Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
File:                     6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer (raw, json)
Hash identifier:          vhc5VWexz/EDgVwrLQzv0M5VEvBfC2XjvZjhFdzBKPo=
Subject key identifier:   6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       588C167DAC482B3BEE92936FB5A57EF0FB24BD76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 00:12:42 +0000
Certificate not after:    Tue 01 Jul 2025 00:17:42 +0000
Subordinate resources:    IP: 103.50.24.0/22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:16:7d:ac:48:2b:3b:ee:92:93:6f:b5:a5:7e:f0:fb:24:bd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 00:12:42 2024 GMT
            Not After : Jul  1 00:17:42 2025 GMT
        Subject: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:fa:5f:04:32:c8:11:4a:c6:7d:6e:bd:0a:
                    91:14:b8:c6:1e:38:1b:ec:bc:29:28:7b:1e:bf:36:
                    2b:9b:97:64:75:cb:df:7c:38:a7:05:4d:78:a7:97:
                    59:54:08:d7:1b:d7:c1:65:e2:02:60:ba:03:67:a3:
                    c1:32:40:d1:6a:6b:fa:5b:cb:39:d5:1c:85:a1:5f:
                    46:06:12:79:64:4c:0b:42:1f:90:9d:62:21:a6:18:
                    13:59:cd:77:2d:cd:6f:5b:15:4f:ee:16:74:72:04:
                    80:41:a1:12:3b:1d:c1:14:b6:2b:1b:49:cb:dc:4c:
                    c8:d7:bc:84:1b:a7:43:78:4f:a7:64:b6:45:f1:8a:
                    39:02:1b:ec:32:4c:b6:91:be:43:0c:5d:50:4f:fd:
                    2b:70:4a:80:f3:fa:28:60:44:6d:06:98:20:47:e5:
                    66:6e:11:4b:4e:ec:8b:04:63:4e:64:e0:fd:e1:ef:
                    4d:20:df:da:ec:86:a4:2f:14:de:af:bf:37:da:a8:
                    15:48:e2:f3:08:a9:40:9b:0a:2f:d2:24:31:aa:b7:
                    83:c6:27:54:2f:bf:8a:76:da:d5:f0:2a:25:b4:b4:
                    ed:5a:8b:02:88:ec:3c:76:72:8d:86:c1:b0:91:d9:
                    c9:9f:1f:f3:5b:99:8b:c3:9a:91:0f:1a:98:98:e2:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:41:ba:07:d4:2f:07:be:9d:69:5d:fb:64:38:e5:6f:ea:cf:
         f3:20:0e:f1:a0:35:69:89:c2:27:32:b6:af:d2:5f:50:91:2f:
         05:01:03:8f:74:2e:54:45:9c:6c:97:00:0e:f9:29:29:ad:9c:
         f0:7f:f4:b6:fe:20:90:94:88:cd:2e:2f:ec:41:a6:ba:8d:70:
         33:f1:07:55:2d:ed:5d:09:a8:30:ac:86:df:eb:e9:28:54:7d:
         a6:76:ec:6f:02:40:14:9b:74:f3:0b:54:af:a0:dd:8a:e9:3b:
         51:9b:2c:b4:6c:24:20:3f:82:81:2d:19:21:3e:19:63:f5:9e:
         1c:a0:b1:d0:b6:2b:cd:1a:f9:f9:1c:52:26:fa:f0:ca:c2:33:
         d5:c6:f8:2f:ed:1b:e5:c5:e4:f1:f8:99:88:9a:52:9f:e2:ee:
         96:28:c0:db:d3:f8:6a:bf:6d:f6:29:a1:30:e0:1c:6a:33:3f:
         26:85:2c:d2:99:20:70:0c:8e:2a:dc:63:4b:85:3c:77:2d:26:
         e4:f9:58:8e:a2:08:7e:bf:07:d9:19:7f:3d:24:3f:08:0c:ae:
         ac:2d:62:39:04:04:2d:74:dd:e9:9b:b1:32:3a:1d:4b:02:a5:
         d4:1d:27:75:41:ed:9c:aa:a0:da:2d:bd:1e:00:67:62:d0:7f:
         69:ac:27:31
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUWIwWfaxIKzvukpNvtaV+8PskvXYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAwMTI0MloX
DTI1MDcwMTAwMTc0MlowMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBD
RjQ4RkYzMUJBRkQ3MUQyRDEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkT+l8EMsgRSsZ9br0KkRS4xh44G+y8KSh7Hr82K5uXZHXL33w4pwVNeKeX
WVQI1xvXwWXiAmC6A2ejwTJA0Wpr+lvLOdUchaFfRgYSeWRMC0IfkJ1iIaYYE1nN
dy3Nb1sVT+4WdHIEgEGhEjsdwRS2KxtJy9xMyNe8hBunQ3hPp2S2RfGKOQIb7DJM
tpG+QwxdUE/9K3BKgPP6KGBEbQaYIEflZm4RS07siwRjTmTg/eHvTSDf2uyGpC8U
3q+/N9qoFUji8wipQJsKL9IkMaq3g8YnVC+/inba1fAqJbS07VqLAojsPHZyjYbB
sJHZyZ8f81uZi8OakQ8amJjiNs0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGwVl2B6DD6sPjDPSP8xuv1x0tEhMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8zNzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQx
LWQ2YzYtNDA5ZS04YWQxLTVlODlhNGIyODUwZS8wLzZDMTU5NzYwN0EwQzNFQUMz
RTMwQ0Y0OEZGMzFCQUZENzFEMkQxMjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnMhgwDQYJKoZIhvcNAQELBQADggEBAGxBugfULwe+nWld+2Q45W/qz/MgDvGg
NWmJwicytq/SX1CRLwUBA490LlRFnGyXAA75KSmtnPB/9Lb+IJCUiM0uL+xBprqN
cDPxB1Ut7V0JqDCsht/r6ShUfaZ27G8CQBSbdPMLVK+g3YrpO1GbLLRsJCA/goEt
GSE+GWP1nhygsdC2K80a+fkcUib68MrCM9XG+C/tG+XF5PH4mYiaUp/i7pYowNvT
+Gq/bfYpoTDgHGozPyaFLNKZIHAMjircY0uFPHctJuT5WI6iCH6/B9kZfz0kPwgM
rqwtYjkEBC103embsTI6HUsCpdQdJ3VB7ZyqoNotvR4AZ2LQf2msJzE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org