Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer
File:                     516450A151C5487FCC5911F4C18941CA895B07A5.cer (raw, json)
Hash identifier:          oXzRFCwKsp+i3C5JloHuoK/hX2J2m7Es4WtJxHIurA4=
Subject key identifier:   51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       572A0D1CCAF834177B14F59DFE35FA3426E3295E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 27 Jul 2024 01:34:02 +0000
Certificate not after:    Sat 26 Jul 2025 01:39:02 +0000
Subordinate resources:    IP: 103.144.18.0/23
                          IP: 2405:62c0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 06:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2a:0d:1c:ca:f8:34:17:7b:14:f5:9d:fe:35:fa:34:26:e3:29:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jul 27 01:34:02 2024 GMT
            Not After : Jul 26 01:39:02 2025 GMT
        Subject: CN=516450A151C5487FCC5911F4C18941CA895B07A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f7:59:5f:f2:32:1f:e0:4a:f9:c2:e1:62:54:
                    9f:c9:ea:86:7b:2b:34:57:93:2e:a6:bc:19:79:d1:
                    75:85:4f:d8:27:a8:f4:34:cb:46:5c:6e:06:e3:b6:
                    1d:38:f2:7d:cf:aa:3e:f9:cf:f1:5b:09:e5:48:f6:
                    19:11:e9:ba:a7:38:2c:17:8a:b0:e7:0c:ce:8a:5c:
                    6e:fe:44:7e:41:cc:fd:2d:0c:3f:f8:9d:22:b7:0e:
                    75:c1:d8:8b:0a:ea:c7:d9:87:50:51:15:0b:4b:60:
                    9a:91:74:3d:d2:f3:89:a8:8f:db:5d:36:50:98:c6:
                    63:28:c8:74:25:bc:89:2a:12:39:f7:e8:18:de:94:
                    1e:b3:57:6d:94:43:f5:9c:82:02:c7:d2:c1:ff:0e:
                    f1:b4:a9:a5:82:eb:b2:b4:88:fa:7e:6b:12:3b:6a:
                    80:6d:e8:18:3a:d0:0b:60:07:a7:ed:f2:89:c8:e7:
                    68:33:4d:fe:3a:4f:6c:14:09:c8:86:28:7d:1d:1c:
                    4c:61:23:92:9d:3a:eb:14:f5:9f:5c:a2:07:ff:0a:
                    df:c8:ae:d8:e8:7c:ad:43:06:16:84:39:cb:8f:08:
                    2b:3a:91:52:3a:92:7e:ac:72:15:ee:fc:4f:28:83:
                    a9:4b:aa:b1:d3:be:14:c3:1f:7f:71:67:7e:b1:d0:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.18.0/23
                IPv6:
                  2405:62c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:ef:d4:35:32:5c:44:21:54:12:c7:b9:66:2d:ce:63:d9:b8:
         5e:72:59:f6:9d:cf:99:de:50:d8:d2:55:73:ce:0a:1a:5d:ae:
         d3:bd:00:f5:f5:c3:f1:67:f6:77:e5:6a:cf:ae:03:91:cd:90:
         ea:ed:72:9a:2a:ef:a0:f6:db:22:98:99:9c:70:0a:41:19:b3:
         71:0a:a7:7f:b4:2e:2b:f3:d5:14:77:35:b0:19:f0:59:99:da:
         bd:74:2a:9e:b4:73:ce:b0:0e:33:12:c1:a6:c2:53:88:b4:d9:
         88:ce:e8:b2:f3:16:6f:f3:08:b3:0b:27:bc:90:d5:58:c0:99:
         4f:10:e3:f0:cd:32:7f:0d:a3:ca:f0:13:e0:ba:fe:a5:87:bf:
         5f:74:65:47:f0:3d:ad:b4:a7:95:29:ac:70:3a:0c:54:49:59:
         d5:ab:47:ba:b8:2a:1a:50:14:bd:42:78:7c:75:ee:a7:13:06:
         2b:af:f5:c7:f6:d6:f7:7a:38:90:72:13:a9:d4:65:c2:59:1d:
         c9:9c:b3:cb:90:b5:94:ef:68:e2:50:db:cc:3f:27:4e:2b:78:
         46:48:5e:68:73:de:fd:bf:b7:75:66:ce:41:5c:b5:cc:c6:54:
         f7:7d:dd:20:4a:3e:00:c0:d8:87:e5:1d:62:33:d1:9e:0d:ce:
         ae:76:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:12 2025 by rpki-client