Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer
File:                     A715B65580762207B94EC6527AFBEDD69970A868.cer (raw, json)
Hash identifier:          UXeywEgQQf24JTZR/QQzvV9maxbiStrZ5bom3b81jEg=
Subject key identifier:   A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54F3D089113E36AEA4F72634F8468E556E7145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 11:39:51 +0000
Certificate not after:    Mon 30 Jun 2025 11:44:51 +0000
Subordinate resources:    IP: 103.140.104.0/23
                          IP: 2404:fcc0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f3:d0:89:11:3e:36:ae:a4:f7:26:34:f8:46:8e:55:6e:71:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 11:39:51 2024 GMT
            Not After : Jun 30 11:44:51 2025 GMT
        Subject: CN=A715B65580762207B94EC6527AFBEDD69970A868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:ad:c4:04:2e:15:92:e9:06:35:6c:94:d5:
                    30:ee:36:4f:00:c7:5a:c8:08:6b:ad:3c:52:e9:49:
                    e8:a1:38:2d:dd:2b:75:05:0a:33:59:52:47:5b:96:
                    cc:8b:4c:ce:56:f0:4b:aa:f8:98:96:66:02:b9:7a:
                    29:4d:0f:c9:59:57:97:12:70:af:3a:c7:c2:bd:81:
                    e5:5a:bb:04:a7:43:cd:b0:dc:7c:e1:f8:2e:10:b1:
                    82:c9:b0:7d:99:16:84:c5:cf:cc:18:fb:14:ba:82:
                    31:c5:76:4b:58:a6:80:cb:bd:d8:43:b9:d1:45:d1:
                    1f:d6:9f:f7:85:12:22:9d:42:17:8b:4d:9e:35:9b:
                    84:fa:49:78:28:ac:75:e6:f2:af:0c:5c:39:2d:f6:
                    7f:7e:85:69:ab:5a:3a:d3:bb:61:4d:ad:89:28:2c:
                    37:d9:10:4b:54:40:22:09:41:4e:af:4c:97:8c:f6:
                    c0:0c:8b:9c:fc:30:8a:c9:35:6e:7c:11:99:57:bf:
                    2d:47:78:10:5e:54:2c:60:1d:9d:c8:a7:1b:e6:18:
                    82:94:9d:9c:95:6f:34:3d:5b:07:a5:be:6f:0f:d4:
                    78:14:16:dc:2c:67:7d:a0:d1:60:11:f8:1e:7c:3b:
                    a9:62:00:d3:11:d0:bc:d1:75:7f:b3:fd:f5:eb:da:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.104.0/23
                IPv6:
                  2404:fcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:c0:15:77:96:b0:e5:9a:84:c7:51:a4:2d:1e:cf:cf:bf:
         fb:db:d7:96:1a:75:1f:06:dd:d2:1d:58:d5:c8:71:e7:c9:fb:
         3d:93:12:99:22:9d:d2:19:d4:23:1f:ca:e1:44:e8:d1:54:c4:
         16:bf:a2:22:0f:7d:06:93:c7:d3:9e:d0:ba:ac:4c:42:e9:2d:
         27:bc:2f:5b:a3:73:e2:c4:16:d5:09:00:cb:ec:06:3b:47:97:
         a4:49:f3:f4:6f:d5:cc:f3:15:43:a4:55:bb:b7:a5:23:b8:53:
         4a:37:50:69:50:c2:9e:7d:da:be:22:5e:fa:b5:4a:3f:b8:63:
         4f:bc:7c:4f:00:50:7e:13:a3:7b:5f:e4:23:33:0a:ae:81:04:
         ec:b4:01:dd:4d:66:5a:51:cf:4a:3c:62:58:46:49:e4:8e:0b:
         11:6c:c3:5b:1e:ea:19:06:a4:bc:29:fe:8f:df:2f:b2:d6:25:
         49:fb:69:c5:53:3a:38:10:02:3d:5b:3a:65:e2:77:70:c8:85:
         24:9a:75:de:b2:42:39:22:6b:80:74:e0:3a:9a:33:1c:cf:c6:
         ae:d5:89:b3:48:8b:d3:51:23:47:bb:2e:66:79:e0:f1:b1:14:
         b4:94:56:07:13:69:47:77:6d:5a:0a:70:8c:bd:1b:ba:27:86:
         5d:61:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:52 2024 by rpki-client on console-fra.rpki-client.org