Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
File: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer (raw, json)
Hash identifier: 2Kdpb222jT9hVy2JKq3PLHXLRanWu1nFP2IkcRvZH9s=
Subject key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5016A5299D63855F1545CDDAA793F5859B9C8ADE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 31 Jul 2023 03:39:51 +0000
Certificate not after: Mon 29 Jul 2024 03:44:51 +0000
Subordinate resources: IP: 103.31.156.0/22
IP: 103.234.216.0/23
IP: 103.234.219.0/24
IP: 112.78.96.0/21
IP: 114.31.240.0/21
IP: 114.110.40.0/21
IP: 114.134.72.0/21
IP: 115.178.120.0/21
IP: 116.66.200.0/21
IP: 116.254.120.0/21
IP: 117.103.8.0/21
IP: 182.23.160.0/20
IP: 202.87.176.0/20
IP: 203.191.40.0/21
IP: 223.27.144.0/20
IP: 2401:2400::/32
IP: 2402:3700::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 May 2024 17:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:16:a5:29:9d:63:85:5f:15:45:cd:da:a7:93:f5:85:9b:9c:8a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 31 03:39:51 2023 GMT
Not After : Jul 29 03:44:51 2024 GMT
Subject: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:77:53:cb:4c:c3:05:03:54:5f:4d:75:d9:
55:e1:6f:cf:ab:ac:16:9c:e7:d7:fa:08:07:d4:99:
6d:a1:43:78:c5:62:88:53:44:1f:98:bc:0a:a5:f3:
2a:5e:18:b9:b7:7a:b6:9f:29:87:30:50:1b:55:55:
59:18:8c:ca:c3:e3:5c:69:3e:ff:70:95:72:c7:fe:
85:45:78:79:0f:a3:7b:c4:15:bc:b5:24:78:ba:d9:
bd:bd:ce:22:e2:fe:6e:38:0f:53:b1:31:e5:8a:1d:
99:c1:1b:4a:25:00:b2:51:9d:58:9d:6d:a0:e8:7c:
0b:00:09:54:51:b5:0a:55:64:8c:38:1d:b8:a8:81:
f7:f1:2d:97:66:fe:94:40:e5:7d:c6:42:b9:1f:f9:
97:61:b5:40:cd:31:ac:8a:fc:36:72:e2:39:f3:b7:
cb:30:ff:d2:57:fc:87:98:8a:ed:24:6e:34:e9:b3:
79:0a:e0:d6:f3:74:35:cf:5a:df:8e:5c:e9:fb:37:
1f:94:59:7c:d2:6d:8e:00:29:98:4b:7f:8c:6e:18:
77:d6:f9:40:71:86:bb:4d:1c:18:2c:c7:0b:b0:f4:
b2:51:fa:e5:02:19:0b:3f:40:17:96:ad:56:35:c5:
8a:a2:25:30:a5:80:fd:d1:42:ae:d6:8f:93:dc:56:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.156.0/22
103.234.216.0/23
103.234.219.0/24
112.78.96.0/21
114.31.240.0/21
114.110.40.0/21
114.134.72.0/21
115.178.120.0/21
116.66.200.0/21
116.254.120.0/21
117.103.8.0/21
182.23.160.0/20
202.87.176.0/20
203.191.40.0/21
223.27.144.0/20
IPv6:
2401:2400::/32
2402:3700::/32
Signature Algorithm: sha256WithRSAEncryption
3a:3f:3e:af:8a:52:d7:0b:f1:ab:5a:a7:eb:5c:2c:49:49:01:
df:67:e9:7a:ec:07:4d:b4:b9:92:20:d0:11:8a:da:a8:da:59:
5a:60:b8:c5:7d:2b:2f:48:a2:ab:5a:d0:89:6a:55:3b:7c:b8:
f0:e2:30:31:f6:f7:d3:4f:d1:a5:ab:27:e2:35:28:aa:62:93:
85:40:b4:2c:2b:b3:a8:13:7a:dc:55:36:e9:ff:9e:bb:ad:fb:
a7:0d:dd:6e:95:70:e5:ef:31:d6:9a:1a:a2:80:96:4a:31:2b:
8b:d7:98:38:ac:b1:b5:32:96:f6:42:a8:d8:30:06:82:a4:66:
05:1d:32:cc:de:06:a4:26:ef:90:2e:dc:4e:f4:c0:ff:13:bd:
1c:ef:3e:b1:a4:76:69:05:77:8c:ca:69:0b:ff:af:45:a6:f8:
da:5d:2c:cf:05:e6:d6:b4:0e:4e:a5:9c:33:06:55:a6:87:17:
3d:2d:90:92:fd:9f:b9:9c:98:6b:41:6c:4f:a3:e1:3a:7e:3d:
c6:c8:a8:a0:c8:fa:48:b0:8f:bb:20:fc:a9:89:3e:26:0e:68:
f8:f0:55:c2:ec:67:3f:38:a9:fc:be:37:a5:b3:32:bf:5d:f6:
09:cc:5f:03:1c:c5:58:a4:cd:2f:41:3d:d1:f6:d1:30:1b:61:
6b:a0:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 14:59:52 2024 by rpki-client on console-ams.rpki-client.org