Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
File:                     6189E4F67BE53DF65282F8E1BB63165CCA784862.cer (raw, json)
Hash identifier:          ol7W+C2GhsmDuLyLY2xwv8+0kvt5EM4wxbqQ0Q31ZAM=
Subject key identifier:   61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D24B5F45D11DE97E77316F4D57CC723A8EF26F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 May 2024 02:02:00 +0000
Certificate not after:    Thu 01 May 2025 02:07:00 +0000
Subordinate resources:    IP: 103.70.92.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 13:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:24:b5:f4:5d:11:de:97:e7:73:16:f4:d5:7c:c7:23:a8:ef:26:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  2 02:02:00 2024 GMT
            Not After : May  1 02:07:00 2025 GMT
        Subject: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:7b:53:cc:18:36:a5:ec:e9:5c:0f:dd:4e:
                    1a:94:f6:ae:2b:d0:84:36:35:7c:c8:8b:42:ef:e2:
                    ee:45:09:a3:6f:8d:0d:43:7d:ad:23:2e:b3:24:be:
                    77:51:1f:fa:82:f3:35:7d:6e:54:23:94:e1:4b:01:
                    e2:a1:a4:44:58:97:73:7a:9d:22:ec:94:81:5f:a2:
                    0b:c5:1c:df:60:b9:22:f0:67:25:72:9c:75:8a:80:
                    b5:52:64:cb:8e:b2:6d:07:d2:77:94:b6:c3:25:1b:
                    82:e8:5b:14:7f:db:8d:6d:2f:20:ef:85:52:ae:96:
                    fc:de:ae:34:cd:cf:76:e8:61:14:f5:05:f7:1e:9e:
                    45:45:ae:8d:97:38:ed:79:46:bd:6c:3c:ad:38:3c:
                    7d:21:7d:5b:85:43:3f:80:9f:8e:de:f1:dc:9d:c9:
                    4e:24:b1:b2:4c:67:ee:df:06:46:90:06:d2:7b:70:
                    4f:a8:3f:3b:29:31:71:f8:0a:f0:90:5d:2b:99:60:
                    0b:71:5e:99:ce:41:6d:f5:8e:39:e6:35:a9:3e:f8:
                    12:06:3d:b5:c8:d1:ba:be:e5:96:44:18:a8:69:05:
                    73:63:18:24:79:89:b9:10:44:e8:be:06:76:08:84:
                    04:4b:e9:cb:13:26:92:cf:1f:28:6b:fc:e4:54:ff:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:f5:75:b0:d9:d2:72:17:db:19:e5:5b:c4:86:0f:f6:fa:
         c8:d5:2b:a3:30:8a:9c:d3:e4:7e:d6:4b:f0:d2:83:76:18:78:
         c7:0f:ee:38:a8:26:28:23:c0:da:28:f1:11:e6:64:00:aa:a3:
         9b:a4:17:41:ca:ec:46:7e:22:64:2d:4f:bb:48:3e:f5:e2:28:
         61:06:fc:29:82:80:0f:74:77:b9:ac:c6:94:09:50:82:f4:4b:
         50:4a:49:90:d7:5d:22:9e:ec:bd:8c:7d:f5:36:88:22:4a:dc:
         95:cf:d0:b5:d2:ba:d0:8b:10:f5:b4:5c:19:f7:43:87:00:b1:
         6f:4c:31:6a:89:da:18:a6:de:05:d4:19:eb:6e:c8:fa:ce:1a:
         e4:55:42:d0:ea:d0:2b:e8:2d:71:fd:39:2f:1a:99:35:53:ac:
         3a:08:d9:aa:70:d1:d8:36:d5:a4:12:ff:3e:41:2e:7f:c7:9a:
         5e:68:e4:e5:b5:ad:c9:c2:4b:ca:29:38:b6:1b:a1:f0:e7:f4:
         9f:64:bc:3b:44:3a:81:2d:f4:27:8c:1b:bf:2d:af:d4:03:4d:
         91:d4:bf:0c:55:51:4b:fd:09:07:1d:41:60:01:49:f9:23:5a:
         1e:a1:1a:f8:eb:4e:82:0e:66:ae:02:fa:6c:88:b8:22:9b:c5:
         64:3f:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:06:48 2024 by rpki-client on console-ams.rpki-client.org