Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
File:                     926C43E6DACC18978406A2C9C57272491FFF9536.cer (raw, json)
Hash identifier:          oB9A0VDF1gQ/6q66CT8WjTYbU4qYaCIz6xb2tYWzi9g=
Subject key identifier:   92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       604BE9BAE4F0521CB17BA24018FD0B4ED90C78A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 10:36:03 +0000
Certificate not after:    Tue 16 Jul 2024 10:41:03 +0000
Subordinate resources:    IP: 103.155.224.0/23
                          IP: 2001:df4:da80::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 13:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4b:e9:ba:e4:f0:52:1c:b1:7b:a2:40:18:fd:0b:4e:d9:0c:78:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 18 10:36:03 2023 GMT
            Not After : Jul 16 10:41:03 2024 GMT
        Subject: CN=926C43E6DACC18978406A2C9C57272491FFF9536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c0:48:0a:af:e7:3f:e4:44:0c:62:9c:93:96:
                    8b:a8:2c:1a:eb:53:91:47:31:83:5b:67:eb:17:ca:
                    0b:01:2c:27:00:11:63:f9:74:8b:b2:f8:c8:bf:52:
                    5d:e7:30:2a:42:17:21:4e:f2:8c:21:e9:a1:42:82:
                    74:a8:a1:3c:cd:26:ab:33:81:5c:f4:56:bd:26:09:
                    4e:3a:ac:dc:37:54:58:a6:8a:f0:7a:c8:5a:dc:8c:
                    0f:19:55:bf:dd:01:dc:ab:77:03:65:ba:b3:1c:59:
                    dd:7e:2e:ba:a7:48:60:dd:28:7c:aa:dd:bb:21:62:
                    9c:88:08:19:8e:52:fa:cf:3d:fb:1a:73:16:6d:7c:
                    d6:a6:af:97:2f:78:b5:a0:e3:95:04:c4:b1:a4:6a:
                    d9:2c:86:dc:07:e0:92:79:05:9b:10:c7:c2:14:6b:
                    6d:f8:17:3a:d2:60:8b:e8:f7:41:e0:36:f0:e5:b9:
                    3f:ea:93:90:e1:ba:1d:13:c6:ce:83:87:91:2d:93:
                    5c:17:71:81:6f:9a:01:98:4b:3e:76:3a:e8:89:a4:
                    87:92:62:a1:34:10:55:27:a8:a6:ef:7e:d0:d6:7d:
                    45:50:c2:f2:f0:bd:f8:9e:72:1c:e5:e9:24:5d:35:
                    ce:93:77:1a:34:9d:1c:f2:2a:6a:f1:5e:4c:fa:01:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.224.0/23
                IPv6:
                  2001:df4:da80::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:26:c9:86:42:3a:fc:bc:f4:0c:d4:d2:da:e0:a2:49:d0:
         ac:56:6d:c5:78:78:c6:6c:9f:5b:89:49:1d:a9:0a:04:05:eb:
         cd:d9:0c:4a:b9:44:ef:f8:06:81:d6:d0:03:a6:6a:3e:7f:da:
         b2:18:31:5d:63:ad:e6:4c:d1:38:93:f1:ba:16:ee:62:dd:7f:
         15:75:d5:80:93:1f:2e:13:1d:cf:93:94:f2:1a:3a:4c:62:ef:
         4c:1f:b9:00:fe:9b:0f:f7:8e:df:1c:db:5d:98:fc:34:e8:21:
         d5:60:a1:e4:8f:1c:4d:27:5c:08:e9:db:34:c3:b4:9a:b2:d4:
         5b:94:c6:ef:a0:60:9b:f0:cf:43:bf:34:68:0a:79:53:88:14:
         db:e3:6d:ac:97:f4:a0:5d:18:5c:6c:1d:8a:83:ce:a1:31:cb:
         d1:d6:f6:92:e6:e7:b4:68:27:67:a9:03:ad:f4:2b:81:c2:2e:
         5b:b9:ba:99:f3:96:f2:93:76:87:7d:fd:d2:76:58:bd:35:87:
         03:15:d2:a9:dd:b2:5b:d6:eb:58:3e:dc:b9:b8:b4:92:5b:28:
         e2:6f:40:4b:a6:90:18:ad:e3:d0:6f:89:09:48:31:97:8d:74:
         e7:31:50:09:46:78:78:bc:45:5b:22:59:a8:50:47:47:da:40:
         39:f6:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:06:50 2024 by rpki-client on console-ams.rpki-client.org