Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
File:                     6B35526165718CDFDDCB202D241332F565BEE7B0.cer (raw, json)
Hash identifier:          xBjY2a01x6suU9NNmt6oz5vvquMw5Z7pvJtJM6YhgMk=
Subject key identifier:   6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       71F9C9CBFF27D6132A6618A829CFE4EC06F282A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Jun 2024 04:32:40 +0000
Certificate not after:    Fri 13 Jun 2025 04:37:40 +0000
Subordinate resources:    IP: 2001:df3:b040::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f9:c9:cb:ff:27:d6:13:2a:66:18:a8:29:cf:e4:ec:06:f2:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 14 04:32:40 2024 GMT
            Not After : Jun 13 04:37:40 2025 GMT
        Subject: CN=6B35526165718CDFDDCB202D241332F565BEE7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:f4:e4:ac:54:79:5e:94:31:e5:c4:c5:91:
                    e0:9c:be:47:dd:9f:32:35:e5:f0:b6:1c:ab:d9:fc:
                    24:76:92:e7:b3:b2:1e:d6:f9:ad:90:a5:77:94:37:
                    a1:e6:02:b1:ca:c1:3b:91:68:82:8d:ca:39:c2:55:
                    b5:1c:5e:a8:39:ad:33:4a:0c:c6:36:62:89:97:0a:
                    67:d0:42:a7:f8:8e:6d:98:01:2d:03:17:1f:af:62:
                    47:c6:4c:50:7e:cd:f6:34:86:20:f8:bc:dd:b8:20:
                    b3:76:64:69:32:2d:a3:05:3b:5a:ce:e5:f8:66:4c:
                    be:d0:42:82:6c:5a:05:c7:d6:6e:8b:5c:08:b2:50:
                    92:3d:77:a4:1e:39:b8:4b:47:c3:b0:9e:13:6b:a2:
                    e1:a8:7a:a3:15:2e:57:49:10:d3:64:45:e8:ac:4f:
                    1b:71:33:12:72:03:fe:99:de:5f:6f:3a:1a:74:c5:
                    48:0f:ed:b8:b4:04:fc:7b:e6:2b:3b:c6:76:00:48:
                    31:bd:04:fb:8c:7c:08:fb:0d:2a:6b:46:5a:5b:78:
                    55:34:0b:7a:96:bb:72:ea:ee:f4:bf:d9:63:89:88:
                    a1:c9:5f:a4:17:21:ec:86:de:d7:b6:a5:ab:a4:90:
                    c1:fb:35:57:c4:a6:ca:8b:30:0f:5b:cc:70:22:74:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:b040::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:59:e1:04:60:80:09:89:4d:3a:cb:96:e5:78:92:e4:72:
         f5:82:46:78:d1:3e:de:93:89:62:37:eb:b7:bd:6b:28:52:29:
         a2:73:0d:a3:bc:2a:65:cc:53:19:47:2d:0a:85:bf:c5:c6:30:
         01:2c:ef:90:9e:2f:32:11:6a:01:1d:9a:84:5c:8a:a4:8d:f3:
         34:58:03:6d:1d:a2:c7:5b:85:fd:7c:9e:bd:bd:41:07:b2:56:
         fa:47:c3:e2:c1:f2:b8:fe:bc:0b:7a:0a:76:9b:fb:89:45:bc:
         ef:ae:1b:71:ca:e9:07:3e:78:8f:13:d5:6e:8f:0a:39:88:c0:
         b8:2a:d8:c4:f3:51:ce:3b:af:d6:30:bf:5c:b0:54:62:70:09:
         de:89:7a:50:b5:cf:1b:96:1d:6c:6c:c1:c2:66:11:c7:87:3c:
         f5:a1:34:b4:4f:a7:3f:43:26:56:38:87:18:a8:92:cf:72:7e:
         03:b7:de:3c:9a:2c:28:65:25:da:ec:a2:d3:ce:c6:d5:16:65:
         db:2f:29:7e:3b:2e:8c:5b:75:65:78:19:e8:46:bf:d0:57:a2:
         bb:89:d6:25:44:43:d6:f4:3a:04:56:2d:bf:a8:55:24:d7:31:
         6b:0f:72:36:35:38:d1:4b:89:e4:6d:ba:bb:f3:e3:b0:d2:c3:
         7a:db:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org