Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
File:                     A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer (raw, json)
Hash identifier:          1Bg9O9wpAUr1NNrNeETmlVRRQO/qrmwiEWZFf/54GRA=
Subject key identifier:   A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6DBD551A063859FDA2027F3DAB72E7D4C8502959
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 04:59:40 +0000
Certificate not after:    Tue 01 Jul 2025 05:04:40 +0000
Subordinate resources:    IP: 202.138.224.0/19
                          IP: 2403:9500::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:55:1a:06:38:59:fd:a2:02:7f:3d:ab:72:e7:d4:c8:50:29:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 04:59:40 2024 GMT
            Not After : Jul  1 05:04:40 2025 GMT
        Subject: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:e2:7f:ec:52:a9:df:b3:f3:16:46:3d:97:
                    40:f1:ef:a7:62:67:6a:0d:7a:a1:e2:5e:ff:d7:62:
                    31:fb:08:2d:e1:b0:ae:51:bd:72:46:c4:1f:aa:b3:
                    16:8e:87:9e:55:e7:6b:50:a8:23:31:ca:92:16:14:
                    b8:06:1b:b1:36:d7:12:7c:1a:b0:18:54:b0:8a:cb:
                    5f:f5:30:04:cd:c4:92:d4:f5:88:08:2a:f0:c7:e3:
                    44:8f:84:ed:5b:15:a5:16:04:79:3d:62:e2:58:95:
                    6d:ca:d3:98:16:16:1d:8b:0f:1d:a8:5f:ea:0f:0d:
                    5f:da:e5:54:93:4f:4e:d8:4a:3e:93:b8:89:b4:e8:
                    8a:7f:06:53:43:58:36:91:6b:41:80:73:3e:dc:91:
                    19:2f:6e:d7:1e:bb:27:bd:77:a2:77:fc:17:4e:95:
                    62:bb:15:a8:b3:5b:31:e0:b4:45:83:d3:17:fb:85:
                    97:cd:f8:f2:e4:c3:ba:01:b3:c8:87:ad:d0:1b:92:
                    e9:6b:59:1b:fa:02:0e:db:7a:ac:27:2d:13:91:9a:
                    02:f3:a2:95:f4:6d:99:46:93:c6:32:e9:87:59:5f:
                    53:af:a5:f9:57:b4:1d:3b:7e:ff:6d:a0:5a:30:06:
                    96:36:ee:98:46:0d:c9:a5:ea:6e:8e:75:50:d9:94:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.138.224.0/19
                IPv6:
                  2403:9500::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:39:b3:f9:c9:2a:5a:dc:58:38:12:be:ca:02:c8:e8:0e:
         1a:45:8c:28:70:e0:87:9b:bc:10:b5:03:cb:9c:77:b9:93:91:
         43:86:a1:16:5f:6d:08:2a:29:ff:5d:f4:48:35:5c:3e:22:6d:
         94:ad:40:1f:b1:57:69:02:70:ab:00:f2:3c:f9:fb:f7:64:fb:
         93:75:d3:45:01:6f:63:ea:2a:61:54:2f:0c:2a:7f:9f:95:06:
         af:2c:9f:42:5b:20:73:16:40:ae:09:9f:c1:a7:62:c3:c9:18:
         e0:37:ef:db:18:b2:ec:8e:ec:42:29:11:74:6e:33:6b:59:9e:
         ea:72:e9:cc:6a:84:a0:af:f0:ab:09:bc:46:46:68:4d:e1:b8:
         03:d9:67:dc:17:a6:54:84:7b:88:1e:91:88:b7:8c:7b:4a:4d:
         df:8f:86:fd:b9:01:60:38:c8:b2:9b:fa:96:ac:f9:49:c3:f0:
         f1:4a:e6:0f:f2:9b:f8:44:61:0f:7e:98:47:61:b0:ef:47:6f:
         81:75:83:06:36:08:e8:13:03:93:86:3f:c5:8f:00:37:a2:1d:
         25:71:eb:20:32:e9:c3:4e:5f:9c:c0:50:3e:5e:92:71:05:7e:
         54:26:4c:17:02:a1:4e:62:d6:59:5a:f0:e3:f0:07:b7:08:3f:
         35:41:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org