Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer
File:                     7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer (raw, json)
Hash identifier:          7m55lEs6llgesKjaLVlJm0xZYGzKNHhNnJj5qZEfAPw=
Subject key identifier:   7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       06053F09AEF04C8450706DE9D734C4562ACE19A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Nov 2023 12:52:53 +0000
Certificate not after:    Mon 18 Nov 2024 12:57:53 +0000
Subordinate resources:    IP: 103.213.230.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:3f:09:ae:f0:4c:84:50:70:6d:e9:d7:34:c4:56:2a:ce:19:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 20 12:52:53 2023 GMT
            Not After : Nov 18 12:57:53 2024 GMT
        Subject: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:73:3d:1c:94:81:94:fe:3c:35:f6:cc:66:
                    93:0c:18:7a:85:a7:87:b7:cb:2a:14:c2:80:9d:6e:
                    66:37:e2:d0:bb:fc:b8:ee:07:ca:76:80:98:52:b8:
                    3c:d2:93:be:a9:84:fa:18:fb:11:f1:08:09:43:2a:
                    fc:c8:cb:8e:5d:59:aa:f4:16:c3:81:1c:43:c9:06:
                    dc:28:7d:05:a3:a8:f0:3f:6e:04:84:b0:90:49:77:
                    b7:5f:15:d5:e4:b6:36:6e:3b:3e:3e:ac:ff:64:2a:
                    23:c5:e1:ff:d7:50:b5:94:fc:7e:85:b4:79:7d:2a:
                    57:1d:32:aa:45:5e:43:1b:8d:b6:3d:2c:53:77:a1:
                    10:67:65:71:33:24:fd:6a:68:96:cd:48:d7:35:7c:
                    33:fb:c0:83:2f:cd:fe:31:35:a5:df:ae:cc:93:21:
                    77:72:da:dc:47:b2:f7:7c:2c:34:ad:c8:b5:56:9a:
                    86:da:cc:86:be:70:b8:ee:f5:71:59:c2:c5:8d:d9:
                    b9:e1:9b:d5:d6:07:8f:68:e4:a1:31:58:55:98:5c:
                    9d:3e:2e:44:f4:ed:3f:50:6c:46:98:b2:7d:96:27:
                    3e:dd:0f:b6:4b:51:83:24:9b:5b:c1:5c:04:f5:7c:
                    4f:4d:6a:c4:04:3d:8a:e1:63:5e:fc:d8:61:56:4d:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:81:68:ff:7c:3b:87:00:48:a6:53:ef:0a:01:e4:6c:74:
         52:ec:b7:0d:15:1f:63:e6:11:8b:e0:dd:e4:8e:b0:ec:ca:25:
         a9:25:2d:32:c5:5f:94:02:ed:e1:4c:54:22:99:72:bb:bf:df:
         2e:0d:a7:31:08:15:e1:e2:e9:4c:a4:45:25:29:70:a9:e9:3a:
         a8:75:dc:0c:49:88:7a:73:09:25:4b:80:11:4b:9a:96:a8:93:
         56:54:2d:6a:57:a3:18:ff:38:f3:b1:ad:95:34:ae:bd:b6:6f:
         f1:e6:72:07:69:64:a7:3e:13:56:85:e2:98:38:c4:44:f6:c1:
         8a:63:aa:ac:b6:73:d5:f9:31:6d:41:33:35:0f:93:80:d0:1f:
         a8:e1:02:fa:42:28:c9:f6:4f:4d:e8:d1:e0:1b:5e:04:f1:a6:
         d4:2b:b8:df:e1:b8:7d:b4:7a:7b:69:49:5f:d3:3a:1e:5f:84:
         60:76:80:f6:d5:6e:85:31:e1:12:d0:f3:82:05:29:61:41:60:
         f3:7a:4c:f3:f7:bf:28:2c:0b:4e:a0:19:f2:20:72:e5:a7:6b:
         7f:cf:78:2e:ef:52:48:5d:6f:42:d8:7c:f3:12:38:12:82:dd:
         78:84:bf:c3:a0:1f:04:04:da:ac:d5:5f:9b:c0:86:cd:9e:4c:
         36:3d:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:37:52 2024 by rpki-client on console-fra.rpki-client.org