Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
File:                     77629696624E40462330DA2AF610D32809C89E5A.cer (raw, json)
Hash identifier:          IUY+JX9z3IeGrD6LFG2HTaXhKIKPGFsEoMpgjxpmLd8=
Subject key identifier:   77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2CCC2A7A704290EA71C4C0E2E73E327DAF9CDCB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 16:48:29 +0000
Certificate not after:    Mon 30 Jun 2025 16:53:29 +0000
Subordinate resources:    IP: 103.11.179.0/24
                          IP: 103.51.158.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cc:2a:7a:70:42:90:ea:71:c4:c0:e2:e7:3e:32:7d:af:9c:dc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 16:48:29 2024 GMT
            Not After : Jun 30 16:53:29 2025 GMT
        Subject: CN=77629696624E40462330DA2AF610D32809C89E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:3d:71:07:5f:85:04:a3:b3:9a:b5:50:de:
                    de:e4:85:27:eb:b5:d1:83:c5:07:e0:65:ac:aa:f2:
                    8d:48:a0:29:d5:c8:85:f1:d4:93:ae:8a:b9:c7:9d:
                    d1:96:dc:9f:59:f3:c2:e6:6a:d0:d9:f7:14:d5:6c:
                    ef:78:4d:a1:16:c8:b3:52:f8:a7:2c:ce:0f:84:c7:
                    b0:23:fb:59:d9:af:ff:c9:26:54:c5:07:e6:6e:31:
                    36:1f:b4:5e:16:bc:59:b2:bd:9f:ee:5f:a1:83:8a:
                    25:3e:88:cc:41:e1:5b:25:5b:97:7b:4a:18:ad:e2:
                    83:a9:1b:0f:b9:55:25:b2:9d:d8:86:e8:00:a9:dc:
                    19:3b:43:16:3b:14:08:77:d7:aa:82:03:26:7b:ad:
                    db:40:56:3d:45:d4:dd:d3:80:c9:f1:b7:dc:99:af:
                    fa:2c:26:db:fd:a3:3e:32:6e:59:1a:a7:74:2a:3a:
                    c1:53:51:f2:ff:25:1e:11:bc:13:92:61:a3:e9:21:
                    23:b8:23:cf:b7:ad:8e:9b:84:82:c8:7d:ff:64:8d:
                    30:0c:fa:a3:8e:6d:dc:81:7f:13:fe:ec:c1:33:5a:
                    23:d6:0f:c0:3f:41:4c:99:68:66:91:ba:e7:37:c1:
                    41:a4:d5:45:bf:ab:e9:4f:9b:71:10:3b:de:00:05:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.179.0/24
                  103.51.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:5e:84:36:07:f8:7c:88:c0:ea:d4:e9:66:cf:3c:2c:20:
         a6:56:4f:e6:09:78:fa:58:64:08:e8:49:e3:a4:63:c4:bc:1c:
         6d:9d:6a:15:de:e3:69:00:8b:39:43:51:34:7d:30:79:91:d2:
         9e:1c:f7:a2:6a:61:52:35:3f:73:e4:33:ee:fb:c3:87:cc:e5:
         fe:32:5c:e6:85:d0:b6:63:fe:26:e5:df:af:b9:51:93:0e:28:
         e0:90:92:32:30:ce:d7:43:39:45:49:f0:60:37:aa:15:ae:8b:
         a3:a3:e8:8b:f1:2c:49:8b:ea:ae:22:1e:6f:c0:39:bd:ac:04:
         d8:20:cd:03:7d:78:5a:51:db:8d:91:21:32:0e:41:c6:c5:92:
         0b:1c:9a:dc:ee:26:44:17:bd:0c:ca:f2:31:60:1a:db:10:93:
         29:46:28:5e:7a:02:a1:0f:9c:18:33:3e:e7:b6:b9:3b:d7:ba:
         14:20:22:e7:7a:8b:ce:0f:bd:35:18:ba:66:f2:19:d8:5b:eb:
         37:88:2f:40:13:1d:b1:43:a0:c7:55:87:26:af:cd:42:e3:ee:
         36:96:87:f2:99:6c:73:77:cb:5b:95:56:b3:b9:a7:2d:e2:83:
         fd:bc:74:69:2b:40:b2:8a:88:fd:10:d8:a9:7e:f7:10:20:5e:
         28:4c:04:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:49 2024 by rpki-client on console-fra.rpki-client.org