Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
File:                     6592459773B9BF90E892EF4DE9361A991482809F.cer (raw, json)
Hash identifier:          BcbMd3DnE0jlIHch2X2jAsElTXi2wuXrjymsWX1RETg=
Subject key identifier:   65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6DC2A858BC06DDCD873B9E2A0EB24A3BA04CF165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Jun 2024 11:07:34 +0000
Certificate not after:    Fri 06 Jun 2025 11:12:34 +0000
Subordinate resources:    IP: 103.211.106.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c2:a8:58:bc:06:dd:cd:87:3b:9e:2a:0e:b2:4a:3b:a0:4c:f1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  7 11:07:34 2024 GMT
            Not After : Jun  6 11:12:34 2025 GMT
        Subject: CN=6592459773B9BF90E892EF4DE9361A991482809F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:b2:94:3b:58:c9:58:3f:94:f4:4e:44:04:
                    78:07:91:ab:f0:0a:2f:87:dd:b5:2c:cf:d7:8a:07:
                    9c:87:62:bf:ae:b2:ac:72:dc:35:45:11:f8:64:7d:
                    7f:75:e7:75:3d:b2:de:1c:4c:d7:06:76:fa:80:60:
                    a7:89:0e:dd:ed:9b:3a:42:75:d0:1f:c4:59:f1:8a:
                    65:6e:9f:94:b6:d0:9a:c4:12:05:37:13:1d:dc:19:
                    06:2f:8e:58:f4:ae:52:d7:45:d1:0e:b9:cb:6a:b5:
                    76:01:1a:59:de:b5:8e:cf:0a:b1:ff:49:c6:f3:d4:
                    02:f1:cd:0f:54:c3:47:09:6a:47:78:bc:24:78:eb:
                    c2:ee:4f:f3:fe:41:35:de:28:09:5c:e5:c2:ee:6f:
                    09:fd:55:fa:44:93:82:f4:63:03:3c:13:17:fc:55:
                    4f:c1:44:42:e0:ac:bd:a8:59:24:bf:87:d1:20:bc:
                    2b:86:36:87:18:0c:3a:0e:9c:d1:5d:36:9f:20:01:
                    ee:76:e8:d5:9d:c5:98:ec:44:28:31:4e:60:da:98:
                    a6:83:d6:19:b9:07:27:99:c1:fa:27:d0:54:9d:6c:
                    db:1d:8d:cf:c4:f5:dd:d9:20:37:07:5b:4c:df:9b:
                    b7:6d:5c:02:4b:d8:4a:20:2b:53:d2:c9:dd:fa:b5:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:53:f7:ec:94:8b:1a:c9:27:26:f6:43:99:12:94:c4:51:
         53:b3:c5:82:7d:83:1b:d6:72:05:89:74:35:4c:e8:99:15:e3:
         dc:6c:3c:71:b9:de:0f:22:80:64:4d:b6:44:7f:b2:bb:e9:00:
         da:3b:98:74:2c:32:02:75:c8:b7:7c:ee:3e:d1:a8:51:97:9c:
         38:29:9a:7f:3f:7d:d9:b8:fc:57:90:29:62:24:2c:ab:f2:38:
         2d:df:2f:28:a1:45:98:86:c5:20:9a:da:25:1a:2e:ee:03:80:
         e7:f8:f2:2f:d8:eb:35:e6:ff:df:20:ce:0d:3c:b8:c7:b4:0e:
         0b:90:cd:e2:a3:a9:52:f8:d3:08:5b:64:69:40:d0:19:88:bf:
         cb:bc:af:20:5b:8d:d6:08:a3:7e:96:dc:87:11:e2:87:19:0c:
         c9:2f:8e:04:d0:9a:db:f9:c7:87:15:db:f0:77:38:dd:d9:4f:
         e3:0f:76:3d:f8:0e:cc:ec:9e:bd:92:e0:2b:f3:5d:98:76:5f:
         be:05:e0:ea:c1:51:f4:6d:7d:63:fb:a2:8c:f7:9f:4f:af:e1:
         96:14:04:f9:bf:19:cd:ac:de:52:e4:0d:5d:4a:cb:b9:3e:6d:
         bb:bf:6d:a3:d8:e5:3f:ed:a5:9e:45:f9:e6:ca:79:15:59:d4:
         02:02:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:18 2024 by rpki-client on console-fra.rpki-client.org