Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer
File:                     50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer (raw, json)
Hash identifier:          R1+bvX50AzFDPAjtpsLsUqogmc5Oywf1dBMR8dXILGs=
Subject key identifier:   50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       48BD0277EEB347C936392527DFB0D24621695034
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 24 Aug 2024 13:29:24 +0000
Certificate not after:    Sat 23 Aug 2025 13:34:24 +0000
Subordinate resources:    IP: 103.65.212.0/22
                          IP: 2405:ad80::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bd:02:77:ee:b3:47:c9:36:39:25:27:df:b0:d2:46:21:69:50:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 24 13:29:24 2024 GMT
            Not After : Aug 23 13:34:24 2025 GMT
        Subject: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:b7:e3:98:2c:fc:5b:80:f7:52:ba:29:7c:
                    e8:8f:17:e4:12:7a:89:76:a0:50:d0:65:4a:74:92:
                    b1:4f:c5:9f:80:1f:d6:01:ce:ed:b8:43:67:a5:70:
                    9e:6b:c7:01:b9:ed:7b:29:d2:e4:60:30:c4:f4:69:
                    75:3e:5f:5a:f4:58:84:c4:bb:1e:75:99:d6:1d:ce:
                    bb:14:10:5c:ab:ba:35:63:03:1f:82:4c:5f:e1:82:
                    79:ed:8a:dd:35:d0:63:5f:9e:d6:0b:1f:0f:4f:25:
                    27:34:82:6d:78:55:3e:6c:c6:10:15:95:59:01:35:
                    1f:22:e7:53:d6:99:7e:42:6c:97:75:65:b1:f0:c7:
                    db:51:d5:ea:c9:4b:7f:a6:bc:bd:84:5c:c7:db:4e:
                    f8:2a:ba:27:c0:ee:c5:57:22:f8:ad:68:57:95:67:
                    b3:57:d8:08:e9:a2:b2:ca:18:7d:32:6f:9a:b4:ef:
                    6d:f9:4b:b9:96:9c:e0:c7:2a:a9:0a:ed:63:f6:b1:
                    82:9f:46:6c:f2:e9:6c:c8:58:9f:5e:e8:bf:b2:32:
                    b7:bd:91:fd:7e:0a:a0:89:a0:b3:66:c6:ba:0d:61:
                    5e:cd:dc:aa:37:07:3c:5f:32:0b:7d:79:d8:92:7e:
                    4f:af:0c:86:a5:e5:60:c5:d0:48:d5:01:d0:7c:c7:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.212.0/22
                IPv6:
                  2405:ad80::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:ac:c1:53:d5:c5:27:f6:19:e2:66:c6:6d:d1:2a:3b:c4:44:
         8d:46:c2:57:93:d1:44:fd:5e:99:66:6f:dc:2b:91:9b:e6:f0:
         6a:72:53:33:d1:a8:b4:54:24:3b:ee:ad:00:6f:10:d8:10:47:
         42:2f:a6:1c:27:e7:7d:2e:81:ad:01:00:81:ed:a8:44:fb:81:
         a5:2f:c6:7a:a2:9b:86:8c:09:a0:84:ac:10:56:8f:84:eb:71:
         3b:bc:89:fc:e2:9c:dc:41:a4:a2:96:34:f3:27:7d:ed:dd:1b:
         d0:44:68:01:03:2e:42:14:87:45:5c:ce:57:61:ff:e8:43:2b:
         9d:4d:ea:7f:d9:bd:37:86:2f:56:84:30:ef:19:95:06:58:7a:
         70:d9:c6:e5:65:de:ce:d7:48:ce:07:3f:e3:c4:6c:84:f0:04:
         57:81:02:33:d5:6f:33:14:9d:0a:b4:f2:46:8c:6a:b4:a6:94:
         b2:b6:8d:d3:28:ed:7d:8b:2c:07:40:13:44:52:4e:c1:a1:6b:
         f3:31:ac:9c:69:7e:b5:2b:4e:24:bc:01:d0:01:7e:cc:41:fc:
         69:db:97:78:3f:5a:40:43:5c:a9:c1:4f:da:9e:82:f3:d7:e7:
         15:c8:ee:70:0a:9f:0f:9a:33:53:4f:2b:9f:2b:e3:bc:af:76:
         98:7d:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org