Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer
File:                     59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer (raw, json)
Hash identifier:          X/9NErfeBfyKdhOKxrCXRHlYRFah3YJ3+l1+JjOvoGA=
Subject key identifier:   59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       055D9F0E634E9D0459158189440ADB3DDE5FFC08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 16:18:14 +0000
Certificate not after:    Wed 19 Mar 2025 16:23:14 +0000
Subordinate resources:    IP: 103.71.190.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5d:9f:0e:63:4e:9d:04:59:15:81:89:44:0a:db:3d:de:5f:fc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar 20 16:18:14 2024 GMT
            Not After : Mar 19 16:23:14 2025 GMT
        Subject: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:62:f1:57:24:81:5d:90:ac:23:cb:ac:ad:
                    6b:c3:a8:72:2f:29:1b:3e:94:52:d8:b8:ad:18:d9:
                    8c:a9:5c:4c:de:7b:bd:e6:ec:8c:10:17:df:4e:38:
                    08:a4:8d:2b:fc:36:cc:b5:db:4e:f6:fb:49:fe:59:
                    8b:51:e8:a8:6c:e4:b7:91:3f:6e:fe:4b:1e:7c:d5:
                    81:f3:1f:1b:f9:d5:35:fe:31:4d:b7:ce:3e:12:2a:
                    27:7f:79:12:60:34:a7:55:23:03:20:c0:1c:9e:5d:
                    43:b7:ca:33:7a:8c:98:a0:d9:25:f9:b5:14:09:1e:
                    78:b0:0e:8b:96:e5:b9:c9:91:e5:66:3c:74:c8:c7:
                    ef:1f:c3:6c:8a:01:59:01:fd:f4:0c:7b:41:0c:89:
                    35:2d:e0:3e:48:43:d0:eb:37:8c:48:6b:0d:91:b2:
                    06:58:31:d3:c6:f5:fa:30:8e:7e:25:b8:aa:7b:fe:
                    74:e5:c0:ca:bb:52:31:9e:40:ff:00:1b:70:8f:c6:
                    d3:ec:54:e8:26:89:16:bc:ee:cb:2e:d2:88:99:d1:
                    2c:9b:8f:c3:32:c9:98:81:9e:72:26:e6:c2:6f:43:
                    fa:e7:48:b1:9a:e4:16:17:2b:d7:fb:57:e4:25:3a:
                    9b:f5:62:3f:79:2a:2d:41:b9:f7:ed:d9:fb:0a:f2:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:5f:ef:55:c3:81:17:90:65:ba:66:39:81:bf:92:59:54:
         c7:aa:52:cc:d7:65:5a:1f:87:45:f2:50:8e:4b:49:f1:c5:6d:
         19:fe:ed:5e:3e:d9:6a:9e:37:18:07:a0:57:6f:8a:1d:46:be:
         e2:05:d3:c2:a7:ac:7d:1a:02:77:ca:e1:ea:26:e5:32:9e:7b:
         82:bf:fa:47:5a:8e:7e:b7:13:7c:44:3a:85:d3:e9:cf:4e:b2:
         b0:eb:57:df:bb:c8:82:7c:7e:a9:b8:da:d6:d9:1a:59:cc:0b:
         8b:13:a3:80:c4:1f:52:2e:bb:14:0b:78:51:9f:cf:9a:13:d7:
         e5:31:91:83:44:6d:aa:e1:d2:93:f1:41:e4:4b:f7:0a:eb:6e:
         5b:44:75:38:b4:12:6a:03:e1:64:37:39:d3:eb:99:a3:14:2b:
         3c:6d:19:7d:59:f7:90:98:95:3a:b3:56:7f:e5:d5:74:db:ca:
         dd:46:47:4a:a4:1f:ee:89:01:5c:79:d4:76:d1:2c:f2:19:fd:
         c7:5e:66:f1:7a:81:99:2e:79:52:ef:8c:47:cb:94:d3:c6:c8:
         72:22:20:20:de:1c:d0:c7:0d:f1:5f:34:a7:fe:0f:5d:6a:b5:
         85:d3:a3:b9:8b:de:c1:6a:56:c2:d2:29:ad:9a:d1:7d:6a:52:
         88:07:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:21 2024 by rpki-client on console-ams.rpki-client.org