Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
File:                     9481EF5008E46F3618B42A0945A1522D5C041511.cer (raw, json)
Hash identifier:          7UoTm2pO77VGk7dAQPHlnYDaYUDe4EX9xXkdahNXMQU=
Subject key identifier:   94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       622B747CF737CFA3D4FB99B32922BB919E54A227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 11:49:33 +0000
Certificate not after:    Thu 02 Jan 2025 11:54:33 +0000
Subordinate resources:    IP: 103.59.160.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:74:7c:f7:37:cf:a3:d4:fb:99:b3:29:22:bb:91:9e:54:a2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  4 11:49:33 2024 GMT
            Not After : Jan  2 11:54:33 2025 GMT
        Subject: CN=9481EF5008E46F3618B42A0945A1522D5C041511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:1c:4e:d1:1f:f3:7d:70:58:3d:48:51:10:
                    bd:20:89:67:fe:1f:85:58:b3:54:d3:f1:cd:a3:c4:
                    1e:05:ad:c1:d9:c3:5d:f9:ad:7c:1c:bf:47:9e:f0:
                    7b:4f:58:3d:5e:4f:f2:78:ca:f1:61:ef:56:bc:32:
                    8c:d5:b2:22:3c:0c:a1:2e:13:f7:b8:78:2d:e5:73:
                    49:d3:73:b9:7c:0f:59:23:bb:7a:33:d1:68:80:a4:
                    ab:08:37:fa:81:c7:b9:2a:91:27:1e:f5:36:f1:54:
                    60:5e:88:fb:e6:a3:17:92:38:ab:b2:da:92:81:0d:
                    af:4a:f5:52:fb:f1:d2:65:40:6f:f7:49:32:a8:04:
                    50:1f:b0:9b:7a:40:87:49:31:56:8b:73:33:31:40:
                    52:a3:86:90:fc:11:61:46:26:b7:9c:d3:5f:26:07:
                    db:ad:4f:5c:7c:c3:99:23:6b:02:a5:40:05:9c:67:
                    d2:d9:e1:dd:ee:c2:16:75:64:b5:1f:0a:39:3a:78:
                    f0:59:b9:61:c8:6e:80:3f:49:64:ae:57:c8:07:72:
                    48:a3:7a:4c:fd:a5:d3:ef:ae:b3:0f:1d:b8:d5:48:
                    a4:b9:46:0e:6a:3c:9a:44:6a:be:fc:7f:79:f6:63:
                    01:d9:8f:75:23:10:0c:f9:41:72:d2:25:86:8b:b4:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:48:31:d5:ce:1e:55:fa:7b:40:ed:7b:f2:ca:3b:53:c3:bf:
         f2:82:c8:b5:e8:a9:e8:e3:22:bb:42:4a:ef:87:60:4e:df:0d:
         ff:da:f1:e9:0c:9b:09:14:9e:09:7a:fd:c8:9c:09:ab:3f:95:
         36:44:ed:8b:ee:a4:0e:18:10:c6:74:d1:f9:91:0c:b5:e1:59:
         71:27:ad:6b:87:48:dd:25:eb:de:f1:9b:ea:fd:cd:30:fd:52:
         c5:3a:e7:b7:f7:c7:e4:c7:3d:8a:5d:17:49:b7:c1:50:a8:ec:
         9a:43:04:9f:95:a1:ca:90:ae:37:d4:f1:a8:bd:03:a0:b1:d4:
         2f:4a:58:34:b8:4e:43:70:5a:e8:07:a7:9f:35:7f:29:0e:3b:
         36:92:c2:29:d7:bd:8b:d5:5e:47:3e:06:25:c9:ee:3f:56:63:
         3d:6d:97:b2:30:b1:dc:5c:69:14:51:53:ca:6c:da:5d:f5:29:
         a4:fa:87:49:f0:c8:df:80:a7:c8:69:1d:9f:57:ea:14:6a:a0:
         d9:95:05:b8:e9:ec:bc:2c:38:b0:dd:ee:ef:bf:87:a4:a6:2b:
         bf:7d:c0:e6:55:68:26:d8:d0:4a:bf:e0:f5:3b:65:3d:cf:2b:
         ff:07:02:1a:4e:40:63:49:63:25:2a:c0:eb:b1:90:5b:7e:95:
         da:49:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:44 2024 by rpki-client on console-ams.rpki-client.org