Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer
File:                     60EED32BAAFA382342DABD544A906AFB859D9026.cer (raw, json)
Hash identifier:          IrALhbMOY4dR/AQekBEQLcXcQ1knMs8DxU3GowRQiKg=
Subject key identifier:   60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B59465B7AEEA66150BBC9954159223EFCCE855A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 May 2024 19:13:37 +0000
Certificate not after:    Thu 01 May 2025 19:18:37 +0000
Subordinate resources:    IP: 103.18.34.0/23
                          IP: 103.31.110.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 17:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:46:5b:7a:ee:a6:61:50:bb:c9:95:41:59:22:3e:fc:ce:85:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  2 19:13:37 2024 GMT
            Not After : May  1 19:18:37 2025 GMT
        Subject: CN=60EED32BAAFA382342DABD544A906AFB859D9026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:b0:ec:6b:31:8d:29:22:c0:8f:f6:3d:b1:
                    e6:43:d2:f2:09:0d:b6:eb:9d:26:7f:3c:b9:18:d5:
                    f5:a9:fb:df:9d:0c:3b:dd:4d:3e:4f:a7:83:8e:88:
                    c6:01:6f:e9:ce:9c:8e:fc:ab:3c:49:2a:6f:e2:4b:
                    68:b0:ce:e3:47:fc:29:55:0b:21:f8:f9:23:21:45:
                    8c:b4:63:90:20:0e:e9:b9:28:b1:8a:6e:33:d5:39:
                    af:9c:5f:82:14:23:5d:f3:75:25:dc:11:8f:c8:a2:
                    4c:9c:ce:fa:8e:01:11:20:ee:53:05:5e:b4:e6:b5:
                    51:6b:e6:90:1b:ad:77:38:af:a9:e4:4f:0e:09:9c:
                    b4:a0:19:78:1e:60:96:67:20:ff:69:38:cf:e9:86:
                    a2:a5:20:d2:fd:c8:19:de:e3:b1:2d:23:6d:3e:30:
                    9a:8c:28:38:d7:4a:5d:de:7b:05:b4:74:0f:76:1f:
                    86:d5:0d:58:e7:31:8d:95:2b:e0:b9:26:a3:86:fa:
                    30:d1:65:c6:b7:70:d7:27:d6:2f:a5:a9:73:63:ba:
                    c5:4a:0d:55:78:c5:cb:85:c9:14:da:38:c9:35:4a:
                    01:a0:3e:e7:b4:71:f3:a6:7c:bc:08:90:48:2f:f7:
                    f1:77:79:47:59:66:35:8c:b2:a1:f8:e4:99:b6:7b:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.34.0/23
                  103.31.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:9f:db:92:57:7d:b3:13:49:05:ae:cb:bc:86:66:b0:4f:
         98:78:e6:39:de:d1:56:6a:23:35:7c:32:c3:fa:b3:6c:08:dd:
         75:07:a5:cc:82:95:59:d4:fc:80:0c:2f:b9:a4:0f:2a:1d:f2:
         ca:15:39:94:75:16:ca:df:0e:9c:26:a6:c4:18:9c:60:0e:fb:
         a5:b7:d7:f6:8e:71:16:0a:0f:97:d8:15:ff:94:77:a5:46:83:
         c0:d5:aa:b8:b1:5f:ec:44:fb:b3:85:a2:90:6f:1e:82:a3:67:
         f3:59:c3:1b:d9:bb:37:54:cc:e8:c4:3c:ea:ba:34:95:79:c7:
         20:21:54:82:3e:3c:3a:e6:a8:dd:81:33:a3:e4:e8:da:d3:57:
         dc:9e:d6:11:cc:bd:80:71:f2:ea:21:ac:ab:d0:b5:1a:b1:8a:
         1c:e8:f2:4e:9a:27:6c:e7:f2:84:03:71:f3:0c:a8:9d:9a:2c:
         55:ea:41:87:3a:75:f2:ba:70:7b:6a:14:e2:62:e6:98:bf:bc:
         44:19:47:89:f7:f5:e0:ac:7f:3a:e5:69:c8:ea:1b:4a:31:9c:
         44:1c:e7:ac:f4:a8:09:f6:2f:8d:f8:b3:08:28:12:9e:be:95:
         3f:c9:90:ab:4c:c2:3c:6f:aa:25:3f:1f:07:de:21:39:f7:9e:
         ad:38:78:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 8 14:59:52 2024 by rpki-client on console-ams.rpki-client.org