Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
File:                     619EF55758C22775EDCEBA183A59715E1452FD8B.cer (raw, json)
Hash identifier:          o5Pe/TC0N2dnYJ++jiomD1LFmmjzT0RBqorhncqGFhQ=
Subject key identifier:   61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       34FFC9D78B022E2A69968449F8FC02D21C3109E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Aug 2024 20:57:25 +0000
Certificate not after:    Tue 26 Aug 2025 21:02:25 +0000
Subordinate resources:    IP: 103.184.183.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ff:c9:d7:8b:02:2e:2a:69:96:84:49:f8:fc:02:d2:1c:31:09:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 27 20:57:25 2024 GMT
            Not After : Aug 26 21:02:25 2025 GMT
        Subject: CN=619EF55758C22775EDCEBA183A59715E1452FD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:1c:71:70:88:8a:ec:a0:f0:bd:30:ad:cf:
                    ad:76:9e:81:da:ce:cd:46:9b:93:74:db:09:3a:01:
                    a2:11:38:15:d1:dc:fd:34:f8:ab:38:4f:ed:70:59:
                    a1:04:fe:a0:13:91:04:c5:51:48:fb:aa:4d:25:6f:
                    c1:d2:fe:b4:7e:27:67:6f:f1:ef:b6:35:d1:be:8b:
                    e8:b2:d3:91:ae:d0:21:40:06:c1:23:5e:52:9a:2f:
                    51:ac:03:f8:dc:5b:5b:ec:49:7e:e1:9e:0f:78:27:
                    39:ee:c6:5f:5f:40:fb:ce:2c:40:26:d6:46:1c:58:
                    5d:1b:92:e9:48:ca:78:60:66:d0:72:e7:6f:d8:62:
                    89:30:78:ee:d1:e2:67:45:ce:f7:25:5c:b5:35:f1:
                    99:49:dc:94:d3:33:bd:11:0f:b4:f7:3e:00:3c:1f:
                    27:54:6b:fc:fc:ac:92:be:f7:85:f1:0f:ef:98:aa:
                    c3:de:d4:17:fc:96:18:bc:5e:81:6d:a9:7e:af:1c:
                    30:a4:e4:99:f2:a7:9f:00:5e:28:f2:09:f2:82:bf:
                    e6:54:87:ec:3b:d2:6d:e4:7c:44:a2:28:cc:ee:cd:
                    45:86:75:68:6c:bc:1e:20:91:9d:ea:a4:9e:d7:7f:
                    6f:9c:73:01:2c:27:4b:f1:a6:8f:0d:47:ec:9b:ac:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:e6:ae:f7:77:0f:9d:93:66:41:84:ef:08:72:40:0f:7d:c8:
         0c:16:86:b8:6e:ec:6f:34:d5:d7:71:d4:80:ac:e2:97:46:49:
         60:c6:b3:bc:15:4f:cb:bb:6d:ee:62:89:f3:7c:fd:fa:88:2f:
         ff:cf:cf:cd:fb:8f:99:58:f4:61:a1:b0:54:c3:12:28:4e:4c:
         63:3f:32:18:60:99:ca:d4:35:74:5e:eb:bb:35:49:35:ce:9a:
         a0:b0:03:2b:df:62:2e:44:4b:3d:f1:8f:f3:55:89:24:44:6c:
         ef:c6:87:c7:db:f7:a4:7a:69:2d:6e:32:20:d6:9d:60:4c:88:
         4d:cd:09:22:4d:33:12:af:99:9b:70:cd:2b:21:f9:c6:e2:09:
         93:3c:26:06:55:55:05:5d:b4:e8:30:68:22:11:87:4d:02:d7:
         d1:85:89:1f:41:ab:0a:72:ab:7f:c3:c8:e6:a9:e6:06:ef:d7:
         96:5d:25:5e:ce:fe:3b:74:ea:d7:eb:f1:ee:e0:af:e8:28:7f:
         19:dd:f5:b9:d3:37:f2:67:5f:ca:b5:09:82:4e:67:f8:b5:fb:
         6f:46:47:b3:3f:66:58:e4:0f:0d:96:cb:8e:db:d8:62:cd:02:
         40:c3:74:79:9d:13:51:ce:92:ee:1d:b6:2d:a5:09:14:13:b5:
         60:67:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:18 2024 by rpki-client on console-fra.rpki-client.org