Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer
File:                     A715B65580762207B94EC6527AFBEDD69970A868.cer (raw, json)
Hash identifier:          IO/6r1x3vDyCBfYqQVp+yJ3PrpepgPCPb7czSy9FY90=
Subject key identifier:   A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6B199C714EB5E20374A0C59EBB43FA733958D7B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 30 Jul 2023 23:59:01 +0000
Certificate not after:    Mon 29 Jul 2024 00:04:01 +0000
Subordinate resources:    IP: 103.140.104.0/23
                          IP: 2404:fcc0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 17:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:19:9c:71:4e:b5:e2:03:74:a0:c5:9e:bb:43:fa:73:39:58:d7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 30 23:59:01 2023 GMT
            Not After : Jul 29 00:04:01 2024 GMT
        Subject: CN=A715B65580762207B94EC6527AFBEDD69970A868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:ad:c4:04:2e:15:92:e9:06:35:6c:94:d5:
                    30:ee:36:4f:00:c7:5a:c8:08:6b:ad:3c:52:e9:49:
                    e8:a1:38:2d:dd:2b:75:05:0a:33:59:52:47:5b:96:
                    cc:8b:4c:ce:56:f0:4b:aa:f8:98:96:66:02:b9:7a:
                    29:4d:0f:c9:59:57:97:12:70:af:3a:c7:c2:bd:81:
                    e5:5a:bb:04:a7:43:cd:b0:dc:7c:e1:f8:2e:10:b1:
                    82:c9:b0:7d:99:16:84:c5:cf:cc:18:fb:14:ba:82:
                    31:c5:76:4b:58:a6:80:cb:bd:d8:43:b9:d1:45:d1:
                    1f:d6:9f:f7:85:12:22:9d:42:17:8b:4d:9e:35:9b:
                    84:fa:49:78:28:ac:75:e6:f2:af:0c:5c:39:2d:f6:
                    7f:7e:85:69:ab:5a:3a:d3:bb:61:4d:ad:89:28:2c:
                    37:d9:10:4b:54:40:22:09:41:4e:af:4c:97:8c:f6:
                    c0:0c:8b:9c:fc:30:8a:c9:35:6e:7c:11:99:57:bf:
                    2d:47:78:10:5e:54:2c:60:1d:9d:c8:a7:1b:e6:18:
                    82:94:9d:9c:95:6f:34:3d:5b:07:a5:be:6f:0f:d4:
                    78:14:16:dc:2c:67:7d:a0:d1:60:11:f8:1e:7c:3b:
                    a9:62:00:d3:11:d0:bc:d1:75:7f:b3:fd:f5:eb:da:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.104.0/23
                IPv6:
                  2404:fcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:a2:1c:b7:59:68:80:79:ef:e9:9c:f6:54:1d:39:c6:f3:
         b1:0c:25:30:4e:2b:3f:30:e7:8f:bb:ed:2e:4f:90:1e:19:27:
         3c:55:90:42:83:b5:29:fb:ee:7c:d5:be:8d:43:72:a0:00:78:
         34:b8:bc:a6:04:63:f6:31:e8:3c:bc:10:58:d1:49:e2:b6:75:
         2d:8a:17:bd:7b:23:bc:a7:a6:0f:6d:11:80:89:8d:8d:92:6a:
         ea:1d:f5:2e:dd:1f:fb:64:2d:15:4f:5f:6e:68:2a:3b:94:2d:
         93:c8:57:c3:32:17:01:aa:ef:92:fb:c3:bb:1b:c0:a2:21:5f:
         76:33:48:15:ce:39:d3:ec:c1:70:31:1a:f8:34:d4:29:50:99:
         48:0a:26:76:15:2f:d1:45:49:44:c3:34:68:f5:d3:92:32:cc:
         d5:fc:0a:3d:0e:68:0c:5f:b2:33:c4:9b:52:a4:48:8d:16:33:
         2e:f7:c2:a2:4e:ff:d1:40:bb:b1:77:56:fc:e1:fb:b0:08:51:
         cf:f3:f1:6f:0d:df:e1:19:81:d5:1b:a8:5c:ee:65:dc:35:46:
         cc:c6:28:fb:35:9c:a9:3a:ed:48:3f:1c:8b:ea:fb:13:e3:87:
         32:4f:4b:fa:24:b4:a5:6e:05:76:48:76:2e:04:b5:e7:15:d2:
         e4:cd:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:17:40 2024 by rpki-client on console-fra.rpki-client.org