Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
File:                     6ED97449A90175F41CA7139C43ABDB1DE992C510.cer (raw, json)
Hash identifier:          fbFR96pLfvBdblyBnzKnC2U+E4o3rvbeJU+a5V1tw60=
Subject key identifier:   6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6DECDC30DE1D47B1C8A2EFA5F0162B26D5D7DE68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Oct 2024 18:21:25 +0000
Certificate not after:    Thu 16 Oct 2025 18:26:25 +0000
Subordinate resources:    IP: 103.255.162.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ec:dc:30:de:1d:47:b1:c8:a2:ef:a5:f0:16:2b:26:d5:d7:de:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 17 18:21:25 2024 GMT
            Not After : Oct 16 18:26:25 2025 GMT
        Subject: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:f3:38:72:53:45:47:98:7c:92:d4:ba:4e:
                    17:6e:a6:36:38:14:8a:84:4d:2d:5c:9a:27:db:29:
                    f3:2f:08:8b:7e:63:69:81:21:0b:ec:57:98:4d:c6:
                    42:b0:fb:0e:74:c5:43:3c:eb:c3:32:32:70:d6:02:
                    29:9e:aa:b5:97:25:f2:71:ca:7b:a4:54:9e:05:f9:
                    5c:61:8e:fe:b6:18:c9:cc:a4:b3:5e:d5:5d:ae:c6:
                    9a:d8:06:31:03:0f:c5:14:d7:2d:d8:52:71:1a:7e:
                    5d:c8:8d:94:25:01:d8:a1:0e:d8:ef:07:35:52:7e:
                    01:7f:78:ca:db:32:0b:bc:c8:1e:8e:af:ef:f1:04:
                    dc:1c:32:23:d4:53:c5:19:e9:ee:a6:ad:df:b5:03:
                    37:ed:b0:00:76:62:b3:66:90:83:9b:c6:d3:3f:40:
                    b6:50:56:b0:5a:cf:f7:d4:2a:6e:3e:a1:3d:69:ea:
                    aa:91:f6:44:79:6a:f4:44:7a:14:a7:3b:72:81:c7:
                    af:a2:4b:94:41:03:bd:4c:e9:48:75:6d:cd:e3:f9:
                    e6:6e:bc:c8:8a:8e:1e:32:bf:41:7c:ad:98:40:cd:
                    75:80:8c:68:b4:10:2f:92:cd:f0:92:17:e7:42:ba:
                    57:ad:de:5d:10:e5:54:b0:c0:1a:05:ab:07:89:a1:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:24:ea:fa:50:23:88:55:21:d3:68:f9:bc:09:1f:51:fc:2a:
         e6:13:d6:2b:75:b9:08:42:5e:b0:55:61:ca:86:09:0c:63:56:
         5a:45:fb:6d:d3:cc:c1:e1:12:b7:3f:8e:b3:ac:91:b4:2e:66:
         ad:5f:b8:16:ea:6d:94:d5:2b:95:40:65:04:c3:cb:02:66:c5:
         93:13:10:9f:b4:69:17:84:37:8d:9d:08:c2:17:18:d6:73:07:
         e1:21:07:93:73:72:f5:ba:f9:8a:e5:b5:d1:d3:cc:4a:dc:64:
         f8:ee:82:49:2b:58:ef:64:e3:8c:51:e4:1c:7a:58:23:2e:e4:
         52:e8:f0:3d:bb:63:9d:bd:14:80:7c:4e:f0:1e:62:3a:f5:51:
         a2:d6:a8:0c:bd:4d:3f:4c:63:a0:05:8b:5d:e7:b3:cc:fa:76:
         ba:69:80:92:eb:a3:77:f8:a8:b7:ab:67:5b:3c:a7:e3:88:d8:
         e5:a3:2d:7f:61:1f:50:b2:04:e6:6a:86:f5:46:9a:3b:6d:1d:
         36:82:e4:d0:6c:b8:dc:ba:7d:86:f2:d8:31:26:13:5e:f1:b4:
         46:c7:72:f5:c0:c6:35:f5:be:ec:5b:dd:2d:94:b0:60:eb:95:
         d1:46:1e:16:7b:b6:a6:4b:22:0c:da:c6:af:ee:fb:bf:33:e6:
         52:79:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:22 2024 by rpki-client on console-ams.rpki-client.org