Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
File:                     52145183B5BE1A663FBC5C228102541AC61F9F86.cer (raw, json)
Hash identifier:          cl7xDgxvoyiNdO2UseovnUXrWJ8hI2ZAG2E8v5zSS20=
Subject key identifier:   52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2C19DD1B6AAC7F0757366ABEAADDA91A28A5D501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 18 Aug 2024 04:39:13 +0000
Certificate not after:    Sun 17 Aug 2025 04:44:13 +0000
Subordinate resources:    IP: 103.157.78.0/23
                          IP: 2406:9ac0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:19:dd:1b:6a:ac:7f:07:57:36:6a:be:aa:dd:a9:1a:28:a5:d5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 18 04:39:13 2024 GMT
            Not After : Aug 17 04:44:13 2025 GMT
        Subject: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:2f:da:af:a7:4c:d4:de:94:ca:95:ca:c2:
                    b0:51:38:81:e8:fe:aa:b7:e3:98:07:a0:e0:1b:97:
                    84:ba:3e:4b:75:4e:a3:48:2d:ac:35:c6:23:7e:66:
                    4b:21:a4:4a:98:5c:45:e0:b0:f0:be:9a:04:51:d1:
                    82:b2:61:a7:54:c1:3f:92:8d:7c:74:d9:92:ac:21:
                    86:95:d9:cf:18:f7:6f:31:13:90:4d:22:71:c2:5d:
                    c7:92:49:31:83:cf:b3:bf:c3:26:c1:07:f8:70:80:
                    87:c6:89:a5:8f:a4:ba:09:c9:5a:43:95:74:f7:ac:
                    f5:e9:9f:ed:f1:21:f3:71:f8:86:dd:40:5e:09:71:
                    9e:f6:36:fc:d2:83:bf:83:c1:ec:2d:44:96:75:8c:
                    ec:75:0b:d3:d0:ba:59:c5:9e:d1:82:09:d6:8f:42:
                    bc:f2:75:e6:c8:fb:74:7f:a2:5f:68:32:85:d1:f3:
                    82:bb:6b:3e:81:5f:4d:9e:81:79:b1:84:a9:7b:66:
                    ad:cd:8c:9c:7a:06:d9:b4:15:79:b3:63:1a:48:b7:
                    c1:f1:84:c6:a4:fd:cb:24:0f:3d:cc:57:56:d6:22:
                    4e:b2:fd:86:d2:a4:a0:a3:1b:71:16:ba:9e:1e:41:
                    da:b2:c6:4f:67:98:a2:96:76:03:e3:c5:66:98:a4:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.78.0/23
                IPv6:
                  2406:9ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:ea:ac:1f:a4:c8:53:87:7f:10:bc:b3:a3:bb:3a:56:1c:
         45:71:48:25:56:c3:e1:23:73:e2:d5:3b:3d:e0:61:69:80:63:
         de:e2:d5:55:d7:d8:26:c5:af:4e:b0:a3:a5:95:28:bf:a9:dc:
         76:61:09:b6:c7:a1:12:f0:66:ec:dc:c7:cb:63:6d:19:32:73:
         cd:9f:3a:e6:a7:ce:11:34:45:ba:5d:80:19:f7:d3:5b:1e:62:
         08:b5:f0:7d:49:f7:60:a7:d6:72:30:60:da:e1:e6:86:14:e7:
         29:02:8d:52:0b:95:6e:8b:78:f3:8c:34:23:c0:50:a2:32:24:
         4a:74:92:14:86:6d:9e:6d:dd:7f:48:c5:b4:2e:1a:c7:11:70:
         ab:2e:d4:40:63:92:67:70:84:3c:1d:a1:0f:6a:28:3d:b3:d0:
         5e:84:e7:4a:f3:2b:11:b5:58:45:86:b7:7d:36:d0:e3:b3:ca:
         c8:c5:f9:2f:64:19:13:89:08:7c:b4:32:c7:ae:b5:4d:75:c2:
         f7:dc:f6:6e:21:9e:c4:d6:48:2e:2b:c4:b6:08:01:07:a9:db:
         f1:c7:31:7b:ae:3b:89:1c:eb:58:42:fd:01:20:33:60:77:17:
         bb:22:f4:b3:75:f3:17:b8:f6:d4:fa:17:2b:06:fb:68:39:81:
         3d:46:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org