Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/93B49EA86589396F687875020DE4D17DE244CD6E.cer
File:                     93B49EA86589396F687875020DE4D17DE244CD6E.cer (raw, json)
Hash identifier:          LpXZKLZVUnJ6WwTue0MjWoJZMoDiwY4QdeplSIlDoc8=
Subject key identifier:   93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18BED7EE18EB2366761AADBB947BBB837CEF2D75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 02:51:54 +0000
Certificate not after:    Thu 09 Jan 2025 02:56:54 +0000
Subordinate resources:    IP: 2001:df3:5bc0::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:be:d7:ee:18:eb:23:66:76:1a:ad:bb:94:7b:bb:83:7c:ef:2d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 11 02:51:54 2024 GMT
            Not After : Jan  9 02:56:54 2025 GMT
        Subject: CN=93B49EA86589396F687875020DE4D17DE244CD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:d3:47:44:ba:72:a6:f0:39:f1:5f:7f:f1:
                    ef:6f:c6:8e:30:78:ed:38:24:5a:71:c7:e2:c8:bf:
                    81:bf:57:d7:e4:eb:19:64:84:d4:15:55:87:a5:8a:
                    12:fc:5a:df:77:8b:7e:54:56:be:16:54:63:5e:ef:
                    b4:6b:b6:88:ea:50:8b:43:68:35:71:47:7b:14:69:
                    9d:68:20:9d:bf:18:e3:0e:b7:15:4a:5f:4b:63:5c:
                    c9:21:7f:27:1e:f3:fc:17:ac:e8:e5:86:19:aa:b8:
                    98:33:da:6e:1c:41:83:89:7c:b4:92:57:1e:b8:1e:
                    fa:e0:52:c0:a4:f3:25:1c:24:09:75:29:16:a1:21:
                    81:73:2d:03:b1:ba:92:f1:d6:9a:49:9d:58:bb:c6:
                    c9:31:a0:76:20:34:59:47:4a:32:6c:41:13:11:57:
                    ba:3e:c9:ba:2f:40:ba:1a:06:97:03:5f:0b:4f:13:
                    e2:fa:f6:2f:3a:4c:3c:cf:2d:1a:55:db:1d:44:36:
                    88:88:f2:1d:e0:ed:45:c4:42:d4:a4:d0:14:96:b9:
                    78:02:9b:29:ab:ea:84:cb:0b:a8:fe:53:84:b8:13:
                    e7:dc:af:ce:98:45:f6:4f:82:14:cd:fd:a6:01:4d:
                    cc:c7:0c:58:19:b8:c9:d2:69:e9:6f:1a:86:74:5d:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:5bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:88:08:17:35:2e:ca:a9:89:e8:04:89:75:8e:a3:d3:94:b1:
         cb:ed:b6:44:31:0f:37:59:a5:21:0a:14:1f:57:26:b4:37:7f:
         4f:2d:d4:44:f2:3e:8f:ec:25:e4:3d:0a:06:b5:34:d2:b0:97:
         3b:ac:bd:a4:3e:e2:d2:e0:a6:0e:a8:1b:2c:a0:50:85:9d:cf:
         dc:e4:b2:12:1d:34:65:fd:15:04:df:ef:2d:45:92:f0:8d:3c:
         fe:60:89:eb:32:bf:4a:d6:a5:6a:9b:4d:1c:e1:12:47:92:02:
         12:94:8e:db:fb:96:9c:66:27:c9:a1:33:6c:fe:12:27:4c:4a:
         10:0a:e6:2a:15:7b:6b:63:a3:4e:0e:d0:33:20:35:c4:25:b3:
         58:38:28:80:4c:3e:10:d5:f7:e1:41:59:a0:a3:e3:c9:02:8f:
         3b:5e:a3:15:4b:50:f7:c5:c5:c8:5b:47:66:fd:ee:b1:2e:98:
         17:96:b7:67:ef:a7:89:1f:b3:5f:96:8a:ff:37:65:a9:13:6d:
         38:d9:21:bc:df:03:a4:14:70:f9:ea:dc:d0:ef:bc:00:59:91:
         31:55:64:c6:40:bd:59:95:f0:33:f0:41:c3:8e:52:43:33:0f:
         c2:89:ad:47:b3:9b:06:54:0d:06:f3:c2:a8:72:28:c6:68:a3:
         33:55:83:01
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUGL7X7hjrI2Z2Gq27lHu7g3zvLXUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExMTAyNTE1NFoX
DTI1MDEwOTAyNTY1NFowMzExMC8GA1UEAxMoOTNCNDlFQTg2NTg5Mzk2RjY4Nzg3
NTAyMERFNEQxN0RFMjQ0Q0Q2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALh400dEunKm8DnxX3/x72/GjjB47TgkWnHH4si/gb9X1+TrGWSE1BVVh6WK
Evxa33eLflRWvhZUY17vtGu2iOpQi0NoNXFHexRpnWggnb8Y4w63FUpfS2NcySF/
Jx7z/Bes6OWGGaq4mDPabhxBg4l8tJJXHrge+uBSwKTzJRwkCXUpFqEhgXMtA7G6
kvHWmkmdWLvGyTGgdiA0WUdKMmxBExFXuj7Jui9AuhoGlwNfC08T4vr2LzpMPM8t
GlXbHUQ2iIjyHeDtRcRC1KTQFJa5eAKbKavqhMsLqP5ThLgT59yvzphF9k+CFM39
pgFNzMcMWBm4ydJp6W8ahnRdjksCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJO0nqhliTlvaHh1Ag3k0X3iRM1uMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by83MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMTCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMmU0Zjg2
LTQ4ZTctNDhjNy1iYTkxLWUyNTk2ODM3OGU5NS8xLzkzQjQ5RUE4NjU4OTM5NkY2
ODc4NzUwMjBERTREMTdERTI0NENENkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQ3zW8AwDQYJKoZIhvcNAQELBQADggEBAGOICBc1LsqpiegEiXWOo9OUscvt
tkQxDzdZpSEKFB9XJrQ3f08t1ETyPo/sJeQ9Cga1NNKwlzusvaQ+4tLgpg6oGyyg
UIWdz9zkshIdNGX9FQTf7y1FkvCNPP5giesyv0rWpWqbTRzhEkeSAhKUjtv7lpxm
J8mhM2z+EidMShAK5ioVe2tjo04O0DMgNcQls1g4KIBMPhDV9+FBWaCj48kCjzte
oxVLUPfFxchbR2b97rEumBeWt2fvp4kfs1+Wiv83ZakTbTjZIbzfA6QUcPnq3NDv
vABZkTFVZMZAvVmV8DPwQcOOUkMzD8KJrUezmwZUDQbzwqhyKMZoozNVgwE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:24 2024 by rpki-client on console-ams.rpki-client.org