Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
File:                     6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer (raw, json)
Hash identifier:          pl8Hg/iBcekrP7uAsvufcws5AXF9ah9BkccZj6Tp4tc=
Subject key identifier:   6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0495D9848E3065C6BEA9182055040CE5160A9878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 15:31:16 +0000
Certificate not after:    Mon 30 Jun 2025 15:36:16 +0000
Subordinate resources:    IP: 103.151.94.0/23
                          IP: 2001:df3:b880::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:95:d9:84:8e:30:65:c6:be:a9:18:20:55:04:0c:e5:16:0a:98:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 15:31:16 2024 GMT
            Not After : Jun 30 15:36:16 2025 GMT
        Subject: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:0a:35:5d:68:f9:4e:f5:2a:75:fc:fe:27:
                    fe:4b:6f:4e:91:00:7a:48:de:d8:eb:e4:d5:ca:db:
                    ae:37:30:7d:e0:4d:d3:73:b9:b5:0d:42:9f:f4:ce:
                    00:5a:30:af:a2:90:b4:55:f3:8f:90:91:d9:5e:88:
                    f2:85:2b:84:d9:76:d2:66:ea:98:fc:d0:42:6f:76:
                    5d:22:54:e4:54:a6:aa:8c:b4:79:ac:f2:c3:fe:96:
                    ba:d6:d8:f1:f0:02:8a:87:4b:4f:8c:2b:6b:cc:b1:
                    5d:2d:69:55:3c:23:5b:4b:d5:51:60:0e:7a:ff:4f:
                    b7:df:66:6a:ec:f2:41:3f:b6:c7:a2:73:b8:48:35:
                    8e:21:cf:41:54:f5:02:ea:78:ca:7c:6f:24:bd:27:
                    4d:2a:64:b8:41:48:c1:9c:7e:fa:65:78:7a:80:35:
                    a4:8c:05:93:f8:03:c1:37:d0:83:05:cf:5c:8d:d8:
                    b3:c6:c5:7f:a6:53:9a:34:6d:38:70:31:bb:40:4d:
                    a3:d3:07:5b:2e:44:e5:51:4f:8a:17:cf:06:cc:70:
                    29:2e:62:27:6e:90:c2:6e:15:10:e0:1b:50:d2:62:
                    0f:ca:88:a4:10:00:72:2a:70:98:b5:8a:92:54:f8:
                    8e:f5:32:12:13:3e:9f:14:17:d8:f8:18:3b:dc:d0:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.94.0/23
                IPv6:
                  2001:df3:b880::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:af:3a:68:3f:05:2c:40:e4:01:fd:a1:08:9e:07:37:3e:
         d9:26:be:86:07:b7:19:58:d6:b6:00:ea:7d:47:3f:82:8f:73:
         a9:f3:af:d7:c8:0c:5e:74:b7:c3:f9:20:cc:84:3a:cb:66:0e:
         3c:d0:8a:11:4a:49:f6:64:d1:24:d4:54:c5:8c:be:0a:30:b3:
         c4:7e:bc:c9:c6:11:97:6b:b5:c6:49:73:0b:7f:15:e2:96:48:
         0d:e8:57:63:e7:78:60:7f:49:39:7c:1e:71:a9:d6:1f:ce:26:
         dd:37:77:a1:a2:0e:01:40:1c:ea:8d:11:ae:c8:57:fe:57:35:
         72:d5:28:6b:cb:44:7c:c1:c5:66:9e:b7:24:68:1d:56:ae:9f:
         1e:2a:c8:2e:da:dd:e2:cb:a4:0f:d1:3e:51:32:0c:6a:8b:73:
         ef:ba:88:64:55:f3:f6:99:66:a9:5e:6a:db:d2:da:ae:13:e7:
         51:17:24:fd:ad:48:27:ee:51:fa:17:bf:32:a3:d4:94:fd:94:
         f3:97:c2:76:4f:b8:ae:34:a0:bf:fe:e3:64:26:ec:9f:25:9d:
         ab:a1:75:ac:16:78:6f:30:fd:1d:7e:72:db:0b:2f:2d:d8:15:
         98:02:9e:c5:e8:01:f9:6e:df:3b:4f:27:be:c3:bb:09:f4:2e:
         03:de:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org