Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
File:                     6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer (raw, json)
Hash identifier:          ucHrSHlZY1UwkT5iy51qhL99W+Amb06Ls/V1OA1Pz78=
Subject key identifier:   6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A389BA98C61613E2515B4BC56FD97252E5C36D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 05:27:12 +0000
Certificate not after:    Tue 01 Jul 2025 05:32:12 +0000
Subordinate resources:    IP: 103.152.118.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:38:9b:a9:8c:61:61:3e:25:15:b4:bc:56:fd:97:25:2e:5c:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 05:27:12 2024 GMT
            Not After : Jul  1 05:32:12 2025 GMT
        Subject: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:a7:5a:82:21:42:77:db:be:5e:0f:95:b3:
                    39:60:34:b1:ec:24:01:9b:de:26:6d:4b:3c:ca:24:
                    25:ef:da:b3:6d:6a:40:79:62:9b:e7:4e:30:70:37:
                    78:6e:3b:1f:d3:03:4a:8b:c0:4b:05:7e:c5:e1:5e:
                    d2:93:de:76:a4:e3:57:87:c3:14:b7:93:82:20:76:
                    f9:a9:77:b3:9a:8a:c4:c9:a9:26:7e:53:7c:2f:d5:
                    4d:27:58:7d:07:1e:00:3a:15:8b:05:a7:f0:95:f6:
                    a4:af:1d:b2:64:bd:d5:71:14:60:00:f7:8d:ca:68:
                    85:f3:31:2c:79:a4:0f:0e:81:0c:46:04:66:01:72:
                    5e:cf:c2:9f:8c:e4:a9:59:b3:aa:29:90:ab:0d:e8:
                    4e:f7:26:88:c4:9e:83:7b:7d:6a:37:f2:86:eb:cf:
                    a4:45:18:a3:9f:c8:b5:a6:9b:79:af:75:cf:69:6b:
                    5b:e3:ae:f2:c3:ce:11:d9:fb:4a:19:82:53:f1:1d:
                    cb:3d:43:54:6e:fb:31:3e:b8:2b:06:90:f9:84:b3:
                    91:b4:01:cd:6d:98:48:41:f5:be:af:c3:07:e0:71:
                    fa:e0:85:15:a3:7a:c8:03:b8:cd:8d:c5:19:2e:79:
                    b9:8e:1c:5c:ca:4e:e1:ef:0b:bc:81:c0:5b:6a:48:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:49:73:63:87:3f:91:21:89:0f:04:0a:83:d9:fc:a8:34:2f:
         fd:d3:54:02:10:02:87:fb:e2:ea:3d:ae:9b:46:96:3f:e4:d4:
         f7:f2:26:02:4b:a5:61:c9:73:36:02:74:c6:44:f7:e7:13:37:
         85:77:3e:df:1d:98:75:31:39:38:63:0b:08:0f:ed:14:c7:3c:
         85:2c:48:88:04:04:5a:1c:70:5a:ea:96:ba:4b:eb:65:e6:d4:
         3b:95:72:80:57:6f:72:47:50:fe:70:be:b8:d0:bb:74:a6:c6:
         c8:cd:91:7a:8d:71:da:28:fc:3e:21:6f:bb:ea:86:03:e6:7c:
         3f:6b:20:64:19:69:72:b3:04:7f:e9:c2:c1:1e:5c:ee:24:7e:
         85:84:7a:1a:7e:c2:08:74:06:f3:6c:3e:0d:6f:8a:26:62:90:
         b0:8e:83:ad:83:69:71:6b:ed:01:e4:4b:ae:28:e4:09:d8:4d:
         ab:3b:2e:09:ca:61:54:c6:71:b1:66:cb:ac:bb:d7:00:3c:b0:
         0d:95:9d:37:4e:d7:ef:f4:02:8d:da:ce:71:75:16:4c:a5:ce:
         11:d8:f5:f3:36:4b:7d:c0:76:d4:02:d9:f4:fd:e3:2b:13:4c:
         51:ab:c7:dc:cb:98:19:2d:5d:52:3b:24:c3:42:ec:0a:84:fc:
         36:80:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:19 2024 by rpki-client on console-fra.rpki-client.org