Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
File:                     722FE79638E6D14E4794815122247CBEC27B8505.cer (raw, json)
Hash identifier:          d4DjcMeBo2ZtRwhsG4oDYiCxvm5I25vDdCmFtcknXjw=
Subject key identifier:   72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       643A1D7C4A682E8CD50E26A2C2AD31848F720F83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 24 Mar 2024 00:23:19 +0000
Certificate not after:    Sun 23 Mar 2025 00:28:19 +0000
Subordinate resources:    IP: 103.167.166.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3a:1d:7c:4a:68:2e:8c:d5:0e:26:a2:c2:ad:31:84:8f:72:0f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar 24 00:23:19 2024 GMT
            Not After : Mar 23 00:28:19 2025 GMT
        Subject: CN=722FE79638E6D14E4794815122247CBEC27B8505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:dc:a0:a6:cc:09:02:f1:0f:b2:a8:f5:84:
                    d0:21:70:76:87:3a:fc:0e:2c:14:f5:dd:55:ea:ef:
                    3a:6b:10:22:00:7f:d8:6c:01:50:02:3d:83:43:76:
                    26:84:0f:eb:96:82:21:eb:c5:01:18:7a:bd:47:a3:
                    35:d9:fe:9e:c9:e4:b2:ce:51:ab:8a:c6:ec:10:ce:
                    ca:7f:fa:17:fa:b1:78:f8:8f:ef:2f:d9:9e:78:f2:
                    10:b1:12:f6:49:db:d4:ba:75:c0:15:19:d4:61:d8:
                    2f:4e:ee:28:eb:41:58:3a:b2:81:a6:37:5a:f7:85:
                    df:7a:8d:e9:40:d5:5e:17:08:b3:d4:9e:21:bd:8a:
                    f1:fe:ba:15:5e:eb:d8:4a:5f:a0:b4:16:18:d4:a8:
                    c7:36:9e:61:63:45:76:91:92:71:ea:f6:15:cc:ad:
                    41:49:f1:c1:54:00:2c:b6:d6:48:77:12:ae:04:c0:
                    db:70:ad:ab:68:28:6b:37:f1:7a:aa:bc:25:b1:1f:
                    ae:9d:3f:57:5d:0f:55:9f:8f:c0:06:05:0f:61:6c:
                    bb:ab:90:88:a2:01:12:90:51:d2:c7:95:3e:0f:a4:
                    4c:a4:a7:29:a2:1c:84:d9:89:98:c7:34:84:0d:16:
                    56:a1:63:ea:d7:9a:92:c5:50:2e:a0:89:92:f7:58:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:53:56:7f:01:96:25:a9:63:64:ae:43:62:73:44:0d:e7:
         06:60:9b:30:be:94:90:13:e0:95:1a:46:20:67:cf:2f:6c:f3:
         be:ec:77:9d:c0:89:94:06:1f:1a:78:5a:61:63:33:b5:2e:1f:
         f6:88:3f:ba:e7:4e:b1:e1:49:50:0d:28:19:e1:dc:8d:a8:e2:
         9d:a8:6b:90:aa:87:60:a8:72:0d:00:26:7c:04:ed:f9:0f:1d:
         a2:83:3b:78:c3:e5:f9:a3:93:b8:92:f7:ca:03:ea:68:b3:41:
         32:d8:8d:c7:7d:ad:d8:71:fe:d6:ff:b0:41:da:62:8e:12:96:
         e8:b4:43:2a:77:63:de:6a:46:b3:ac:3e:43:ae:d5:17:4c:3f:
         97:dd:aa:2c:24:8e:57:b1:1a:f8:06:7c:0c:ae:f9:0e:fb:c8:
         6f:d7:cb:e9:07:1d:28:c6:ff:3f:ea:cd:24:7f:55:10:60:e1:
         57:5e:59:51:f1:c2:d3:cd:31:f5:63:8a:8e:ac:ed:cd:f4:95:
         12:d7:97:1e:75:c6:c1:e1:ed:26:71:e5:b8:7e:82:85:b2:e4:
         b9:22:db:cd:42:ad:09:9b:e9:c1:01:5b:cf:eb:af:ad:46:a4:
         4e:64:5f:30:42:0f:c3:07:e1:63:f5:ea:00:2e:38:6d:f9:5c:
         77:f7:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:37:52 2024 by rpki-client on console-fra.rpki-client.org