Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer
File:                     6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer (raw, json)
Hash identifier:          wrvYbmg3ny6P+BIjDLw2YTav3RAbVYPThF2VN/Z/pCQ=
Subject key identifier:   6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       52B659DBCEE62BAD7F769FB45A64F0F7B965AD17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Jun 2024 10:05:59 +0000
Certificate not after:    Wed 18 Jun 2025 10:10:59 +0000
Subordinate resources:    IP: 103.228.18.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:59:db:ce:e6:2b:ad:7f:76:9f:b4:5a:64:f0:f7:b9:65:ad:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 19 10:05:59 2024 GMT
            Not After : Jun 18 10:10:59 2025 GMT
        Subject: CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:26:36:5d:6f:52:7c:8f:69:29:92:94:50:
                    f3:81:60:af:44:c0:a2:95:f0:4a:87:8b:82:7a:ad:
                    65:4a:7f:23:99:b1:58:76:3e:d8:fc:a6:95:c2:29:
                    35:12:e9:51:c2:94:95:f1:aa:8e:38:d9:2b:b9:b7:
                    e1:63:fe:b2:c0:ea:f7:18:aa:5e:d2:3f:6d:92:65:
                    05:0c:cb:4b:f2:81:88:1e:b1:88:bf:9c:e0:e7:08:
                    08:21:b8:b6:03:26:98:bd:1a:ce:90:aa:ed:dd:3c:
                    09:34:79:4c:90:69:bd:6b:b7:ca:ba:00:70:47:f4:
                    5d:dc:6a:10:3f:b2:08:a9:24:e6:42:6c:fd:5c:c3:
                    47:10:87:fd:6c:9e:d2:ca:a6:c7:c8:3b:7b:bf:0a:
                    5f:45:94:fa:2c:d6:49:c3:b6:d7:60:e5:85:7b:f4:
                    53:50:58:d0:e8:89:cd:3f:6b:ab:e8:bc:41:9e:0b:
                    92:52:55:4b:4d:57:55:02:4e:1e:04:51:5a:9e:e8:
                    33:b7:70:f0:29:30:d5:ed:a1:1d:87:1d:1c:4f:a8:
                    93:a7:bf:72:c4:b6:a0:77:bf:4f:10:d2:58:70:57:
                    88:90:3e:03:0e:14:7e:a2:11:ff:fa:46:b5:5f:aa:
                    cd:9a:80:6c:97:99:d3:82:68:7e:d7:ef:57:d6:a7:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:ee:3e:22:af:b9:f8:b3:70:94:a4:4c:82:ea:90:e4:b1:
         d4:6e:ea:cb:c8:27:dc:3b:fc:b1:69:51:58:40:c6:32:48:1e:
         4f:15:09:82:c2:bd:df:76:69:2d:19:f1:ba:27:7f:7b:3f:56:
         3d:d1:fe:47:4b:51:8b:d2:df:64:d9:b4:a0:8a:af:7f:41:d5:
         86:98:01:30:7a:dc:7c:0f:72:d6:80:32:1e:92:d6:10:36:44:
         39:70:72:37:9b:bf:82:db:01:fe:83:81:90:df:c6:3f:36:94:
         08:5e:4f:6c:c9:9d:9a:d9:41:0c:b4:3c:f8:e1:f2:46:17:dc:
         1d:64:24:09:3c:26:8b:44:28:1e:6a:c1:01:9a:82:bb:d0:39:
         63:17:0a:68:fc:ed:67:55:9a:ac:1d:3b:17:5a:ba:87:7d:94:
         22:a9:5b:05:8a:7d:55:72:2e:1a:3e:7e:72:1e:75:a6:47:ec:
         5e:b1:f4:e3:5d:a9:51:8f:82:b5:2e:a8:40:f7:f2:fc:28:38:
         56:db:19:1d:04:58:28:ad:38:ae:51:23:49:6b:62:c2:6a:3f:
         cd:a7:56:17:23:71:32:3e:49:e3:51:64:54:26:ea:7b:0e:9e:
         21:92:0a:6e:c0:3c:9d:e2:e6:fc:f4:11:22:48:bf:ad:19:66:
         ed:06:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:22 2024 by rpki-client on console-ams.rpki-client.org