Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
File:                     55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer (raw, json)
Hash identifier:          1JGImbGjCsTa16Wvvk0FeOzhRVxDQ5/yzHu7VME7gck=
Subject key identifier:   55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26CDD0D3FE4C2F45EDD6756A16670D364CED765C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 03:00:35 +0000
Certificate not after:    Mon 29 Sep 2025 03:05:35 +0000
Subordinate resources:    IP: 103.130.4.0/22
                          IP: 2403:adc0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cd:d0:d3:fe:4c:2f:45:ed:d6:75:6a:16:67:0d:36:4c:ed:76:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 30 03:00:35 2024 GMT
            Not After : Sep 29 03:05:35 2025 GMT
        Subject: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:be:d8:6b:bb:65:20:94:31:af:6e:7c:46:
                    24:81:2e:5a:f8:58:2f:3a:33:02:98:5a:60:bf:6b:
                    c9:6d:c1:71:a7:21:f4:68:13:36:c2:33:94:ca:da:
                    f2:4c:d6:ac:7b:dd:73:19:68:36:93:22:81:cc:f5:
                    4b:b9:d1:ae:4c:df:f8:4a:20:53:9a:2a:f7:b4:ef:
                    16:b2:c7:fb:61:9d:31:36:b5:ed:a0:3a:0d:53:f4:
                    75:41:39:02:f8:c1:e9:c4:44:f0:65:e1:d5:af:1a:
                    36:ce:c6:36:b6:b8:4f:e1:2c:2b:4d:7c:2f:94:78:
                    0c:76:cf:5a:b3:40:a1:b9:6b:7f:e1:d8:76:48:ea:
                    a1:d3:91:04:37:56:97:9b:d9:0c:0c:a9:4e:76:b3:
                    df:f4:02:61:6c:2e:97:90:0e:d5:cc:20:f3:38:88:
                    d1:86:79:97:7a:fe:6c:51:e4:c7:75:9f:f4:d4:75:
                    02:7c:61:42:7b:63:4c:82:e4:3f:7a:8f:6a:ac:3a:
                    0a:d4:cd:9b:6b:67:07:04:fc:7a:18:4a:52:7a:fa:
                    ae:ca:db:67:e2:a0:11:57:b2:2e:5b:61:c5:92:cb:
                    4c:95:11:a3:9b:f3:4c:73:b0:e3:46:c6:1a:ad:d8:
                    19:4a:38:64:7d:65:f0:4a:2c:1c:98:fa:c4:73:22:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.4.0/22
                IPv6:
                  2403:adc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:8b:ce:ce:55:4e:af:f3:66:c5:62:15:38:9b:bf:fa:27:21:
         90:9e:4d:05:4a:de:c5:70:18:59:54:18:c7:24:10:6d:c0:ee:
         09:6b:f8:b7:4e:71:e5:b4:3d:3c:6b:ef:1d:03:6d:13:35:a2:
         a9:f9:e1:d4:b6:dd:73:45:ad:74:14:2a:0f:77:1b:98:61:17:
         87:29:f4:12:e5:b0:de:58:a7:19:e5:df:94:cc:3c:b8:1c:af:
         59:dc:eb:44:a3:84:0f:1d:21:7f:10:ae:f2:8c:9d:04:61:76:
         82:66:4c:99:d0:7e:3f:b6:1d:dd:63:c1:55:1d:8c:93:3d:de:
         51:ee:6d:a4:ee:a3:3c:74:54:9a:4f:02:d2:4e:7f:ea:b9:7c:
         a9:27:87:e4:46:cd:c7:31:05:f3:c0:29:5f:47:4b:67:e3:d3:
         01:24:7a:6a:48:cd:8e:6e:f7:40:40:16:8b:3f:68:9f:04:27:
         df:a9:81:b1:99:09:43:02:81:aa:4c:f7:c3:24:42:7b:01:4e:
         be:bc:7c:f6:f1:d7:5d:32:64:77:18:ab:ac:bf:a4:e7:2f:24:
         87:f1:f5:f8:d4:38:df:78:9b:48:00:0b:33:e1:56:b5:b5:19:
         0c:30:e5:0a:98:b6:95:84:96:22:d6:dc:c9:55:d3:d8:18:47:
         4b:7d:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:17 2024 by rpki-client on console-fra.rpki-client.org