Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
File:                     466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer (raw, json)
Hash identifier:          pzBET3hZeEFLj9h6X68VJsnMQZk2GGJo1y8DieYe+vg=
Subject key identifier:   46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       53B532800E8937506759202C1CA498ACC89FD7AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Jul 2024 14:40:00 +0000
Certificate not after:    Wed 02 Jul 2025 14:45:00 +0000
Subordinate resources:    IP: 103.185.110.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b5:32:80:0e:89:37:50:67:59:20:2c:1c:a4:98:ac:c8:9f:d7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  3 14:40:00 2024 GMT
            Not After : Jul  2 14:45:00 2025 GMT
        Subject: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:14:a7:e8:6b:93:26:f9:21:d5:87:0d:cb:
                    f9:bc:ec:a6:36:b2:48:11:b0:15:cb:f4:c1:83:56:
                    94:f9:a3:f1:01:22:ed:ec:01:74:ba:26:e2:90:4d:
                    10:20:ef:dc:b5:14:3e:67:7c:bf:08:2b:b0:f0:03:
                    0f:24:d2:f2:02:81:c2:9f:0c:35:fc:3b:49:d4:33:
                    57:67:bc:65:a8:0b:15:26:ae:0a:d1:74:75:9d:aa:
                    37:32:a4:4b:9c:69:6d:74:22:0f:88:0d:19:b9:59:
                    15:17:e6:ea:0b:6d:09:5c:05:ac:8d:58:0e:e2:c8:
                    42:58:54:92:7c:55:a9:f0:06:09:2f:50:2e:56:c5:
                    c9:eb:4b:6d:8d:21:bb:d6:29:0c:89:19:71:7e:c1:
                    75:e4:5b:32:06:78:78:58:79:cf:38:d5:dd:42:3a:
                    40:8b:d9:71:32:cf:26:c8:d8:d0:de:ac:38:ff:dc:
                    49:30:96:77:44:16:0c:e5:0d:55:75:f1:5b:c7:e1:
                    0e:d7:39:24:a2:b9:08:2f:fe:e7:40:7f:be:ee:43:
                    5a:07:30:e5:d9:56:91:e3:4f:cc:d6:60:8f:98:d2:
                    42:7e:ea:92:6e:53:22:e9:d9:0a:a0:32:44:f7:a8:
                    29:c9:4a:b1:96:32:c6:16:da:71:83:7b:60:1d:6b:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:d2:d4:2f:4a:e6:75:09:04:34:09:6d:90:ec:81:33:4e:
         53:4f:fc:82:b3:b3:29:15:9a:a0:27:3f:47:02:5e:6e:8a:97:
         3b:ad:c4:57:4f:60:cc:77:53:2f:aa:63:39:c0:17:c5:9f:61:
         64:1b:a3:5d:bc:1f:0f:f1:38:f8:46:2c:4d:84:ad:2a:79:bc:
         6d:57:a8:88:16:0f:37:35:3c:74:78:1c:ec:13:28:63:9e:5e:
         c5:d1:53:39:1b:e6:ab:84:76:43:9a:3b:4d:3d:47:b8:c7:89:
         b6:4e:63:86:56:f4:84:e0:24:b0:af:be:37:9e:3d:e5:3a:08:
         f2:89:fa:19:6a:e8:04:27:3a:c0:23:d4:a6:c2:25:27:af:de:
         72:c1:29:f2:45:29:37:74:a6:a0:90:c2:7b:a0:f7:a2:bf:b6:
         64:f0:52:77:eb:12:75:4b:c3:2f:a3:b1:c0:cc:d7:b9:b2:33:
         7f:f7:d8:64:8b:73:07:3c:82:e9:64:d2:c5:38:04:05:bb:cc:
         1e:08:68:2f:d0:86:49:08:af:b5:38:64:00:ab:96:e1:1f:df:
         3d:a2:98:0f:c6:f6:32:63:c3:a5:9e:60:2d:ba:98:7f:50:41:
         38:a4:c3:8b:ac:39:5c:f4:02:5d:00:cd:0e:a1:b0:c8:17:f0:
         db:da:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org