Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
File:                     6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer (raw, json)
Hash identifier:          +2m7NlTwTOg2N1WVYQUDz+h4Cv/Z+sn1e3pApsj9LD0=
Subject key identifier:   6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0FF1D580C82FE52F93E2EC53B319B13B1A43F12F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 02:13:38 +0000
Certificate not after:    Wed 05 Mar 2025 02:18:38 +0000
Subordinate resources:    IP: 103.120.64.0/22
                          IP: 2001:df6:900::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:d5:80:c8:2f:e5:2f:93:e2:ec:53:b3:19:b1:3b:1a:43:f1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  6 02:13:38 2024 GMT
            Not After : Mar  5 02:18:38 2025 GMT
        Subject: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:c9:b1:22:81:3f:d3:f4:69:a5:ee:1a:32:
                    a8:22:6b:5a:7e:c3:67:28:8c:04:7a:28:13:69:97:
                    23:21:1a:a2:54:7f:05:e4:8b:59:c4:64:47:59:8f:
                    b1:bc:ac:74:ad:fb:99:04:cb:ce:88:0a:cb:bd:2b:
                    54:71:98:3c:03:d9:c8:58:93:0a:c5:73:5a:0b:a4:
                    3b:f5:13:29:6c:17:36:63:82:22:e5:24:f1:a9:a3:
                    69:e4:9e:08:4c:27:d5:83:68:34:cf:e4:b0:e1:90:
                    87:fa:95:b6:31:2f:24:f4:23:2f:93:d5:c5:a4:2a:
                    24:07:61:98:66:92:c8:08:00:2a:ae:6a:9d:54:33:
                    b7:c1:36:d6:9e:ab:34:40:44:06:68:5c:d7:95:63:
                    64:23:d1:52:e4:45:06:50:f7:17:4a:03:46:84:13:
                    12:75:19:39:4b:3a:4e:a0:1c:56:e7:cd:19:20:ca:
                    ce:4b:24:9c:76:5c:b5:aa:39:c1:c6:a0:36:95:bd:
                    4e:d2:d9:e5:a7:3c:fb:b5:d6:de:10:cd:cd:b0:e0:
                    02:bb:eb:8a:c6:11:7d:8c:f7:a3:df:c3:a7:d7:f3:
                    d5:ea:62:21:c6:e2:f7:36:76:e5:58:d6:58:5e:54:
                    4f:be:25:4f:a1:c6:be:9e:83:4b:cc:e0:4a:96:12:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.64.0/22
                IPv6:
                  2001:df6:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:9d:e9:43:7d:4e:5e:84:7d:f2:ba:a4:0c:8f:3e:e7:34:
         55:73:c3:0d:f2:77:80:60:91:6d:29:fb:65:23:c2:05:a3:37:
         94:d8:ed:bf:aa:2b:07:f8:9b:94:c9:80:f9:b7:b0:de:ef:b6:
         82:7f:49:33:ac:74:6d:c6:01:a9:04:c5:0b:cc:6a:c2:6e:2a:
         65:80:81:2a:e0:cd:9e:f9:84:2c:34:9f:53:80:37:ca:1a:b8:
         f6:8b:77:76:64:09:a7:c9:31:73:ec:a9:91:e4:a3:c3:57:e9:
         ab:0b:ed:6b:28:3d:1b:e8:73:0d:21:7e:dc:e0:79:89:8c:82:
         83:e0:c6:d7:0d:91:f2:02:0f:1c:94:fa:71:c6:1f:02:0f:42:
         55:1b:52:3a:1f:b2:c5:e3:dd:22:0e:e6:0f:a4:48:7d:06:c7:
         ac:9e:19:b3:47:9b:1b:10:b8:ad:f5:48:16:55:ce:a8:10:06:
         9a:f5:7b:56:62:26:11:76:a5:c6:1f:09:06:c8:50:82:a4:41:
         c9:2f:c8:ad:9d:e2:a2:6e:92:18:0d:cb:63:a8:55:67:45:d3:
         a1:7a:9b:a6:a1:9a:c8:63:4f:2b:54:dd:58:06:03:5d:0d:13:
         8a:cc:a4:33:4e:37:02:cc:b1:0a:48:22:bc:21:96:35:04:c9:
         af:18:5e:a5
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUD/HVgMgv5S+T4uxTsxmxOxpD8S8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwNjAyMTMzOFoX
DTI1MDMwNTAyMTgzOFowMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1
RTg5MjJCRUYxQkVFNTY2Rjk0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMTUybEigT/T9Gml7hoyqCJrWn7DZyiMBHooE2mXIyEaolR/BeSLWcRkR1mP
sbysdK37mQTLzogKy70rVHGYPAPZyFiTCsVzWgukO/UTKWwXNmOCIuUk8amjaeSe
CEwn1YNoNM/ksOGQh/qVtjEvJPQjL5PVxaQqJAdhmGaSyAgAKq5qnVQzt8E21p6r
NEBEBmhc15VjZCPRUuRFBlD3F0oDRoQTEnUZOUs6TqAcVufNGSDKzksknHZctao5
wcagNpW9TtLZ5ac8+7XW3hDNzbDgArvrisYRfYz3o9/Dp9fz1epiIcbi9zZ25VjW
WF5UT74lT6HGvp6DS8zgSpYSjfkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGtkf2lqm7XHGGBeiSK+8b7lZvlOMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9lODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NmU0NmVj
LWRmNWMtNGI0ZC1hMzBlLTEwYjJjNjg4YzJmYy8wLzZCNjQ3RjY5NkE5QkI1Qzcx
ODYwNUU4OTIyQkVGMUJFRTU2NkY5NEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAJneEAwDwQCAAIwCQMHACABDfYJADANBgkqhkiG9w0BAQsFAAOCAQEAX0Kd6UN9
Tl6EffK6pAyPPuc0VXPDDfJ3gGCRbSn7ZSPCBaM3lNjtv6orB/iblMmA+bew3u+2
gn9JM6x0bcYBqQTFC8xqwm4qZYCBKuDNnvmELDSfU4A3yhq49ot3dmQJp8kxc+yp
keSjw1fpqwvtayg9G+hzDSF+3OB5iYyCg+DG1w2R8gIPHJT6ccYfAg9CVRtSOh+y
xePdIg7mD6RIfQbHrJ4Zs0ebGxC4rfVIFlXOqBAGmvV7VmImEXalxh8JBshQgqRB
yS/IrZ3iom6SGA3LY6hVZ0XToXqbpqGayGNPK1TdWAYDXQ0TisykM043AsyxCkgi
vCGWNQTJrxhepQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org