Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer
File:                     6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer (raw, json)
Hash identifier:          +F8BOLEN4sRrbqIY6U0WxT2Ei02Y9QIi49IAmP6V1zM=
Subject key identifier:   6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7E44253AEED9263962A4DFF48494BA089C37EC8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 20:38:15 +0000
Certificate not after:    Thu 14 Aug 2025 20:43:15 +0000
Subordinate resources:    IP: 103.175.158.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:44:25:3a:ee:d9:26:39:62:a4:df:f4:84:94:ba:08:9c:37:ec:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 15 20:38:15 2024 GMT
            Not After : Aug 14 20:43:15 2025 GMT
        Subject: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:2b:c9:b1:49:3f:9a:a0:54:bf:de:0f:a3:
                    7d:96:0f:00:5b:8d:6d:87:bb:8d:ca:55:9f:25:32:
                    db:6d:f9:0c:5a:46:82:f7:76:5a:6e:8e:e7:77:fc:
                    6d:91:20:d7:0f:53:09:79:95:68:50:5c:44:b6:a2:
                    5c:95:78:3f:f1:ae:14:bb:da:17:a4:af:d9:de:f1:
                    0b:23:0d:0c:b3:26:2f:6e:17:7f:f7:9f:3b:f2:fe:
                    f4:9d:5f:ca:17:14:b8:18:00:60:a3:ba:c3:74:a6:
                    59:50:2c:df:de:59:e0:5c:9e:b9:53:4c:6f:66:97:
                    30:74:b9:4c:94:25:11:cc:46:9c:73:50:d6:33:99:
                    26:02:34:5a:23:b3:91:30:bd:fe:00:2f:fa:dd:81:
                    37:43:1c:7d:c5:36:9c:1c:9a:79:ba:f6:24:d4:51:
                    91:43:8c:d6:56:3e:23:6e:6b:aa:f1:15:53:73:d2:
                    58:ad:53:2b:01:a6:43:46:45:d0:34:79:b7:f0:5f:
                    aa:32:3a:59:80:f4:66:71:b9:89:96:d1:27:68:63:
                    8e:33:c2:90:7d:90:7c:31:f0:10:0b:22:a2:ed:0e:
                    5a:aa:bc:a7:f8:fe:f7:34:41:7f:61:3b:a2:54:08:
                    fd:57:d8:28:8c:cb:a8:65:41:b8:59:80:dc:5b:70:
                    79:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:3d:c1:d0:15:20:28:83:e8:f1:d6:75:02:fe:28:07:e1:bd:
         e3:ab:9f:af:11:7b:db:8d:ad:bc:b1:e1:b6:b6:76:fd:cb:fb:
         d9:55:d5:f8:ab:aa:12:b3:14:6b:5d:d9:40:1d:e5:c4:d5:44:
         22:ed:f6:4a:fa:f9:df:3f:df:07:e8:97:5e:a2:82:46:3f:b4:
         eb:83:43:7b:da:b6:d0:00:48:8b:ae:ae:7a:a8:9e:b2:72:7c:
         d8:3b:cf:bd:2b:d6:1b:d5:0e:fc:1f:2e:e8:33:65:7c:aa:cc:
         0e:44:3f:96:1b:91:1c:57:f5:3d:4c:7b:7e:c3:fa:8b:91:f1:
         3e:b2:f6:70:f0:01:1e:4e:fe:85:0b:98:ca:79:46:93:e8:4f:
         86:12:68:0a:93:ec:f3:9d:50:c2:d9:4a:92:5d:25:e3:19:62:
         be:74:c2:4b:16:04:c4:2f:c1:10:00:d2:50:46:9f:16:a9:cd:
         5c:03:08:93:84:e4:11:22:c9:5f:84:43:cb:b5:c3:52:39:26:
         28:a9:4c:a9:b9:77:ab:e1:16:0b:42:a3:a2:ab:37:8d:2d:90:
         8f:c5:c4:b3:87:7c:ca:04:c6:6b:de:ef:73:62:03:55:86:85:
         de:15:d3:db:5c:da:ee:d9:be:69:61:12:0f:a7:2b:8e:a7:af:
         a0:ac:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:22 2024 by rpki-client on console-ams.rpki-client.org