Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
File:                     80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer (raw, json)
Hash identifier:          1dXmHsxCKYueloJ2RjVYQM//a052HyytlmqGsh3MExY=
Subject key identifier:   80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       43E8CF8A7E21C543AD6967DDE1B64D28C52C031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Aug 2024 22:37:51 +0000
Certificate not after:    Tue 26 Aug 2025 22:42:51 +0000
Subordinate resources:    IP: 103.3.58.0/24
                          IP: 103.76.148.0/22
                          IP: 120.89.90.0/23
                          IP: 203.29.26.0/24
                          IP: 2407:6f80::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e8:cf:8a:7e:21:c5:43:ad:69:67:dd:e1:b6:4d:28:c5:2c:03:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 27 22:37:51 2024 GMT
            Not After : Aug 26 22:42:51 2025 GMT
        Subject: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:76:9f:d6:94:b9:a2:ae:81:79:18:e5:2b:
                    30:2c:80:cc:9d:bb:5c:5b:6d:94:d3:13:2d:17:3d:
                    3b:2f:28:b6:16:32:fd:5a:cc:ee:2a:7c:16:a3:8f:
                    65:4e:10:91:a8:95:9f:48:b1:25:ce:46:69:66:11:
                    0b:a3:2f:49:44:76:d3:99:98:17:6f:b1:57:36:d8:
                    46:7a:bd:2f:f9:8d:83:96:1c:26:3d:65:69:95:04:
                    81:f7:2d:3d:79:95:f0:84:aa:a2:2c:e1:5d:38:ed:
                    6e:c5:bd:7d:70:f9:18:83:84:1a:a0:68:7f:08:07:
                    bf:59:0c:b9:84:86:e6:b6:48:a4:61:7e:1b:68:92:
                    f5:6d:eb:3f:d3:97:31:6e:69:60:b0:e3:4b:88:c4:
                    81:8e:c7:f8:09:cc:99:15:43:1b:2e:bd:e3:3e:fb:
                    4a:85:2f:1a:97:d9:46:53:73:88:61:b9:7b:71:d6:
                    af:21:96:1e:5d:98:d0:7f:15:7c:c0:d6:e7:e0:de:
                    f6:d8:45:89:96:5e:10:05:90:be:f8:d5:ca:ce:74:
                    29:54:36:d3:06:bf:77:cd:17:1c:92:a7:cf:36:21:
                    13:a7:74:4b:0e:b5:6b:be:1e:82:78:7c:db:8f:7d:
                    fd:52:9f:b4:ea:ff:75:5d:54:1e:5e:d9:bd:dc:86:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.58.0/24
                  103.76.148.0/22
                  120.89.90.0/23
                  203.29.26.0/24
                IPv6:
                  2407:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:6e:2b:d0:05:70:35:1b:07:7d:c8:85:d1:94:da:cd:6c:f7:
         d6:43:e4:aa:c0:33:f1:8e:be:d6:d5:25:73:fc:b9:64:c1:03:
         23:08:dd:fc:4d:51:d7:ec:07:87:fd:76:a8:e1:de:f0:1a:49:
         92:37:e4:16:75:ff:0b:25:ab:4b:2f:42:7f:e8:6b:4d:2b:35:
         47:a5:22:eb:a5:7f:fc:1e:a7:03:77:0d:a9:ee:e2:a6:b0:90:
         c7:4d:c4:23:09:f3:5c:8b:3e:7a:78:ff:ab:3b:1c:0e:85:8e:
         eb:8e:f5:72:a2:bd:ad:7e:21:6d:a8:d5:79:9e:b4:a5:40:40:
         97:20:73:41:54:c5:4e:ec:4a:c9:34:56:0b:d1:6f:f9:af:a5:
         48:a9:ea:a1:cc:39:8d:fd:c1:29:38:30:0c:7d:b3:f6:48:99:
         b8:9d:92:30:aa:83:4d:ec:dd:78:3c:37:c2:b4:cd:48:61:15:
         63:36:0d:bb:32:6b:f6:52:42:ee:7d:2e:41:21:29:de:21:22:
         76:31:03:09:30:e9:e5:98:16:e1:7a:c6:27:de:ee:61:06:79:
         89:15:59:ee:32:db:14:2c:82:c4:bc:23:e9:5c:90:26:e2:00:
         b5:78:c3:e2:5f:38:28:1f:df:a3:ad:98:ba:ad:61:ff:c3:b1:
         93:d4:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:20 2024 by rpki-client on console-fra.rpki-client.org