Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer
File:                     6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer (raw, json)
Hash identifier:          H6/ipf8ga5gR9/0kchimu8d2nM/+jugJTxYoTwtoh/k=
Subject key identifier:   6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       111458CE43A6C9E47851EA1E7D54F33EE94A9D0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 09:53:48 +0000
Certificate not after:    Tue 27 Aug 2024 09:58:48 +0000
Subordinate resources:    IP: 103.168.24.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Apr 2024 16:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:14:58:ce:43:a6:c9:e4:78:51:ea:1e:7d:54:f3:3e:e9:4a:9d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 29 09:53:48 2023 GMT
            Not After : Aug 27 09:58:48 2024 GMT
        Subject: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:d3:ff:2d:cd:fa:06:aa:bd:93:1c:d9:22:
                    bb:06:17:6a:40:72:cc:de:5d:ad:df:7e:e3:d7:a5:
                    cb:91:bf:35:7f:52:6f:8c:45:45:35:b9:51:d0:00:
                    80:83:b9:de:7a:a2:2b:4d:7a:89:43:0d:8e:9f:fd:
                    ad:aa:65:63:ac:20:54:c1:35:9a:50:7f:fe:55:87:
                    7d:48:db:75:d5:05:11:3e:1c:2e:e1:01:ed:4e:22:
                    d1:9a:a5:d1:df:bc:29:7c:44:fe:17:f2:a2:5b:36:
                    fc:f0:4a:da:43:fd:91:98:83:de:ba:21:04:28:59:
                    3b:87:89:52:c0:22:25:3c:e9:dd:5e:17:53:e4:f6:
                    48:cb:ed:18:62:e2:a1:35:05:63:6d:f0:10:8c:61:
                    a6:50:a3:d9:d2:e5:53:d7:ab:c2:60:bc:42:3f:c8:
                    d4:7e:74:f6:ef:27:a6:e1:43:6f:af:06:ed:78:a2:
                    c2:6c:d3:93:95:45:30:ce:a6:5e:cb:97:06:29:4f:
                    f1:b7:e6:9d:5e:73:03:c3:3e:17:19:79:50:1b:9a:
                    cf:45:82:7a:8c:50:67:ea:88:ac:96:bc:92:95:54:
                    02:cd:cf:81:90:52:5d:0c:a5:f4:74:4f:40:ce:83:
                    fa:5b:27:67:8f:a8:a9:c2:10:fb:e8:e6:7e:2c:84:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:c9:16:19:8d:e2:58:7c:bb:5e:de:40:c5:72:ac:b0:94:
         e4:c1:10:ea:12:6b:1b:7d:0a:70:ba:4c:4f:6f:0f:63:0e:a9:
         66:5c:95:e2:2b:dd:4e:37:f0:fb:ec:49:d9:72:ee:37:14:cf:
         51:d2:31:fb:42:88:b6:78:9a:30:e0:c6:cf:5a:f1:46:b6:92:
         3d:5b:1a:ab:ff:de:23:04:fb:38:4a:d0:4d:29:af:40:6f:02:
         4e:93:f2:44:f1:f4:11:18:08:ad:2f:69:ee:90:0d:f2:a8:7b:
         1b:48:5c:a1:85:ac:0c:e8:bc:e8:88:15:bf:4e:03:28:fa:13:
         f1:e8:52:77:1b:f6:35:8b:92:27:32:db:25:22:d8:2b:91:a2:
         b8:9e:19:95:31:7a:f2:cd:7e:2c:64:15:bc:b7:64:e4:04:96:
         1e:51:55:46:7b:f8:2c:de:37:45:07:a2:ae:1d:5b:67:5b:21:
         16:66:3b:f7:fb:98:2e:5b:dc:1c:85:73:b1:cc:61:56:2e:69:
         cc:8a:5e:04:f0:54:64:cc:f9:67:ea:9a:ba:61:02:a7:bc:5e:
         f5:fb:5f:a3:e1:b9:cc:0e:2d:6c:4e:28:a3:17:d6:5d:6d:e6:
         63:74:6f:28:ed:b1:fc:9b:5a:84:8f:90:5c:bb:46:16:dc:19:
         5b:7f:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 12:21:55 2024 by rpki-client on console-fra.rpki-client.org