Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
File:                     61566F205F7037962069571320603B274357CC6D.cer (raw, json)
Hash identifier:          n+u3H55cdLjo74jqsnuQKlVi97t7IGn019Zjos2sKAU=
Subject key identifier:   61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       08CD4DC4BEA6E9C8BD4D860FEA89C58FAFFA4D8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Sep 2024 21:42:21 +0000
Certificate not after:    Tue 02 Sep 2025 21:47:21 +0000
Subordinate resources:    IP: 27.124.80.0 -- 27.124.82.255
                          IP: 27.124.84.0 -- 27.124.95.255
                          IP: 43.240.224.0/23
                          IP: 103.3.76.0/22
                          IP: 103.18.34.0/23
                          IP: 103.25.109.0 -- 103.25.111.255
                          IP: 103.26.4.0/22
                          IP: 103.42.40.0/22
                          IP: 103.47.228.0/23
                          IP: 103.55.220.0/22
                          IP: 103.101.22.0/23
                          IP: 103.121.238.0/23
                          IP: 103.206.240.0/22
                          IP: 103.210.230.0/23
                          IP: 103.215.178.0/23
                          IP: 103.248.219.0/24
                          IP: 103.253.86.0/23
                          IP: 119.47.91.0/24
                          IP: 119.252.160.0/20
                          IP: 121.100.16.0/21
                          IP: 124.158.160.0/20
                          IP: 157.119.56.0/22
                          IP: 163.53.184.0/22
                          IP: 182.48.160.0/19
                          IP: 202.57.17.0 -- 202.57.18.255
                          IP: 202.57.22.0/23
                          IP: 202.62.8.0/22
                          IP: 202.146.48.0/20
                          IP: 202.162.208.0/20
                          IP: 203.89.146.0/23
                          IP: 220.247.168.0/21
                          IP: 2400:4a00::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cd:4d:c4:be:a6:e9:c8:bd:4d:86:0f:ea:89:c5:8f:af:fa:4d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  3 21:42:21 2024 GMT
            Not After : Sep  2 21:47:21 2025 GMT
        Subject: CN=61566F205F7037962069571320603B274357CC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:af:89:10:c9:c9:c2:1d:60:f1:41:dc:61:
                    86:21:3f:7b:03:c9:b9:01:e4:6d:8f:de:18:4b:37:
                    9d:c1:66:18:5c:2f:aa:41:23:ed:83:f1:33:2f:15:
                    ff:ec:51:31:6e:63:56:71:bb:c3:04:20:d3:dc:bc:
                    07:df:00:91:2a:f8:38:e0:ab:81:98:80:45:36:de:
                    7a:8b:46:57:88:4e:a7:ce:26:ce:c6:a2:27:5b:66:
                    b3:f6:25:04:98:b1:12:18:37:77:cd:c9:fa:76:60:
                    71:4e:bd:6a:15:71:dc:d3:5e:13:31:1d:0c:60:87:
                    fe:f5:f9:3b:ff:43:58:8b:25:be:c1:68:2b:89:86:
                    13:98:72:72:19:7f:e8:90:f1:8d:85:06:4c:2c:80:
                    df:cc:51:fe:5f:00:91:f3:a7:c2:57:88:a4:c0:43:
                    15:40:d6:72:4e:db:ec:99:f1:e3:32:66:8a:db:9c:
                    9a:d2:15:38:71:ad:e1:59:95:27:d6:d6:e0:96:2a:
                    21:51:a3:16:cd:77:86:71:01:60:73:e6:18:4b:fe:
                    35:16:8b:1f:ff:06:b8:76:87:cd:f6:5a:15:f4:e6:
                    09:d2:bb:40:46:df:18:1b:24:87:46:4f:f6:b8:76:
                    c9:2c:8f:c6:b7:c4:dd:fc:2a:a2:8b:59:eb:bb:14:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.80.0-27.124.82.255
                  27.124.84.0-27.124.95.255
                  43.240.224.0/23
                  103.3.76.0/22
                  103.18.34.0/23
                  103.25.109.0-103.25.111.255
                  103.26.4.0/22
                  103.42.40.0/22
                  103.47.228.0/23
                  103.55.220.0/22
                  103.101.22.0/23
                  103.121.238.0/23
                  103.206.240.0/22
                  103.210.230.0/23
                  103.215.178.0/23
                  103.248.219.0/24
                  103.253.86.0/23
                  119.47.91.0/24
                  119.252.160.0/20
                  121.100.16.0/21
                  124.158.160.0/20
                  157.119.56.0/22
                  163.53.184.0/22
                  182.48.160.0/19
                  202.57.17.0-202.57.18.255
                  202.57.22.0/23
                  202.62.8.0/22
                  202.146.48.0/20
                  202.162.208.0/20
                  203.89.146.0/23
                  220.247.168.0/21
                IPv6:
                  2400:4a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:8d:15:2a:2b:c5:63:01:e0:b8:49:94:ec:ce:13:6a:e2:
         6a:0b:01:81:ab:02:f3:ab:73:85:14:7d:0b:fa:11:0f:03:d4:
         65:e4:f9:3e:a9:04:0d:db:82:37:51:7e:78:b8:d4:d0:2a:ee:
         be:21:2c:10:8c:4b:3d:f0:20:a0:10:ad:51:34:b3:31:2f:c8:
         5f:03:62:da:45:fd:30:89:72:35:19:ad:38:0c:d4:4c:cc:ae:
         41:88:e5:3c:06:fd:7e:16:8f:69:67:31:a0:96:6d:92:91:cf:
         ac:f8:70:bd:d5:f9:8a:9a:ee:8a:ca:17:ea:4d:95:51:a1:a4:
         67:09:8a:31:ab:2d:6d:b6:19:4f:5d:4f:08:bc:d1:4e:6f:45:
         1a:e7:fc:e3:53:23:07:24:85:22:aa:9d:7b:9d:bf:e2:51:a1:
         cc:98:f6:86:78:6f:b2:75:9f:59:26:fc:ab:e5:66:ef:f5:84:
         eb:bd:1f:31:c6:ca:8e:7a:8b:5c:c2:45:87:3d:22:c1:af:d3:
         2f:09:12:17:f7:cf:72:01:6d:78:28:c2:15:f6:72:f8:39:9b:
         da:ac:a5:28:64:0e:e0:d4:a4:fe:9c:97:c2:9b:26:e1:c2:fc:
         62:83:ce:dc:c1:68:c2:b3:3c:74:25:f5:15:16:b9:28:74:07:
         be:36:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org