Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer
File:                     6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer (raw, json)
Hash identifier:          tWoVbVixiCThi5KhQISAEpOkV9KIEQSr13aP9gxIMBw=
Subject key identifier:   63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2EE2E950D34FEF3F7AAFBDD83A0AF3B08859253B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 20:42:37 +0000
Certificate not after:    Mon 30 Jun 2025 20:47:37 +0000
Subordinate resources:    IP: 103.226.232.0/22
                          IP: 2400:b180::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e2:e9:50:d3:4f:ef:3f:7a:af:bd:d8:3a:0a:f3:b0:88:59:25:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 20:42:37 2024 GMT
            Not After : Jun 30 20:47:37 2025 GMT
        Subject: CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:fd:20:cb:6e:32:e1:e1:5e:1d:aa:3b:49:
                    f3:ee:26:c5:38:51:93:39:0c:1f:f1:4d:6c:7f:7e:
                    eb:8f:ca:21:f7:af:83:34:98:52:44:14:e9:43:3b:
                    f0:28:32:7d:7c:8f:73:71:5c:01:9e:5e:a4:9b:e3:
                    24:54:b6:d9:a7:47:5b:8b:d6:a9:d9:ea:d3:38:05:
                    bf:88:94:ff:fb:d0:40:87:e8:28:ab:0e:37:83:1d:
                    7c:83:8b:a3:5f:8f:28:ee:89:38:26:b9:95:6d:d5:
                    96:c3:24:5d:f0:05:66:65:74:94:37:99:36:ca:73:
                    bf:7e:92:81:4f:90:a8:c5:c8:a3:6b:4d:6f:98:23:
                    70:e4:ce:e2:fe:5f:59:bf:10:49:1a:e8:bd:5f:86:
                    12:62:18:fd:e2:64:6e:a4:fd:29:eb:6c:5d:5a:e9:
                    a2:14:74:51:f5:38:84:a1:dc:b0:1b:29:2e:f0:ab:
                    09:de:06:93:a3:1c:91:4d:6b:2b:2e:43:c1:d2:b8:
                    3a:6f:01:20:40:e4:31:ba:f4:f1:c8:91:7e:ce:63:
                    10:1f:1f:e8:12:4c:fe:35:32:68:51:cc:3b:66:fd:
                    a4:c8:5b:a8:05:a5:35:1b:c6:dc:3e:80:32:17:60:
                    35:de:ce:3c:a5:0c:6b:33:d6:5c:11:32:08:0c:4b:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.232.0/22
                IPv6:
                  2400:b180::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:4a:78:83:a5:11:b5:c0:66:74:6d:11:ef:9a:83:63:f8:97:
         32:d3:96:93:9f:a2:dc:29:96:6c:e1:7d:51:25:b4:b4:6d:5b:
         63:fe:6b:25:1c:6d:1c:e3:d8:9c:d6:98:98:51:31:70:36:f0:
         1b:54:b0:e4:95:35:f1:74:f2:9e:79:0e:9a:26:70:5b:b9:a5:
         a3:27:2b:4e:48:ea:78:ea:f1:d5:a3:7e:44:f8:58:5a:2e:1d:
         18:7a:0a:bd:66:34:83:fe:87:95:4a:3b:a2:4c:bf:a1:45:b9:
         25:6d:f8:2c:74:8e:d0:0c:8a:cb:38:4f:69:e7:d2:34:79:45:
         06:d1:16:be:52:17:d6:f0:06:1b:33:02:d2:76:82:a2:b8:4a:
         e0:79:f7:14:a1:93:3a:65:c2:b5:12:d3:d3:eb:8a:c4:da:8c:
         6d:1e:b1:92:53:e4:28:f6:3a:2e:26:ca:6f:1e:41:99:3d:d4:
         92:64:b2:7e:54:5e:03:a9:55:03:e0:99:fb:3f:1c:7d:4b:b8:
         f2:7b:f0:07:06:98:8d:51:54:18:a3:b5:f9:5e:3a:06:e2:2b:
         e9:b5:16:a9:e9:2a:64:9d:69:31:56:e4:e9:23:5f:aa:be:38:
         d5:ac:82:3a:e0:b9:9b:bb:e4:11:98:4d:a4:da:14:ed:ad:45:
         a6:8a:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:18 2024 by rpki-client on console-fra.rpki-client.org