Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer
File:                     7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer (raw, json)
Hash identifier:          RP7/h/gqZgTeY36ooONsl3nJaFHrPFcdQh1eke4a8is=
Subject key identifier:   7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4BFD7AF7948FC96553A3EE02695E3D21891CB74C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 Nov 2024 03:19:03 +0000
Certificate not after:    Sun 02 Nov 2025 03:24:03 +0000
Subordinate resources:    IP: 210.79.190.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fd:7a:f7:94:8f:c9:65:53:a3:ee:02:69:5e:3d:21:89:1c:b7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  3 03:19:03 2024 GMT
            Not After : Nov  2 03:24:03 2025 GMT
        Subject: CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:46:45:b2:5f:cb:c2:b0:cd:6d:1e:a0:c0:
                    92:54:5f:11:b6:32:f6:87:1c:51:fd:4a:0b:45:94:
                    f3:e9:01:d4:fc:7f:71:2c:ec:01:2e:ba:71:a5:61:
                    e7:62:f7:29:11:4f:3a:18:dd:98:2b:7e:96:96:c2:
                    7e:ce:43:50:6f:17:92:58:32:de:b6:81:2a:30:36:
                    4f:ac:3d:79:a4:3d:7f:c6:9d:18:b1:2f:6b:27:21:
                    dc:94:31:19:1b:f8:56:d1:7e:5d:ab:3e:cb:b1:d3:
                    db:fc:8a:3f:be:75:80:12:f8:0d:9b:e4:27:e8:67:
                    eb:43:8d:18:fe:00:53:8b:71:b6:98:4e:77:12:4d:
                    4b:6c:e8:b9:7a:14:47:39:8f:b6:c9:d1:05:8a:b3:
                    e0:f7:be:47:73:11:28:16:1f:e5:65:6e:36:0f:be:
                    eb:be:92:d4:d3:6a:33:20:fc:0d:a6:13:f1:ba:5f:
                    ad:29:1b:b5:c4:a9:f9:e2:c5:f2:de:97:e5:9a:22:
                    15:b6:7c:b0:e9:07:69:ba:a0:ad:25:95:8d:f1:79:
                    a4:28:1b:29:36:f8:ed:d7:6e:0f:5e:bc:25:9e:3d:
                    b5:4c:a7:c1:5d:d2:e8:61:6c:eb:41:e1:2f:0c:43:
                    4f:3d:eb:73:f8:ca:31:9b:6e:d2:4e:ca:d0:0d:91:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:81:73:8e:83:9c:2d:40:6c:b9:4b:1c:bd:bd:fe:5d:3b:
         bb:1a:1d:f4:0f:b5:c1:9a:32:e9:56:04:f0:e0:92:ad:93:a2:
         1e:8f:9d:4e:ed:df:c2:10:24:b0:21:b8:a3:37:0b:d7:c3:24:
         fd:97:68:f1:42:2b:67:c5:52:12:35:b9:87:87:5b:76:cd:73:
         bd:ac:d8:5b:0b:b6:76:2f:73:e8:d1:d8:32:2c:04:b8:19:a3:
         6e:7f:c9:43:5e:29:f2:2c:80:7a:b8:0a:95:d8:c4:4c:90:c5:
         00:76:24:29:5c:9b:eb:5f:b1:3d:55:ad:91:9b:1f:21:d7:2b:
         81:79:c2:af:bf:16:4e:bb:2d:66:d7:9e:eb:eb:39:90:55:79:
         05:52:e6:15:7c:b9:b9:8c:2a:bb:2f:58:29:85:68:97:b1:9b:
         b3:69:a4:f7:62:90:ad:01:f3:dd:e9:f8:34:93:2a:52:df:18:
         b3:88:9c:8d:0a:09:01:50:e9:5b:0c:e6:0e:11:b9:b4:72:06:
         cb:16:27:b6:98:e1:24:32:66:e2:81:42:fe:6d:29:1f:28:99:
         2f:00:76:30:13:1d:8b:0b:ee:32:39:92:bd:d6:40:c3:58:4a:
         df:4a:d2:91:f9:d4:d5:9f:e6:b9:c4:94:1a:94:2f:ca:ab:64:
         1a:e0:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:20 2024 by rpki-client on console-fra.rpki-client.org