Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
File:                     6ED97449A90175F41CA7139C43ABDB1DE992C510.cer (raw, json)
Hash identifier:          qdTrhCPL1FIIgG42SpVpTBOYKClvvYRDs4ij/u5f3w8=
Subject key identifier:   6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3E5CE581C2EFDD4BDC9D69F33BCC95C20EF5768D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 11:32:47 +0000
Certificate not after:    Thu 14 Nov 2024 11:37:47 +0000
Subordinate resources:    IP: 103.255.162.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5c:e5:81:c2:ef:dd:4b:dc:9d:69:f3:3b:cc:95:c2:0e:f5:76:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 16 11:32:47 2023 GMT
            Not After : Nov 14 11:37:47 2024 GMT
        Subject: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:f3:38:72:53:45:47:98:7c:92:d4:ba:4e:
                    17:6e:a6:36:38:14:8a:84:4d:2d:5c:9a:27:db:29:
                    f3:2f:08:8b:7e:63:69:81:21:0b:ec:57:98:4d:c6:
                    42:b0:fb:0e:74:c5:43:3c:eb:c3:32:32:70:d6:02:
                    29:9e:aa:b5:97:25:f2:71:ca:7b:a4:54:9e:05:f9:
                    5c:61:8e:fe:b6:18:c9:cc:a4:b3:5e:d5:5d:ae:c6:
                    9a:d8:06:31:03:0f:c5:14:d7:2d:d8:52:71:1a:7e:
                    5d:c8:8d:94:25:01:d8:a1:0e:d8:ef:07:35:52:7e:
                    01:7f:78:ca:db:32:0b:bc:c8:1e:8e:af:ef:f1:04:
                    dc:1c:32:23:d4:53:c5:19:e9:ee:a6:ad:df:b5:03:
                    37:ed:b0:00:76:62:b3:66:90:83:9b:c6:d3:3f:40:
                    b6:50:56:b0:5a:cf:f7:d4:2a:6e:3e:a1:3d:69:ea:
                    aa:91:f6:44:79:6a:f4:44:7a:14:a7:3b:72:81:c7:
                    af:a2:4b:94:41:03:bd:4c:e9:48:75:6d:cd:e3:f9:
                    e6:6e:bc:c8:8a:8e:1e:32:bf:41:7c:ad:98:40:cd:
                    75:80:8c:68:b4:10:2f:92:cd:f0:92:17:e7:42:ba:
                    57:ad:de:5d:10:e5:54:b0:c0:1a:05:ab:07:89:a1:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:b9:11:02:be:ad:c9:59:92:7c:c4:d4:7a:6b:92:ea:a3:c8:
         54:e1:9c:34:c3:92:9a:71:33:79:40:36:7c:4c:ff:cb:cc:4a:
         b2:d3:99:c6:22:73:19:94:fa:61:3d:8c:3c:09:80:c0:e9:4f:
         3b:68:52:5c:2d:03:6a:db:d9:84:2a:e1:63:43:07:e8:a9:2f:
         ae:1d:1d:8d:7b:1a:d2:bb:75:cb:d2:8c:a0:d6:9f:79:65:5d:
         8b:a3:63:4a:b1:87:0e:c3:58:82:42:54:2b:70:66:d0:45:fa:
         36:cc:f1:ec:0c:25:94:1f:f6:8d:32:56:6b:eb:03:b7:f9:22:
         03:79:e6:a7:0d:4c:c4:4b:18:37:03:8b:0a:5b:5d:32:97:28:
         01:b7:d7:83:f1:89:8f:da:01:d3:67:76:4f:56:d7:99:c9:7e:
         72:04:e8:1b:e4:6c:dc:47:e9:0e:64:54:a6:7b:bd:aa:59:05:
         a2:48:77:53:a7:15:5a:d8:81:a6:38:b7:81:7f:e8:bc:fd:00:
         ae:d1:33:be:64:f1:ec:98:17:79:79:fe:f7:50:92:2d:1b:77:
         fd:07:7d:73:e8:dd:5e:d0:0d:be:60:6f:18:9a:21:0c:61:33:
         e2:78:20:fc:b0:56:35:6b:13:e9:ba:29:a8:8d:08:01:52:34:
         39:f7:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:33:17 2024 by rpki-client on console-ams.rpki-client.org