Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer
File:                     83C7CB5B51B0D2341C906429DBCB81393F473E08.cer (raw, json)
Hash identifier:          +csLbQa4I9KEH23G0QHsU1CX92E4sbvslmev33AWTJA=
Subject key identifier:   83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       462CA2FB30C7E31209F6D8198FD378447244511D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Nov 2024 11:21:58 +0000
Certificate not after:    Wed 05 Nov 2025 11:26:58 +0000
Subordinate resources:    IP: 103.160.147.0/24
                          IP: 2001:df5:a680::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 06:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:a2:fb:30:c7:e3:12:09:f6:d8:19:8f:d3:78:44:72:44:51:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Nov  6 11:21:58 2024 GMT
            Not After : Nov  5 11:26:58 2025 GMT
        Subject: CN=83C7CB5B51B0D2341C906429DBCB81393F473E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:ea:dc:a3:88:be:a3:e1:ed:b0:71:11:88:
                    36:1f:6d:87:51:a0:e8:bf:0e:63:a8:90:c2:fb:f8:
                    34:22:67:18:16:83:ca:2b:c1:27:bb:b5:e5:ef:90:
                    2e:46:94:99:85:9b:bc:c7:9e:80:6d:0f:08:27:07:
                    6e:12:d4:af:45:ac:43:08:c6:a5:b9:c4:ee:1d:dc:
                    8a:27:24:45:58:68:db:f9:13:a9:70:58:f8:29:6c:
                    74:4a:45:04:8a:ac:29:8e:4c:f9:bb:a7:ba:58:10:
                    91:64:c7:e7:2e:a3:e4:98:ae:e1:05:83:14:dc:9d:
                    86:7b:59:63:21:50:a1:25:89:24:7b:22:a1:0a:3d:
                    2d:31:6e:b2:33:d4:8f:f1:70:d2:79:36:1a:35:27:
                    b6:0d:e3:f7:f2:39:5d:c5:a2:35:0b:bc:95:4d:d2:
                    50:70:99:4d:8f:a0:dc:79:cb:b0:d8:4f:83:a2:4d:
                    22:cf:2f:7d:d2:3c:b5:5d:eb:1b:9e:ec:45:61:13:
                    26:82:00:1a:7e:ec:f9:e8:db:ca:8d:65:d6:1a:8a:
                    17:b1:96:c9:3d:cd:9f:a4:39:0c:52:db:a1:1b:98:
                    14:5c:ca:2e:5d:11:a0:e5:ad:5b:ab:7d:ed:8b:85:
                    52:69:07:ac:9d:eb:40:a5:a8:e8:44:1c:f6:40:77:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.147.0/24
                IPv6:
                  2001:df5:a680::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:c4:4a:72:98:02:15:73:7f:57:01:cc:31:78:7f:9f:7c:
         68:92:7d:9a:7a:f2:25:47:12:08:fc:a2:16:73:42:e8:06:25:
         80:db:ca:24:1f:28:89:aa:f7:da:29:31:c5:a0:66:0d:9a:fd:
         08:38:ee:b9:c7:14:22:6c:98:6e:8b:91:cf:45:b0:cf:a8:74:
         6f:5b:d2:25:d4:55:7b:a9:56:87:35:f8:52:eb:89:c2:03:7a:
         18:b7:9e:b9:d3:ab:ce:68:55:03:eb:11:ae:2a:8e:60:7b:3e:
         7f:2b:47:b3:1a:dc:bc:18:d4:a5:06:23:a2:69:5e:23:2f:ac:
         47:d8:e9:68:11:37:1b:17:68:5a:b5:de:6a:08:c5:44:d8:e6:
         26:46:ba:d0:1a:b2:da:7a:88:6b:01:51:eb:5a:55:17:7e:4b:
         0a:f7:79:b8:88:c6:0d:82:a2:5f:d4:bf:41:83:24:12:74:25:
         d2:50:51:6b:dc:92:56:1e:09:80:c7:ff:63:4b:9a:f7:56:62:
         af:fc:c0:dc:4d:6c:db:f9:68:e3:5d:0c:94:26:fa:72:fc:4c:
         c5:35:84:ab:a9:cf:de:e7:13:f3:f3:0c:d2:ef:64:4f:b2:fd:
         c7:1b:f6:46:c9:a6:71:b4:a4:08:59:f1:67:db:34:d6:ef:61:
         ad:ed:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:44 2025 by rpki-client