Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/80481D732EEF797A2712002607F81D7DAF1F1F60.cer
File:                     80481D732EEF797A2712002607F81D7DAF1F1F60.cer (raw, json)
Hash identifier:          +qTJnRvPNNBpX0usV7c53jt2v8kpmg9fufiip33ydCY=
Subject key identifier:   80:48:1D:73:2E:EF:79:7A:27:12:00:26:07:F8:1D:7D:AF:1F:1F:60
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D6BE67DC5112B2E5005121EC6664B5AF5CA504C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Jun 2023 14:43:44 +0000
Certificate not after:    Fri 28 Jun 2024 14:48:44 +0000
Subordinate resources:    IP: 103.66.196.0/22
                          IP: 2001:df2:d600::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6b:e6:7d:c5:11:2b:2e:50:05:12:1e:c6:66:4b:5a:f5:ca:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 30 14:43:44 2023 GMT
            Not After : Jun 28 14:48:44 2024 GMT
        Subject: CN=80481D732EEF797A2712002607F81D7DAF1F1F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:2e:5b:f0:b6:44:51:24:db:1b:aa:85:e5:
                    ff:3f:94:68:26:d2:fa:1c:b4:fa:c5:c7:cd:06:37:
                    4d:36:c4:d1:5b:11:25:7c:3c:81:c2:da:36:14:28:
                    1e:ad:52:27:f3:6a:a0:68:15:2b:c3:28:f8:52:c3:
                    d7:3d:13:02:ad:a2:de:1a:d7:38:f6:20:7e:a5:ae:
                    32:1f:45:04:97:75:2b:98:45:05:d7:7e:01:2f:fc:
                    cb:60:95:db:76:24:f1:05:ed:85:5c:79:ec:c8:00:
                    d5:fa:8d:12:b7:bc:a8:15:1b:9e:4c:ea:7a:55:6d:
                    aa:1a:24:ce:1c:36:3d:18:c9:d8:42:3a:80:fb:07:
                    94:33:2e:5a:67:1c:2a:b1:c8:3c:03:94:6f:4f:ce:
                    51:3a:88:50:a2:8e:a6:c5:bb:df:95:21:8a:56:6a:
                    70:7b:65:8a:89:3a:7a:17:ab:59:53:be:69:b2:6f:
                    e9:85:da:4c:18:1c:7a:3b:23:f7:4f:9a:6e:13:31:
                    31:f3:ee:17:2c:8e:93:33:8e:cd:1f:71:58:62:2b:
                    f5:16:cb:c3:5b:8d:43:95:9b:07:19:e9:9d:fd:df:
                    2e:d9:10:db:ca:27:aa:86:e2:09:20:9d:53:ac:3e:
                    a2:fa:1c:00:27:03:7a:10:04:30:7d:24:45:20:1d:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:48:1D:73:2E:EF:79:7A:27:12:00:26:07:F8:1D:7D:AF:1F:1F:60
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.196.0/22
                IPv6:
                  2001:df2:d600::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:bb:ab:b0:78:f6:bc:11:0a:b9:bd:88:43:35:08:95:b7:ac:
         da:d3:35:c7:91:2f:2d:01:f8:41:9c:5a:5d:ae:85:d9:40:af:
         c9:bf:99:c3:1f:d1:f6:a6:86:1d:8c:45:6c:0d:35:51:f9:7c:
         25:72:98:6c:26:da:b2:df:2e:7b:3f:bc:45:cf:34:a9:4e:79:
         6a:dd:72:8f:ec:49:3a:b5:f6:e0:57:1d:db:af:3d:9e:1e:53:
         21:50:35:b9:23:79:da:36:7e:b5:5a:7f:02:4e:ab:69:45:ab:
         5f:08:0d:86:ed:4c:b6:4f:07:cd:a0:ec:ca:a2:3b:dd:34:e8:
         45:05:f0:43:a1:cd:54:89:14:8c:60:44:07:4e:2d:65:f3:54:
         b7:a5:d8:86:a7:e5:6b:f7:f4:ea:08:38:d9:ca:c6:ab:57:c2:
         83:9e:4a:8f:6b:8d:4b:31:06:03:fb:96:c0:c9:4c:61:5b:f6:
         a1:46:86:2f:46:f8:e6:05:3d:1d:fd:0f:72:6a:9f:49:6c:05:
         30:b2:23:a6:8f:4c:1e:c3:f6:0c:0e:9a:20:98:aa:9e:62:71:
         17:79:bb:2b:2d:b5:04:0f:68:c7:c2:2c:ce:fe:25:c1:bd:35:
         3f:2e:ff:53:f2:9f:b4:87:ed:74:b2:a5:8a:25:84:3c:dc:17:
         d2:43:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:46:56 2024 by rpki-client on console-fra.rpki-client.org