Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
File:                     A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer (raw, json)
Hash identifier:          mu3wS2ev9eWv7lxWqxSAaVqJhpM7yj3pxYBCRO/M9YA=
Subject key identifier:   A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       76DCA04AC9F7FC5F9FE2B60C85C94AF011AD7E8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Aug 2024 14:00:34 +0000
Certificate not after:    Fri 01 Aug 2025 14:05:34 +0000
Subordinate resources:    IP: 103.147.254.0/23
                          IP: 2405:c5c0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:dc:a0:4a:c9:f7:fc:5f:9f:e2:b6:0c:85:c9:4a:f0:11:ad:7e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  2 14:00:34 2024 GMT
            Not After : Aug  1 14:05:34 2025 GMT
        Subject: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:1a:90:b1:71:6a:fe:28:c4:23:37:2a:b8:
                    6f:86:af:78:45:c1:1e:ea:c5:c6:bd:12:12:8e:08:
                    40:9b:02:5d:f0:ce:44:57:68:09:74:2d:c5:11:7e:
                    4a:02:ed:f5:bc:0b:5f:40:8a:4d:11:05:0a:e6:e5:
                    4e:eb:fa:cc:37:e5:70:4a:b2:aa:92:f4:88:c5:37:
                    74:41:6a:d8:ca:d9:26:dd:64:96:f3:af:e6:eb:86:
                    46:78:5f:0f:d4:26:1a:5c:de:66:f0:c7:4d:d3:47:
                    55:ad:45:9b:13:0e:0b:96:15:ba:61:6b:05:8a:f1:
                    9c:f5:c2:28:c6:a2:83:d2:f5:08:41:2c:2b:97:5c:
                    33:d9:d5:94:da:58:d2:5e:ae:be:8b:c2:ad:b0:08:
                    ee:fa:13:a6:62:6f:5e:34:20:36:c4:54:18:91:53:
                    9d:07:81:3b:d2:1c:d3:18:de:3f:98:38:d9:3f:f4:
                    90:95:64:35:5f:c3:81:97:b2:64:ec:96:62:7c:a2:
                    6d:95:67:b3:5d:ba:27:a9:f0:8b:84:59:dd:83:52:
                    33:aa:9b:7d:aa:b2:80:bd:ac:20:e1:d9:e7:ba:6f:
                    4d:56:9f:9c:40:a3:f8:72:34:09:55:44:e2:dd:d0:
                    85:cd:23:25:8a:83:69:87:2f:eb:03:0e:3f:ba:52:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.254.0/23
                IPv6:
                  2405:c5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:ce:58:92:59:10:ed:48:66:08:78:a5:bc:0f:a1:9c:13:
         1d:8f:ac:a0:69:62:2a:2b:5a:0e:81:0d:3f:5b:2e:08:46:fb:
         a3:57:21:51:4e:c0:a5:76:6f:c2:df:96:8d:e6:a3:6e:fe:87:
         37:80:78:1d:c9:2c:f6:f2:31:d9:af:3f:2c:b5:aa:84:04:ae:
         54:27:53:65:c5:93:7d:11:fb:34:08:41:dc:f6:74:0e:7e:55:
         48:c2:bd:11:df:59:c6:60:76:30:04:77:e1:7a:74:aa:4a:98:
         10:36:56:db:84:79:53:65:73:cd:4f:45:ab:7f:bb:dd:1c:14:
         6d:d7:fa:17:35:e5:63:a1:fd:88:47:e5:43:2d:b5:0e:05:75:
         f8:dd:ba:ee:8a:25:62:92:f5:41:eb:5e:0c:56:bb:1b:27:c9:
         08:56:ff:f7:b2:9f:ad:a3:c3:45:7a:fc:87:ee:65:ae:8e:ca:
         9c:a0:cc:69:cb:8a:5f:c1:b7:fc:cb:7f:00:12:3b:c7:50:a9:
         80:fa:6f:75:3f:6b:2e:33:64:fd:ea:83:ab:49:5b:d8:d4:cc:
         82:91:e0:f4:b4:a3:ba:c5:cc:fe:ad:f0:cb:e4:48:1a:31:69:
         79:8a:c6:29:5a:f1:ae:35:a7:8e:d4:84:82:30:c1:a8:d0:76:
         17:1e:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org