Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
File:                     782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer (raw, json)
Hash identifier:          uOVIpHGZN2qwY0QGNtLipKEEPTiNMmIvMELC15U0Rg4=
Subject key identifier:   78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4862C15B6B026BA12DFD4A20F46DE8BD306185F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 19 Apr 2024 13:24:37 +0000
Certificate not after:    Fri 18 Apr 2025 13:29:37 +0000
Subordinate resources:    IP: 103.21.216.0/22
                          IP: 202.77.96.0/19
                          IP: 202.137.0.0 -- 202.137.23.255
                          IP: 2405:100::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 16:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:62:c1:5b:6b:02:6b:a1:2d:fd:4a:20:f4:6d:e8:bd:30:61:85:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 19 13:24:37 2024 GMT
            Not After : Apr 18 13:29:37 2025 GMT
        Subject: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:28:3f:64:39:f9:48:46:97:ea:20:93:0e:
                    f5:bf:37:88:04:33:f1:89:62:e2:51:cb:c8:05:53:
                    64:0d:bb:85:77:b9:e8:eb:fd:7b:29:72:8a:70:f5:
                    e7:b3:49:b2:73:c7:2d:2a:78:d4:37:14:b8:26:17:
                    3e:eb:93:95:f1:4f:d9:6c:a7:6d:0c:0a:12:74:d1:
                    b3:c1:a7:da:7e:2c:ff:86:36:17:1b:9d:58:e3:08:
                    9c:c8:e9:31:2e:26:9e:b0:d0:d2:7c:3e:3d:ab:ff:
                    39:d7:f0:23:22:3d:e8:ec:34:4b:92:d8:93:66:47:
                    01:a3:db:d2:dc:72:63:32:91:a6:9b:f2:45:19:d3:
                    79:20:5e:5d:d5:9c:ff:27:5d:40:04:48:6f:89:19:
                    77:8f:40:c2:35:37:70:1e:cd:b0:02:3f:9b:8e:29:
                    48:f1:58:36:74:9c:ec:98:1c:6b:0b:6b:63:c6:38:
                    26:cd:d2:79:97:58:4c:64:7b:b6:5a:15:91:ab:dc:
                    af:5a:ca:e2:20:26:17:d2:7f:58:d9:2e:a6:18:04:
                    7a:dc:0d:d7:d7:4c:df:30:66:ef:ee:02:2b:05:7e:
                    b5:d7:d9:41:a2:af:f6:b9:c8:45:3e:b0:99:ed:ec:
                    e4:4b:14:b3:5a:68:f2:69:a9:86:86:9a:bf:e6:88:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.216.0/22
                  202.77.96.0/19
                  202.137.0.0-202.137.23.255
                IPv6:
                  2405:100::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:6a:34:4f:0a:0f:a4:e1:da:76:7d:a5:83:82:b7:27:15:
         42:ae:df:f2:9c:30:7a:75:29:29:3e:77:b1:78:39:6e:86:e9:
         30:05:4e:60:ee:9f:73:e1:1b:8b:18:4a:47:ad:71:7e:70:0d:
         b4:d8:71:e0:d7:af:e6:e3:2e:28:e9:08:40:88:b6:d4:b1:0c:
         21:81:3f:33:cb:db:e0:ff:ec:77:7c:da:ef:9a:2f:4f:a5:ec:
         54:10:1c:2c:5d:f8:24:8b:e2:6e:28:68:61:f9:a0:67:22:86:
         68:dd:fa:34:3d:3a:1e:b8:f0:f3:8b:53:07:50:fb:da:3a:92:
         26:7b:05:00:ef:11:9e:18:05:58:ce:ba:96:1d:f1:74:15:4d:
         a0:28:be:a4:2f:90:f2:48:81:ca:47:36:3b:ee:4b:6d:e2:61:
         30:47:da:02:79:e2:53:9d:89:a4:ad:5b:eb:c0:bd:87:40:c8:
         64:9e:79:15:b5:17:e1:c5:2a:8b:a1:17:c1:55:24:02:d2:d9:
         f1:e5:4b:77:5c:4e:e3:c2:bc:fa:d5:86:e1:ae:be:a6:c6:35:
         8e:9a:c4:72:a1:4b:02:e5:f5:98:c6:8d:f8:55:43:c4:fd:be:
         f9:4d:92:a4:5f:75:a9:04:66:d3:04:06:57:a6:11:ea:fb:34:
         1d:07:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:07:11 2024 by rpki-client on console-fra.rpki-client.org