Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
File:                     6B35526165718CDFDDCB202D241332F565BEE7B0.cer (raw, json)
Hash identifier:          ucCkRoJ7zUkcZ+zwSVjc3vMsdMbYoUsPd1Ah4Caej30=
Subject key identifier:   6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6DC42F6915969C6F5C1928735D891BE476670577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 18:21:13 +0000
Certificate not after:    Fri 15 May 2026 18:26:13 +0000
Subordinate resources:    IP: 2001:df3:b040::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:2f:69:15:96:9c:6f:5c:19:28:73:5d:89:1b:e4:76:67:05:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 16 18:21:13 2025 GMT
            Not After : May 15 18:26:13 2026 GMT
        Subject: CN=6B35526165718CDFDDCB202D241332F565BEE7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:f4:e4:ac:54:79:5e:94:31:e5:c4:c5:91:
                    e0:9c:be:47:dd:9f:32:35:e5:f0:b6:1c:ab:d9:fc:
                    24:76:92:e7:b3:b2:1e:d6:f9:ad:90:a5:77:94:37:
                    a1:e6:02:b1:ca:c1:3b:91:68:82:8d:ca:39:c2:55:
                    b5:1c:5e:a8:39:ad:33:4a:0c:c6:36:62:89:97:0a:
                    67:d0:42:a7:f8:8e:6d:98:01:2d:03:17:1f:af:62:
                    47:c6:4c:50:7e:cd:f6:34:86:20:f8:bc:dd:b8:20:
                    b3:76:64:69:32:2d:a3:05:3b:5a:ce:e5:f8:66:4c:
                    be:d0:42:82:6c:5a:05:c7:d6:6e:8b:5c:08:b2:50:
                    92:3d:77:a4:1e:39:b8:4b:47:c3:b0:9e:13:6b:a2:
                    e1:a8:7a:a3:15:2e:57:49:10:d3:64:45:e8:ac:4f:
                    1b:71:33:12:72:03:fe:99:de:5f:6f:3a:1a:74:c5:
                    48:0f:ed:b8:b4:04:fc:7b:e6:2b:3b:c6:76:00:48:
                    31:bd:04:fb:8c:7c:08:fb:0d:2a:6b:46:5a:5b:78:
                    55:34:0b:7a:96:bb:72:ea:ee:f4:bf:d9:63:89:88:
                    a1:c9:5f:a4:17:21:ec:86:de:d7:b6:a5:ab:a4:90:
                    c1:fb:35:57:c4:a6:ca:8b:30:0f:5b:cc:70:22:74:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:b040::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:70:48:bf:d9:b6:f0:6f:5c:d1:eb:25:55:d0:cd:1f:e1:77:
         41:7a:e1:35:ce:cd:41:1a:e9:1b:e6:cf:c1:6e:94:c8:59:ae:
         e5:3e:5b:a5:a9:25:12:72:ac:d1:f6:f8:07:cf:12:21:5e:aa:
         c0:06:5e:39:6a:52:13:45:41:6a:15:44:89:0d:44:42:37:e2:
         3f:ab:02:17:9d:68:a3:1f:33:d2:80:1e:4d:6f:64:88:d3:bc:
         75:13:c8:66:f1:f8:d4:d6:11:2d:79:69:f9:53:79:9b:e4:ee:
         bd:7b:92:46:8a:d9:b6:99:71:bf:fc:ef:9c:78:b1:83:e4:bd:
         6d:fe:55:26:87:3d:c3:ff:f8:ad:eb:f8:16:ca:50:78:0d:4d:
         62:eb:9f:fe:cc:b4:6d:03:b2:f6:e3:89:b3:54:83:82:ff:0a:
         1c:65:da:be:b5:dd:e0:0f:4f:8a:e6:11:f4:40:0a:fd:1e:07:
         5c:c3:94:38:87:a1:63:74:18:f3:b8:1c:63:62:01:2d:4d:59:
         7a:aa:a9:60:24:1d:4e:10:f9:5e:e1:88:7d:34:97:dc:7b:90:
         63:7e:ed:3a:4b:67:07:63:d8:33:79:e3:31:6f:45:f1:58:17:
         b9:11:09:2c:c3:03:34:c4:96:c2:80:1a:14:fc:c7:85:83:6c:
         20:23:0c:b8
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUbcQvaRWWnG9cGShzXYkb5HZnBXcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxNjE4MjExM1oX
DTI2MDUxNTE4MjYxM1owMzExMC8GA1UEAxMoNkIzNTUyNjE2NTcxOENERkREQ0Iy
MDJEMjQxMzMyRjU2NUJFRTdCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN0o9OSsVHlelDHlxMWR4Jy+R92fMjXl8LYcq9n8JHaS57OyHtb5rZCld5Q3
oeYCscrBO5Fogo3KOcJVtRxeqDmtM0oMxjZiiZcKZ9BCp/iObZgBLQMXH69iR8ZM
UH7N9jSGIPi83bggs3ZkaTItowU7Ws7l+GZMvtBCgmxaBcfWbotcCLJQkj13pB45
uEtHw7CeE2ui4ah6oxUuV0kQ02RF6KxPG3EzEnID/pneX286GnTFSA/tuLQE/Hvm
KzvGdgBIMb0E+4x8CPsNKmtGWlt4VTQLepa7curu9L/ZY4mIoclfpBch7Ibe17al
q6SQwfs1V8SmyoswD1vMcCJ0U+ECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGs1UmFlcYzf3csgLSQTMvVlvuewMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9mODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMTCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y4N2RkNTk3
LTQwY2QtNDA5Yi1iM2M1LTI4NTJjZTAxNDg4OS8xLzZCMzU1MjYxNjU3MThDREZE
RENCMjAyRDI0MTMzMkY1NjVCRUU3QjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQ3zsEAwDQYJKoZIhvcNAQELBQADggEBAClwSL/ZtvBvXNHrJVXQzR/hd0F6
4TXOzUEa6Rvmz8FulMhZruU+W6WpJRJyrNH2+AfPEiFeqsAGXjlqUhNFQWoVRIkN
REI34j+rAhedaKMfM9KAHk1vZIjTvHUTyGbx+NTWES15aflTeZvk7r17kkaK2baZ
cb/875x4sYPkvW3+VSaHPcP/+K3r+BbKUHgNTWLrn/7MtG0DsvbjibNUg4L/Chxl
2r613eAPT4rmEfRACv0eB1zDlDiHoWN0GPO4HGNiAS1NWXqqqWAkHU4Q+V7hiH00
l9x7kGN+7TpLZwdj2DN54zFvRfFYF7kRCSzDAzTElsKAGhT8x4WDbCAjDLg=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:09:32 2025 by rpki-client