Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
File:                     77629696624E40462330DA2AF610D32809C89E5A.cer (raw, json)
Hash identifier:          ixAP7Hfuu+0rnw1bgRMgYPxjcToJdzhGPXauQfpZpgc=
Subject key identifier:   77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1E7C1EB7660F9B08207FE6F92692E87B40CBA552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 03:27:53 +0000
Certificate not after:    Mon 29 Jul 2024 03:32:53 +0000
Subordinate resources:    IP: 103.11.179.0/24
                          IP: 103.51.158.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7c:1e:b7:66:0f:9b:08:20:7f:e6:f9:26:92:e8:7b:40:cb:a5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 31 03:27:53 2023 GMT
            Not After : Jul 29 03:32:53 2024 GMT
        Subject: CN=77629696624E40462330DA2AF610D32809C89E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:3d:71:07:5f:85:04:a3:b3:9a:b5:50:de:
                    de:e4:85:27:eb:b5:d1:83:c5:07:e0:65:ac:aa:f2:
                    8d:48:a0:29:d5:c8:85:f1:d4:93:ae:8a:b9:c7:9d:
                    d1:96:dc:9f:59:f3:c2:e6:6a:d0:d9:f7:14:d5:6c:
                    ef:78:4d:a1:16:c8:b3:52:f8:a7:2c:ce:0f:84:c7:
                    b0:23:fb:59:d9:af:ff:c9:26:54:c5:07:e6:6e:31:
                    36:1f:b4:5e:16:bc:59:b2:bd:9f:ee:5f:a1:83:8a:
                    25:3e:88:cc:41:e1:5b:25:5b:97:7b:4a:18:ad:e2:
                    83:a9:1b:0f:b9:55:25:b2:9d:d8:86:e8:00:a9:dc:
                    19:3b:43:16:3b:14:08:77:d7:aa:82:03:26:7b:ad:
                    db:40:56:3d:45:d4:dd:d3:80:c9:f1:b7:dc:99:af:
                    fa:2c:26:db:fd:a3:3e:32:6e:59:1a:a7:74:2a:3a:
                    c1:53:51:f2:ff:25:1e:11:bc:13:92:61:a3:e9:21:
                    23:b8:23:cf:b7:ad:8e:9b:84:82:c8:7d:ff:64:8d:
                    30:0c:fa:a3:8e:6d:dc:81:7f:13:fe:ec:c1:33:5a:
                    23:d6:0f:c0:3f:41:4c:99:68:66:91:ba:e7:37:c1:
                    41:a4:d5:45:bf:ab:e9:4f:9b:71:10:3b:de:00:05:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.179.0/24
                  103.51.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:39:0d:1f:e7:38:11:cc:1f:a7:65:c9:e1:66:1f:af:91:dd:
         04:25:33:3f:b2:15:20:db:23:f4:3d:49:d0:3b:fe:60:a1:d6:
         c0:4d:c0:ed:e5:35:49:54:69:12:8e:99:e1:25:53:a7:53:1c:
         10:74:99:f5:9e:67:19:55:d1:56:35:2f:27:7d:84:58:3d:4c:
         50:13:96:ce:bb:60:4f:a3:1c:db:20:97:2e:97:17:00:d2:bd:
         a0:7c:3e:42:99:90:aa:7c:29:3e:76:00:11:56:c3:c8:74:4d:
         47:96:79:0e:b3:85:42:21:55:56:4f:b1:65:e1:c3:90:6a:06:
         02:59:4d:9f:df:c1:e0:94:9b:60:ae:19:77:7a:8b:be:60:e3:
         59:a4:d6:38:fe:d4:31:11:7e:9b:b1:4a:3c:2d:40:59:08:9b:
         ad:3c:84:85:f5:69:54:fe:be:ff:d9:94:ae:20:e7:59:a5:0d:
         e7:b4:5c:a7:eb:2d:f6:c9:41:c0:4a:00:f5:0d:32:0a:e0:40:
         b1:37:d6:77:4d:43:be:ea:4c:05:7e:59:38:3c:51:5d:60:5e:
         0c:e2:89:2a:27:58:4a:fb:bf:bb:bd:8f:5b:fe:20:01:10:0a:
         6b:05:39:53:6c:aa:bd:1e:95:9c:12:00:84:15:96:76:96:ac:
         fc:e7:8d:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 8 05:33:18 2024 by rpki-client on console-ams.rpki-client.org