Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
File:                     9F93097BE8B711227435ABF870C332F631C8D769.cer (raw, json)
Hash identifier:          QRMPi/lzumPV+xfj1QWdmRbQe9+jOolrNfW1glPMywA=
Subject key identifier:   9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3926238901E54D112E209CB685A97AFD4725019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 05:30:08 +0000
Certificate not after:    Thu 14 Aug 2025 05:35:08 +0000
Subordinate resources:    IP: 103.215.62.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:26:23:89:01:e5:4d:11:2e:20:9c:b6:85:a9:7a:fd:47:25:01:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 15 05:30:08 2024 GMT
            Not After : Aug 14 05:35:08 2025 GMT
        Subject: CN=9F93097BE8B711227435ABF870C332F631C8D769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:8b:3c:29:80:fc:ab:2e:9c:3c:2a:86:f3:
                    45:af:8a:d4:73:07:c2:9b:ed:84:66:0b:e8:3f:48:
                    c4:76:d6:a4:03:7b:ad:e8:1f:be:df:19:f0:33:b6:
                    34:09:89:b8:27:ce:ad:8d:93:db:c0:be:57:e5:26:
                    fa:70:42:39:d6:5b:89:90:31:53:46:a3:7f:c8:0c:
                    bb:03:24:c0:f0:b4:ed:aa:03:c7:05:4d:9c:ad:6b:
                    75:6b:f4:17:3c:54:df:be:07:9e:6d:ec:0e:b1:0d:
                    f5:38:ab:8d:2e:b7:51:56:3e:a1:10:94:2e:0b:a3:
                    a4:38:ea:d4:0b:80:44:73:8c:9d:9f:64:9d:17:a8:
                    dd:d9:76:76:62:3b:56:a8:a4:30:4f:ac:d0:31:b1:
                    cc:4d:a3:d1:eb:bb:02:96:be:e8:9b:f5:69:26:77:
                    6a:ae:d8:bd:92:24:ca:10:7d:ad:e3:cc:11:50:12:
                    aa:05:e7:e2:b9:eb:6f:63:2a:1b:26:a5:a9:87:36:
                    52:dc:5e:bf:a8:09:30:63:ad:31:2a:f1:0b:e9:b6:
                    53:7f:b0:5f:6e:40:07:42:eb:d5:36:34:17:51:e5:
                    cb:f2:8e:8d:16:d1:b0:43:ae:38:ca:ed:02:75:77:
                    af:fa:c9:fa:60:15:16:78:4f:39:09:fa:81:a6:ed:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:12:27:fa:cc:48:65:9d:45:52:31:ec:ed:2c:20:30:4d:
         9e:cc:c2:5e:00:16:a5:74:e9:c9:c7:93:ac:6d:64:5d:09:7f:
         6c:1d:91:63:d0:bf:9b:50:ef:a5:02:77:90:60:0c:49:05:47:
         ce:57:6e:54:f5:fa:b0:83:47:e5:d2:88:95:6e:12:2a:81:3c:
         5c:a2:57:0b:67:33:bd:54:03:cb:1c:7c:78:a1:5a:99:e5:4f:
         48:40:33:28:1c:90:e0:48:43:e8:2d:2b:04:df:6d:bf:4c:a6:
         c6:23:06:70:da:68:af:6a:7a:a4:f1:41:e9:35:42:11:16:bd:
         6b:6e:b9:d7:6d:26:62:d2:74:80:81:67:86:6b:e8:a5:59:c5:
         6c:13:4e:3d:ce:71:60:69:da:1e:8d:17:d4:f0:7c:2c:b1:fe:
         dc:1c:b2:27:0d:4b:00:15:66:e9:f0:a7:6f:e0:7e:f8:c1:8b:
         c9:13:57:d8:32:a4:46:c0:9e:59:7f:f0:09:58:b1:8b:2c:98:
         d2:c9:2c:c2:48:7a:82:73:ae:1c:76:33:4b:be:d3:7e:5a:a2:
         c9:a5:2b:36:09:51:63:5c:7c:41:fc:b1:8d:a8:93:c2:6a:4c:
         0e:b9:04:b0:c4:3a:09:66:4c:c1:d9:e8:eb:a1:e4:7a:53:42:
         a7:e7:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:52 2024 by rpki-client on console-fra.rpki-client.org