Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
File:                     62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer (raw, json)
Hash identifier:          KzGgTugXDX0VtFhW7sC59QmRu6bQLHKUSi2lDvWyJOA=
Subject key identifier:   62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3F00463B98852432D247F558ABBD4F80A9B55153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 28 Sep 2024 22:54:36 +0000
Certificate not after:    Sat 27 Sep 2025 22:59:36 +0000
Subordinate resources:    IP: 103.155.28.0/24
                          IP: 2001:df4:ad80::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:00:46:3b:98:85:24:32:d2:47:f5:58:ab:bd:4f:80:a9:b5:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 28 22:54:36 2024 GMT
            Not After : Sep 27 22:59:36 2025 GMT
        Subject: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:e3:fa:20:bb:ad:08:03:46:f0:a8:19:1f:
                    68:6d:22:b2:d3:e8:e3:44:ba:a9:3a:53:9d:a5:d6:
                    b5:13:44:d3:23:37:40:52:31:7c:1f:e2:0a:da:57:
                    bf:55:a3:a2:5e:d1:db:08:c3:b9:3b:fd:7e:31:5a:
                    2b:51:41:8d:2c:54:26:ba:c5:df:b1:31:bf:f8:f6:
                    28:04:91:3f:47:07:38:71:9c:52:fd:b4:38:11:5d:
                    a0:97:14:19:18:a1:da:2c:6c:ff:96:2b:20:a0:92:
                    e5:1e:50:a0:4d:28:14:24:a3:14:2b:2a:ed:0e:75:
                    9e:13:a5:eb:78:b2:14:e0:a3:ce:5d:f2:de:76:2f:
                    1a:fc:1e:d4:8c:48:a5:e3:1b:d4:f9:18:e6:fb:aa:
                    4f:6f:80:54:ea:7f:e8:78:8b:a2:cb:d8:cb:3f:43:
                    cd:cf:84:ae:29:83:5d:de:22:ba:8a:45:a3:21:e5:
                    0e:23:c2:cc:fe:25:a8:88:09:69:24:dd:af:bc:75:
                    6e:36:1e:e9:4b:a7:e5:fb:98:5b:a5:e4:9a:3a:66:
                    49:70:e7:de:0d:32:80:05:97:e9:04:2f:16:e7:a7:
                    bc:0a:94:ac:55:2b:51:c8:32:46:b7:17:17:22:97:
                    6f:06:97:7c:f8:32:64:46:25:c1:98:23:e7:ad:13:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.28.0/24
                IPv6:
                  2001:df4:ad80::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:25:73:ab:e4:1a:e5:2e:3f:15:48:da:e9:ca:12:6b:05:e7:
         12:cc:54:0d:3e:3c:ab:f3:33:1b:0e:57:59:8a:60:ed:43:2f:
         2f:1e:d9:9f:33:ef:a2:1a:a1:cc:07:bd:ce:1b:0a:b4:82:d4:
         52:3f:c8:70:95:e0:58:6e:c7:f5:50:19:42:34:ca:0a:05:68:
         23:de:85:ea:d5:f9:e5:00:94:08:c8:70:dc:22:ab:a3:46:ed:
         47:e4:95:d3:29:5a:9a:40:79:02:59:a5:e6:30:e8:df:f5:9e:
         f7:86:5e:2d:91:68:37:9c:22:12:15:98:0e:e0:c9:94:aa:e4:
         c2:3f:f6:c8:29:24:c9:e4:09:06:a5:ef:e3:b5:ec:23:6c:3c:
         36:50:da:c8:ee:05:1d:13:c4:7e:9b:41:ae:f2:68:5b:9f:e8:
         db:4e:4e:6b:4b:c2:02:8f:32:ec:7a:14:31:12:6c:8a:2b:1c:
         04:77:b1:b3:36:35:09:42:b5:ac:15:f2:f4:59:26:da:d2:67:
         98:3a:68:0d:5c:80:80:41:94:86:4c:b7:67:58:ca:cd:ce:5b:
         11:0c:c5:31:a0:a0:a8:39:9c:1a:42:7e:6f:81:0e:3a:73:d3:
         71:91:4c:1c:69:0b:f5:12:a8:bc:00:d9:0f:10:c0:b8:11:2e:
         5f:23:07:f8
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUPwBGO5iFJDLSR/VYq71PgKm1UVMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyODIyNTQzNloX
DTI1MDkyNzIyNTkzNlowMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0
RDI4RjJDNUY3QjI1MkZDNDgwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9+4/ogu60IA0bwqBkfaG0istPo40S6qTpTnaXWtRNE0yM3QFIxfB/iCtpX
v1Wjol7R2wjDuTv9fjFaK1FBjSxUJrrF37Exv/j2KASRP0cHOHGcUv20OBFdoJcU
GRih2ixs/5YrIKCS5R5QoE0oFCSjFCsq7Q51nhOl63iyFOCjzl3y3nYvGvwe1IxI
peMb1PkY5vuqT2+AVOp/6HiLosvYyz9Dzc+ErimDXd4iuopFoyHlDiPCzP4lqIgJ
aSTdr7x1bjYe6Uun5fuYW6XkmjpmSXDn3g0ygAWX6QQvFuenvAqUrFUrUcgyRrcX
FyKXbwaXfPgyZEYlwZgj560TAHMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGLDW5rZHLW2pS9NKPLF97JS/EgOMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iMjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyN2IxMWMy
LWFiOTAtNDIwZi1iNDljLTNjYzMzMmViN2Q2NC8wLzYyQzM1QjlBRDkxQ0I1QjZB
NTJGNEQyOEYyQzVGN0IyNTJGQzQ4MEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABnmxwwDwQCAAIwCQMHACABDfStgDANBgkqhkiG9w0BAQsFAAOCAQEAlCVzq+Qa
5S4/FUja6coSawXnEsxUDT48q/MzGw5XWYpg7UMvLx7ZnzPvohqhzAe9zhsKtILU
Uj/IcJXgWG7H9VAZQjTKCgVoI96F6tX55QCUCMhw3CKro0btR+SV0ylamkB5Alml
5jDo3/We94ZeLZFoN5wiEhWYDuDJlKrkwj/2yCkkyeQJBqXv47XsI2w8NlDayO4F
HRPEfptBrvJoW5/o205Oa0vCAo8y7HoUMRJsiiscBHexszY1CUK1rBXy9Fkm2tJn
mDpoDVyAgEGUhky3Z1jKzc5bEQzFMaCgqDmcGkJ+b4EOOnPTcZFMHGkL9RKovADZ
DxDAuBEuXyMH+A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org