Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
File:                     581E644EEC44F9523CF189893E102BCC6008F9BE.cer (raw, json)
Hash identifier:          yydbLzt4WkmGklvkkLKmqu2l6XbMRiEOve9Xy2oonzA=
Subject key identifier:   58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       500924DAF9815B31FC0D0E613D6336753646E0E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Sep 2024 20:47:15 +0000
Certificate not after:    Tue 02 Sep 2025 20:52:15 +0000
Subordinate resources:    IP: 103.189.120.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:09:24:da:f9:81:5b:31:fc:0d:0e:61:3d:63:36:75:36:46:e0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  3 20:47:15 2024 GMT
            Not After : Sep  2 20:52:15 2025 GMT
        Subject: CN=581E644EEC44F9523CF189893E102BCC6008F9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:60:7a:48:8f:55:bc:67:b0:e0:5d:24:cf:
                    12:4e:90:67:14:43:a5:eb:c5:6a:a0:5d:c8:28:d3:
                    3a:14:47:56:45:29:b1:fc:b0:64:db:13:7a:c1:f5:
                    23:26:0f:84:7a:2d:c8:ef:40:87:77:c1:e8:b2:a4:
                    2d:85:bc:2f:e1:29:39:69:6a:ea:36:7c:33:60:8c:
                    ae:68:b6:f1:8c:57:dd:fd:8f:99:0b:72:cd:69:88:
                    82:d2:37:78:55:2c:3d:ec:08:a3:37:fc:ff:69:bd:
                    5d:cc:c8:c6:98:3e:a8:be:c9:2d:46:7b:5b:9d:c5:
                    a2:5c:7c:0b:d6:24:17:f3:03:5c:59:33:1b:21:4e:
                    89:63:a8:cc:05:53:fd:90:3c:fd:ea:6a:a2:95:7a:
                    0e:a0:26:98:3f:4e:ae:6a:21:cf:6e:cb:7b:47:7e:
                    7a:22:49:d9:2b:cb:e0:a3:c3:ef:df:0d:ac:4a:b4:
                    ad:05:de:c9:fc:dd:c9:82:ee:b7:d6:2d:c8:af:86:
                    60:83:ae:28:1e:bd:7d:1b:bd:3b:a2:79:e9:09:d1:
                    c1:c2:94:fe:a9:91:d4:3a:56:fe:17:48:d1:89:b2:
                    12:1f:38:24:69:9b:d5:1e:b0:51:72:58:46:d9:5c:
                    a5:69:32:03:73:2a:c0:df:60:87:9b:0c:61:8f:33:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:3f:64:a8:73:5b:7c:f2:08:a5:11:bd:3a:5b:10:89:c9:
         88:bb:2b:18:10:7f:53:06:a7:96:6d:4f:8f:87:c3:72:41:d1:
         af:e4:8d:a6:b6:7b:dc:15:71:d3:dc:08:5d:fd:b6:31:84:ac:
         28:f7:e5:ec:e5:94:d7:e2:7c:39:7c:76:5b:68:60:fb:ce:b6:
         6a:18:64:ab:8c:15:df:b4:ba:22:a7:fd:59:9b:53:50:e4:3e:
         a6:cc:a3:2c:b3:ec:78:37:a3:91:c2:97:67:b8:cc:14:2e:4e:
         a6:61:ad:05:88:71:43:b0:27:dd:b1:c1:c9:03:8a:bb:f3:d6:
         2f:a1:c1:b7:93:6f:75:91:5f:55:e0:fa:23:52:b4:d1:84:c7:
         61:d8:6e:8f:17:c9:41:f9:fc:b2:94:ca:22:36:f5:89:cb:be:
         4f:ce:42:5e:55:7a:61:6b:13:a0:5b:c6:b8:61:a4:73:01:97:
         ea:50:19:7b:d4:65:8e:77:9f:24:71:98:59:d2:33:c8:71:2b:
         6e:8d:cf:70:7a:bd:f9:2c:6e:a8:4c:8d:75:48:f8:92:82:fe:
         8a:f1:00:59:ff:97:e4:19:1a:ec:6c:87:bc:cf:4a:d9:1f:26:
         03:af:06:bf:a1:d5:b7:9c:80:6a:d4:11:cf:88:3d:5d:30:30:
         5b:05:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:48 2024 by rpki-client on console-fra.rpki-client.org