Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
File:                     A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer (raw, json)
Hash identifier:          laFRHJbhk5NYifBrJvhdu9mJmherpv9JFNATS+CNGto=
Subject key identifier:   A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6A77AD75DFB2032B6FEA6B38DF9652225E5A13DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 Nov 2024 04:34:07 +0000
Certificate not after:    Sun 02 Nov 2025 04:39:07 +0000
Subordinate resources:    IP: 202.146.176.0/21
                          IP: 2404:4200::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 06:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:77:ad:75:df:b2:03:2b:6f:ea:6b:38:df:96:52:22:5e:5a:13:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Nov  3 04:34:07 2024 GMT
            Not After : Nov  2 04:39:07 2025 GMT
        Subject: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:a2:bf:00:82:53:c8:6a:9e:b5:ab:22:81:
                    79:45:b9:fa:c3:2a:93:4d:a3:f3:1a:cb:e6:a1:f3:
                    89:83:01:e1:0d:86:b2:f9:6b:ae:73:1b:6b:dc:f9:
                    bb:4b:4e:f5:c2:27:64:91:a2:f9:67:f4:07:49:20:
                    7f:c3:f9:5b:bf:7d:a0:94:00:78:de:a4:cb:0a:2e:
                    b5:39:e6:d9:28:40:fc:d1:48:c2:7e:00:57:54:79:
                    6f:02:ee:8d:f4:93:fe:1f:17:20:4a:c3:69:0d:c1:
                    76:e0:90:40:af:3b:91:a0:03:b4:cc:48:dd:fa:94:
                    65:e1:0e:d0:85:bd:77:5b:fd:64:ae:79:6a:58:b5:
                    45:e4:ce:fd:33:0d:bd:ac:e3:16:6e:e8:7a:36:56:
                    90:11:6d:8a:68:ca:c5:5d:fe:c7:41:51:5c:29:a2:
                    a0:ed:94:e8:c0:6c:a9:51:52:7a:55:df:16:fa:c8:
                    cb:06:f2:ef:c4:39:32:00:d8:61:fb:c5:31:01:ab:
                    e8:a5:6f:33:65:3e:e0:88:cd:2b:94:d5:1b:1d:8d:
                    a8:5b:57:13:0a:51:b9:a5:59:b0:09:f7:ec:25:fe:
                    c5:78:7b:14:3a:ce:b6:6e:3a:b0:63:55:7d:c7:99:
                    61:17:d1:ff:8b:d6:d7:f4:ae:38:a6:7b:0c:1c:b3:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.146.176.0/21
                IPv6:
                  2404:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:57:e1:82:79:5b:a9:1f:fc:07:bd:67:1c:01:b9:20:76:
         2d:fa:5d:05:fc:e8:30:34:60:b2:76:83:56:e4:c6:d9:e7:cd:
         f0:4b:28:51:f1:8f:49:d0:c6:85:e1:0d:c7:33:37:2d:60:25:
         99:24:e1:17:f6:8e:ad:0f:19:29:bb:a8:c6:05:7e:a6:fc:b7:
         c5:29:e0:09:88:61:53:03:31:2a:bb:f9:2e:70:77:95:d9:62:
         bc:61:db:e1:b2:84:97:e5:fc:3d:73:d2:ec:e7:42:de:34:6d:
         22:e2:d5:92:a5:d2:d0:ef:32:c0:47:e2:f4:df:01:8e:90:15:
         73:93:b6:0f:d9:5b:dc:d3:7a:2c:4f:d1:d5:b8:31:8a:d0:a1:
         08:bf:2d:b2:5d:fd:35:21:8a:17:4d:c2:46:8f:10:c3:59:a8:
         46:47:6b:db:ed:fb:71:eb:9a:f0:a6:a8:cf:c6:d5:d9:c8:27:
         df:47:62:a4:89:15:4d:dc:98:9f:a4:b9:4a:89:dd:10:de:14:
         df:37:fc:9e:d2:eb:6a:93:1b:e2:54:5b:cb:ca:e9:01:39:48:
         20:a8:19:2f:0a:c9:7f:51:54:cb:53:ca:93:10:a4:f2:63:79:
         0f:06:fb:3d:fc:c3:b6:d7:09:8a:bb:cf:6a:90:49:91:b2:ee:
         60:57:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:32 2025 by rpki-client