Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
File:                     62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer (raw, json)
Hash identifier:          pLQicyP2FUy8BRrkGKfqi2j6gvZSFU70G8jYKEqeaFI=
Subject key identifier:   62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       30652F74C64AE5649FA53551A3B63E6630500E4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 28 Oct 2023 09:39:09 +0000
Certificate not after:    Sat 26 Oct 2024 09:44:09 +0000
Subordinate resources:    IP: 103.155.28.0/24
                          IP: 2001:df4:ad80::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:2f:74:c6:4a:e5:64:9f:a5:35:51:a3:b6:3e:66:30:50:0e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 28 09:39:09 2023 GMT
            Not After : Oct 26 09:44:09 2024 GMT
        Subject: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:e3:fa:20:bb:ad:08:03:46:f0:a8:19:1f:
                    68:6d:22:b2:d3:e8:e3:44:ba:a9:3a:53:9d:a5:d6:
                    b5:13:44:d3:23:37:40:52:31:7c:1f:e2:0a:da:57:
                    bf:55:a3:a2:5e:d1:db:08:c3:b9:3b:fd:7e:31:5a:
                    2b:51:41:8d:2c:54:26:ba:c5:df:b1:31:bf:f8:f6:
                    28:04:91:3f:47:07:38:71:9c:52:fd:b4:38:11:5d:
                    a0:97:14:19:18:a1:da:2c:6c:ff:96:2b:20:a0:92:
                    e5:1e:50:a0:4d:28:14:24:a3:14:2b:2a:ed:0e:75:
                    9e:13:a5:eb:78:b2:14:e0:a3:ce:5d:f2:de:76:2f:
                    1a:fc:1e:d4:8c:48:a5:e3:1b:d4:f9:18:e6:fb:aa:
                    4f:6f:80:54:ea:7f:e8:78:8b:a2:cb:d8:cb:3f:43:
                    cd:cf:84:ae:29:83:5d:de:22:ba:8a:45:a3:21:e5:
                    0e:23:c2:cc:fe:25:a8:88:09:69:24:dd:af:bc:75:
                    6e:36:1e:e9:4b:a7:e5:fb:98:5b:a5:e4:9a:3a:66:
                    49:70:e7:de:0d:32:80:05:97:e9:04:2f:16:e7:a7:
                    bc:0a:94:ac:55:2b:51:c8:32:46:b7:17:17:22:97:
                    6f:06:97:7c:f8:32:64:46:25:c1:98:23:e7:ad:13:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.28.0/24
                IPv6:
                  2001:df4:ad80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:6a:28:ee:c9:67:5b:e3:c6:47:e0:f3:56:ac:95:8e:e9:
         cd:da:9d:8b:c5:b4:be:a0:de:be:c4:5d:0c:73:0e:b6:ad:e0:
         fe:a4:57:c8:ea:f1:3c:a0:60:fb:fe:92:17:17:3e:8c:0d:66:
         33:2a:0f:5b:06:19:51:8d:96:b8:94:f0:5c:a8:70:f2:c9:20:
         d8:ec:2f:82:4d:93:ac:af:b6:06:8d:be:3e:64:fd:fd:5b:b7:
         08:fb:9c:ba:93:0a:96:b4:6f:9a:cf:97:ab:ff:74:a6:3e:77:
         25:c7:83:ae:41:a0:a3:45:5e:55:ce:85:3b:b3:dd:fe:fd:d3:
         22:29:27:62:32:cd:53:5d:09:c8:d1:93:08:e1:e4:30:b8:db:
         fd:18:1c:8a:6c:cf:ff:03:1d:8e:06:75:85:db:75:51:e3:33:
         e5:5e:61:4a:96:36:eb:9c:34:ec:05:9c:8b:b1:f5:91:18:e6:
         9c:fb:20:d2:54:57:36:9e:b4:e8:8c:0e:d2:9c:fa:02:ff:1a:
         04:a5:b9:fa:78:09:bc:f4:9a:e7:a7:7e:9a:53:a5:e1:c8:b8:
         69:76:b3:d4:52:82:b5:31:5e:e1:9e:7a:bf:76:2f:8f:59:a2:
         73:6d:88:e3:a4:93:92:1a:11:3b:13:7c:87:b5:40:27:fd:e1:
         74:5c:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:02:15 2024 by rpki-client on console-fra.rpki-client.org