Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
File:                     7D9756BA26383A8A80C65F2856105B0FF5154379.cer (raw, json)
Hash identifier:          MlQdIItpxX9re7xiXbVpn8121ZuI1ux3qsT12ak8Jbo=
Subject key identifier:   7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       641DE41A3473FBF99DD97E58ACA4B4E9EF97790F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 05:15:34 +0000
Certificate not after:    Tue 29 Oct 2024 05:20:34 +0000
Subordinate resources:    IP: 103.147.140.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 13:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1d:e4:1a:34:73:fb:f9:9d:d9:7e:58:ac:a4:b4:e9:ef:97:79:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 31 05:15:34 2023 GMT
            Not After : Oct 29 05:20:34 2024 GMT
        Subject: CN=7D9756BA26383A8A80C65F2856105B0FF5154379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:03:50:07:e5:1e:c6:ef:20:42:bb:15:40:
                    fc:15:c9:43:41:11:fe:9c:2b:db:9b:46:fc:5e:cf:
                    04:69:9f:f6:1a:33:54:f0:ee:f0:6a:96:30:8a:91:
                    5c:7a:cb:80:ab:b8:28:4a:15:0e:1d:5f:3c:a3:ae:
                    20:09:dd:09:2f:fb:81:60:98:7e:d2:c5:42:24:e2:
                    96:6c:ab:4d:71:e2:79:84:5f:3f:d2:e8:fb:ee:3f:
                    11:84:88:bc:60:bd:8e:15:04:55:cb:c3:8f:c0:fc:
                    27:50:2c:10:b5:94:29:61:f0:fe:8c:d7:9c:e0:07:
                    23:03:ef:02:74:f9:02:87:3c:5a:1c:e3:78:33:67:
                    42:59:6c:1d:28:56:48:18:9b:0d:39:76:50:27:73:
                    c6:89:37:79:c4:42:18:05:c0:ad:52:8e:b2:04:1a:
                    71:41:ee:ef:26:49:20:29:04:5b:ce:e8:45:6f:41:
                    d0:5c:87:77:72:2c:54:70:c7:de:b4:22:67:09:a2:
                    01:99:26:c8:4c:e5:4e:46:ef:f2:6b:66:a4:55:67:
                    0e:b1:88:2b:2a:a5:f9:44:55:df:a4:09:f0:1a:50:
                    45:cd:3b:5f:5c:4c:5e:32:4f:7f:8d:47:6b:55:c8:
                    4a:f1:0e:76:b3:42:7b:1a:19:d8:3e:41:75:bb:90:
                    42:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:af:55:be:6c:4f:f3:33:1b:e8:67:03:bc:1f:82:13:53:
         49:84:99:66:18:16:b6:0e:d1:32:9b:52:69:38:36:d3:73:33:
         ed:36:9f:d4:20:73:56:c8:80:7f:6f:b5:a1:df:70:d7:be:d5:
         c4:04:4b:da:4a:12:b9:89:39:9d:cd:6f:b2:a0:ce:52:35:1a:
         0e:57:83:fc:0d:0c:5f:a1:b6:35:e6:21:75:66:74:24:27:27:
         e2:4b:65:f1:b3:6e:92:7e:f6:f4:55:30:25:b1:e8:ec:f4:2b:
         77:9d:ac:6b:71:c7:e3:74:cf:f6:06:d5:79:84:ff:51:46:ff:
         16:cb:03:1f:ca:7c:3f:30:35:0c:b9:8e:cc:05:14:c7:a9:e4:
         4b:48:91:b3:0e:d7:ca:29:11:1b:84:d4:b4:06:ff:1d:98:89:
         ba:09:87:61:a0:71:c5:ed:1c:1b:51:da:ea:dd:3f:0f:bd:d2:
         95:01:57:5c:3b:b5:01:e2:ba:1f:38:d0:97:e3:cb:44:7d:06:
         53:6d:12:db:17:b7:26:9f:13:48:b7:97:43:1a:3d:a5:2d:6d:
         15:9c:ae:fe:f5:af:ff:61:56:19:98:28:80:95:78:08:cd:c5:
         60:8a:97:4b:0c:35:08:5b:4e:57:72:b6:25:d9:c6:6b:05:a5:
         d5:f6:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:50:32 2024 by rpki-client on console-fra.rpki-client.org