Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
File: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer (raw, json)
Hash identifier: oXgx7MNfLrZxzsCijMzCNZmQ9wrjU/RT/6zpyf+wDmU=
Subject key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4AEF58BE2EB5732E0134495F3FF1C0461E94364F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 17:00:58 +0000
Certificate not after: Mon 30 Jun 2025 17:05:58 +0000
Subordinate resources: IP: 103.31.156.0/22
IP: 103.234.216.0/23
IP: 103.234.219.0/24
IP: 112.78.96.0/21
IP: 114.31.240.0/21
IP: 114.110.40.0/21
IP: 114.134.72.0/21
IP: 115.178.120.0/21
IP: 116.66.200.0/21
IP: 116.254.120.0/21
IP: 117.103.8.0/21
IP: 182.23.160.0/20
IP: 202.87.176.0/20
IP: 203.191.40.0/21
IP: 223.27.144.0/20
IP: 2401:2400::/32
IP: 2402:3700::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 22:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ef:58:be:2e:b5:73:2e:01:34:49:5f:3f:f1:c0:46:1e:94:36:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 1 17:00:58 2024 GMT
Not After : Jun 30 17:05:58 2025 GMT
Subject: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:77:53:cb:4c:c3:05:03:54:5f:4d:75:d9:
55:e1:6f:cf:ab:ac:16:9c:e7:d7:fa:08:07:d4:99:
6d:a1:43:78:c5:62:88:53:44:1f:98:bc:0a:a5:f3:
2a:5e:18:b9:b7:7a:b6:9f:29:87:30:50:1b:55:55:
59:18:8c:ca:c3:e3:5c:69:3e:ff:70:95:72:c7:fe:
85:45:78:79:0f:a3:7b:c4:15:bc:b5:24:78:ba:d9:
bd:bd:ce:22:e2:fe:6e:38:0f:53:b1:31:e5:8a:1d:
99:c1:1b:4a:25:00:b2:51:9d:58:9d:6d:a0:e8:7c:
0b:00:09:54:51:b5:0a:55:64:8c:38:1d:b8:a8:81:
f7:f1:2d:97:66:fe:94:40:e5:7d:c6:42:b9:1f:f9:
97:61:b5:40:cd:31:ac:8a:fc:36:72:e2:39:f3:b7:
cb:30:ff:d2:57:fc:87:98:8a:ed:24:6e:34:e9:b3:
79:0a:e0:d6:f3:74:35:cf:5a:df:8e:5c:e9:fb:37:
1f:94:59:7c:d2:6d:8e:00:29:98:4b:7f:8c:6e:18:
77:d6:f9:40:71:86:bb:4d:1c:18:2c:c7:0b:b0:f4:
b2:51:fa:e5:02:19:0b:3f:40:17:96:ad:56:35:c5:
8a:a2:25:30:a5:80:fd:d1:42:ae:d6:8f:93:dc:56:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.156.0/22
103.234.216.0/23
103.234.219.0/24
112.78.96.0/21
114.31.240.0/21
114.110.40.0/21
114.134.72.0/21
115.178.120.0/21
116.66.200.0/21
116.254.120.0/21
117.103.8.0/21
182.23.160.0/20
202.87.176.0/20
203.191.40.0/21
223.27.144.0/20
IPv6:
2401:2400::/32
2402:3700::/32
Signature Algorithm: sha256WithRSAEncryption
57:b0:53:43:f2:b0:63:64:1f:93:4c:8f:0d:1d:97:ea:3c:26:
7e:8a:77:8f:70:51:2d:21:fb:a8:a1:5f:f1:bf:01:45:fe:7a:
9c:7f:2d:a5:91:6b:33:40:93:d7:3d:3d:14:75:1f:c0:3a:77:
dc:6f:bf:43:31:a9:a9:46:f4:a0:c1:d6:a6:c3:89:09:73:84:
d6:b2:7e:9b:02:71:b9:de:4f:0a:83:92:a4:41:8c:95:59:9d:
69:d8:54:12:ae:5d:70:f8:3e:77:05:9f:47:94:0d:9c:ca:41:
df:23:93:52:ff:e5:a1:c7:f4:2e:41:c7:88:23:15:8e:91:93:
d0:e5:7f:12:85:ed:65:61:1b:b7:b5:e7:04:a0:f2:c5:e4:7d:
08:ce:2a:bf:a1:41:b1:36:d8:38:f1:60:73:67:de:ca:59:59:
f0:07:08:be:48:11:ba:31:c6:03:63:33:c8:db:d8:81:0a:33:
aa:0d:4d:c5:83:b3:ad:a2:d6:95:78:4d:07:67:e2:3d:fa:f1:
2e:e0:36:71:9a:c3:2f:21:bc:95:0a:6f:f8:8f:de:de:14:8d:
76:8a:1a:36:c4:04:d2:78:67:65:14:1c:c8:52:39:ef:f2:f7:
16:c2:f1:ec:01:84:90:da:c9:29:5b:6b:76:1b:c4:b0:68:fa:
b6:4a:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:22 2024 by rpki-client on console-ams.rpki-client.org