Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
File:                     6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer (raw, json)
Hash identifier:          NGRXy6xTkrXS6MXf88XrwNvt8OBTTlML6LMxkLNPvfM=
Subject key identifier:   6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       781C69135A9C26D17A284321B75BB24EA467B447
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 15:41:26 +0000
Certificate not after:    Tue 02 Jun 2026 15:46:26 +0000
Subordinate resources:    IP: 103.50.24.0/22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1c:69:13:5a:9c:26:d1:7a:28:43:21:b7:5b:b2:4e:a4:67:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  3 15:41:26 2025 GMT
            Not After : Jun  2 15:46:26 2026 GMT
        Subject: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:fa:5f:04:32:c8:11:4a:c6:7d:6e:bd:0a:
                    91:14:b8:c6:1e:38:1b:ec:bc:29:28:7b:1e:bf:36:
                    2b:9b:97:64:75:cb:df:7c:38:a7:05:4d:78:a7:97:
                    59:54:08:d7:1b:d7:c1:65:e2:02:60:ba:03:67:a3:
                    c1:32:40:d1:6a:6b:fa:5b:cb:39:d5:1c:85:a1:5f:
                    46:06:12:79:64:4c:0b:42:1f:90:9d:62:21:a6:18:
                    13:59:cd:77:2d:cd:6f:5b:15:4f:ee:16:74:72:04:
                    80:41:a1:12:3b:1d:c1:14:b6:2b:1b:49:cb:dc:4c:
                    c8:d7:bc:84:1b:a7:43:78:4f:a7:64:b6:45:f1:8a:
                    39:02:1b:ec:32:4c:b6:91:be:43:0c:5d:50:4f:fd:
                    2b:70:4a:80:f3:fa:28:60:44:6d:06:98:20:47:e5:
                    66:6e:11:4b:4e:ec:8b:04:63:4e:64:e0:fd:e1:ef:
                    4d:20:df:da:ec:86:a4:2f:14:de:af:bf:37:da:a8:
                    15:48:e2:f3:08:a9:40:9b:0a:2f:d2:24:31:aa:b7:
                    83:c6:27:54:2f:bf:8a:76:da:d5:f0:2a:25:b4:b4:
                    ed:5a:8b:02:88:ec:3c:76:72:8d:86:c1:b0:91:d9:
                    c9:9f:1f:f3:5b:99:8b:c3:9a:91:0f:1a:98:98:e2:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:8b:61:91:4f:bf:f0:2f:b2:6e:fd:b5:56:ad:d6:0e:2b:
         3c:90:07:ad:34:28:01:62:3a:72:db:e8:73:af:24:39:ee:4e:
         df:14:89:20:75:a5:87:21:9a:89:91:63:e6:7b:7f:a2:f8:2c:
         f2:83:a1:c5:0b:8e:87:2b:a3:e0:9b:15:dc:b1:d8:93:7a:13:
         e4:e3:2c:fa:75:7e:09:61:08:e8:5c:ce:8c:01:cd:5f:bd:da:
         33:23:70:56:c2:58:0e:6d:a5:da:64:c3:85:0e:04:0c:e4:87:
         fc:f3:d4:95:41:2e:36:41:1d:fe:7f:3e:d8:f6:23:8e:d8:02:
         55:fd:e2:32:12:a1:b5:54:5c:0b:ea:47:87:9c:97:6b:f9:d2:
         7f:4c:91:84:6c:d2:3d:12:1d:c1:30:e9:30:19:76:c6:88:8e:
         9d:a3:2a:ef:0b:70:49:4c:f1:15:bb:13:ba:d5:c8:96:3a:d0:
         c3:6f:5e:51:a6:0d:b5:ac:da:83:ef:41:be:97:99:f6:15:6f:
         e0:b5:5a:72:d4:6f:ac:98:fa:d4:b0:a1:4a:22:ba:4f:3d:36:
         a1:d5:70:77:ac:08:0e:be:97:ec:de:eb:0b:e7:98:40:f5:4f:
         ea:18:fb:f0:aa:5e:f7:86:d0:d9:ef:b6:3a:41:9f:80:51:55:
         f1:3c:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:10:11 2025 by rpki-client