Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer
File:                     7AD0DDB5789DE529C8697A033978C381FFE40D83.cer (raw, json)
Hash identifier:          UY72vno6DK74+VKksAEDZq8TzIaDPewflBd3gGKaN3Q=
Subject key identifier:   7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23A1F477F1F6DBB2227DB83B4C422834736BF74C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Jun 2023 12:50:46 +0000
Certificate not after:    Mon 10 Jun 2024 12:55:46 +0000
Subordinate resources:    IP: 103.175.179.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a1:f4:77:f1:f6:db:b2:22:7d:b8:3b:4c:42:28:34:73:6b:f7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 12 12:50:46 2023 GMT
            Not After : Jun 10 12:55:46 2024 GMT
        Subject: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:57:70:20:69:02:88:4a:5e:57:9c:aa:66:
                    9d:42:ea:70:56:38:57:20:ac:6a:41:07:09:95:a7:
                    49:2b:a0:fb:b4:7f:af:14:0b:dc:2d:16:b5:84:51:
                    54:54:1b:cb:e0:e8:db:4e:a0:ca:ef:a5:21:e1:c1:
                    ff:b1:41:df:15:12:70:cb:2e:98:b7:9b:e0:24:a2:
                    b8:a2:81:c8:44:54:e0:eb:6e:53:e4:64:5b:88:79:
                    68:90:7b:83:c9:e5:74:bc:a6:7f:47:ba:d1:69:8c:
                    62:f1:68:85:91:7f:ad:f3:04:97:b6:68:1a:a7:d5:
                    b3:c9:bb:6b:9d:1a:2c:2c:5c:ee:5a:61:d0:8c:fa:
                    81:45:40:f1:58:ca:99:d0:77:9c:07:62:88:4a:81:
                    4e:07:e6:33:11:d4:25:66:9d:64:dc:7d:13:2a:8f:
                    8d:5c:1d:78:5e:41:53:bb:e3:70:35:9d:d9:23:ac:
                    7e:25:eb:84:4d:45:70:30:bb:21:cc:fc:58:3e:30:
                    bb:04:eb:a8:6f:ef:10:53:6a:f0:35:52:21:19:1a:
                    2a:01:61:4f:36:c5:ae:76:83:de:71:2f:a3:bc:bf:
                    7a:d1:fd:fa:c1:18:b3:b0:b4:37:a5:c6:d2:2e:5a:
                    86:68:0d:05:e4:d1:94:e8:98:78:03:8b:ca:df:4f:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:90:2a:8d:2b:c1:5c:e1:f8:03:66:4a:f7:16:be:2e:78:1e:
         52:50:51:c0:37:9d:44:84:6f:51:f3:b8:48:b9:58:de:60:62:
         52:c5:cd:36:95:81:c9:cb:59:ac:e3:be:7a:d6:bf:2d:92:57:
         6f:81:a7:e3:09:1b:f8:38:0f:61:2c:de:22:fd:0f:b7:1d:1b:
         ae:5a:93:3c:ac:2e:b9:da:66:e3:f4:1e:1b:c6:60:93:9b:ff:
         a6:10:78:80:a7:6b:b7:30:74:f6:e5:ce:fc:7b:a1:8b:6a:e4:
         be:f2:28:a7:4d:e9:88:fb:4f:61:20:c6:f9:c8:5e:37:da:ce:
         5d:fb:8c:6c:bf:17:06:cc:18:27:6d:b4:68:2b:50:c8:ac:44:
         7e:58:09:da:c7:92:f0:2c:4c:a2:18:81:1b:93:32:f7:ae:ca:
         a7:24:ba:dc:5c:c1:43:77:a3:de:c6:24:bf:be:3d:43:ce:97:
         ab:0f:12:d1:59:09:fc:cc:34:60:d6:4b:f0:21:be:9f:3a:f7:
         da:76:c1:7c:0e:c4:09:d0:b3:6f:2a:14:25:be:6b:fa:9c:1f:
         a3:06:76:df:51:e6:53:4c:7c:81:ad:92:2f:eb:6b:1a:38:a8:
         75:ff:82:92:d5:72:18:a1:f7:ee:17:4a:95:b7:64:0d:b4:b8:
         92:e2:74:f0
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUI6H0d/H227Iifbg7TEIoNHNr90wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYxMjEyNTA0NloX
DTI0MDYxMDEyNTU0NlowMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3
QTAzMzk3OEMzODFGRkU0MEQ4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbLV3AgaQKISl5XnKpmnULqcFY4VyCsakEHCZWnSSug+7R/rxQL3C0WtYRR
VFQby+Do206gyu+lIeHB/7FB3xUScMsumLeb4CSiuKKByERU4OtuU+RkW4h5aJB7
g8nldLymf0e60WmMYvFohZF/rfMEl7ZoGqfVs8m7a50aLCxc7lph0Iz6gUVA8VjK
mdB3nAdiiEqBTgfmMxHUJWadZNx9EyqPjVwdeF5BU7vjcDWd2SOsfiXrhE1FcDC7
Icz8WD4wuwTrqG/vEFNq8DVSIRkaKgFhTzbFrnaD3nEvo7y/etH9+sEYs7C0N6XG
0i5ahmgNBeTRlOiYeAOLyt9P9wMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHrQ3bV4neUpyGl6Azl4w4H/5A2DMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmMmIxNzg2
LTE4MzMtNGQwYS1hMTM5LTQ2NDQzMzM5M2Q3OC8wLzdBRDBEREI1Nzg5REU1MjlD
ODY5N0EwMzM5NzhDMzgxRkZFNDBEODMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnr7MwDQYJKoZIhvcNAQELBQADggEBAJGQKo0rwVzh+ANmSvcWvi54HlJQUcA3
nUSEb1HzuEi5WN5gYlLFzTaVgcnLWazjvnrWvy2SV2+Bp+MJG/g4D2Es3iL9D7cd
G65akzysLrnaZuP0HhvGYJOb/6YQeICna7cwdPblzvx7oYtq5L7yKKdN6Yj7T2Eg
xvnIXjfazl37jGy/FwbMGCdttGgrUMisRH5YCdrHkvAsTKIYgRuTMveuyqckutxc
wUN3o97GJL++PUPOl6sPEtFZCfzMNGDWS/Ahvp8699p2wXwOxAnQs28qFCW+a/qc
H6MGdt9R5lNMfIGtki/raxo4qHX/gpLVchih9+4XSpW3ZA20uJLidPA=
-----END CERTIFICATE-----
Generated at Wed May 8 22:46:40 2024 by rpki-client on console-ams.rpki-client.org