8:d0:a3:d4:de:3d:af:
         58:da:36:b0:75:76:ea:9b:62:ed:23:f6:92:57:40:38:e8:e7:
         46:37:d9:16:42:4d:c9:ab:a5:84:7f:0c:b1:34:32:73:2e:46:
         41:7b:be:ee:02:3f:41:9f:0c:f6:36:db:35:9b:1c:94:b1:ca:
         9d:43:b5:19:a0:da:b8:c3:7b:55:0f:1d:d9:fd:53:39:f8:29:
         85:8e:9e:a8:75:bc:f7:40:d5:c7:82:98:1d:3d:8f:5f:c6:32:
         f1:7b:bc:57:d1:fb:e4:54:1d:46:70:7c:2d:37:a5:58:49:3c:
         38:9a:40:ea:b1:52:82:27:d5:49:82:5c:4c:0e:54:35:3b:37:
         19:4c:f7:63:66:7b:39:bc:8b:37:25:c6:3b:19:30:04:34:5d:
         ae:ae:44:2b:1f:bf:a5:bf:c5:2c:84:13:83:3d:fe:3c:a9:41:
         0c:b2:36:84:81:6b:76:c0:70:d3:f9:c0:3d:e4:d8:35:6d:71:
         ee:14:c2:1b:67:3e:32:10:75:7a:85:ed:4d:72:25:f5:fe:17:
         e7:59:72:1c
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUe18Rnc7724NXqGrmjsE8fpDIo/8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE1NTcxOFoX
DTI1MDYzMDE2MDIxOFowMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNF
MDQzNTI3RTNFMUNFMzVCNEM0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMxw5b4T5r5LRF1HpiK4GKybI+u/pS8NHU+Y6oV237oxwnaDsvXCyYHxtq6M
mzrI93J9helMxf5fL23NqJd0fthIMcR6PBeq47fRAVPdEsannFRqHj2DSUVkWZpr
oRlGK9ep+7o8g4dGiIDzyMtIW5INOwkjhH8hsKhQZFZCu8hnjCALmZHgx/kmC9Od
/DZYRLTbCmsGWqImHVPbgypTSkXse/QD6cL7nYLX1naXXnXyQYKeCN+j7x5mBtMz
cQUzQGhLb/KkKNF26vf1hcbIomC9khjyDlwjooHinAzNj6jTMHKwEKH2WlNxGo4I
oTY8h1iVAQm45EVtd8OVn0a3S7MCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFEVRoDLERIX/ZZPgQ1J+PhzjW0xGMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9mM2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzYTYyYzlh
LWQ0ZjAtNDU0Yi04MDdmLTg0ZjliM2MyMDJiMy8wLzQ1NTFBMDMyQzQ0NDg1RkY2
NTkzRTA0MzUyN0UzRTFDRTM1QjRDNDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAJn20gwDQQCAAIwBwMFACQFTIAwDQYJKoZIhvcNAQELBQADggEBAA/XpUpe4C6u
Ya5ZW1MaZNBXssuoPFYKBb5UmM8URdD+CxzZbWu7UGxrhTg9GpekqNCj1N49r1ja
NrB1duqbYu0j9pJXQDjo50Y32RZCTcmrpYR/DLE0MnMuRkF7vu4CP0GfDPY22zWb
HJSxyp1DtRmg2rjDe1UPHdn9Uzn4KYWOnqh1vPdA1ceCmB09j1/GMvF7vFfR++RU
HUZwfC03pVhJPDiaQOqxUoIn1UmCXEwOVDU7NxlM92Nmezm8izclxjsZMAQ0Xa6u
RCsfv6W/xSyEE4M9/jypQQyyNoSBa3bAcNP5wD3k2DVtce4UwhtnPjIQdXqF7U1y
JfX+F+dZchw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:16 2024 by rpki-client on console-fra.rpki-client.org