Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
File:                     B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer (raw, json)
Hash identifier:          vKnWN87g9+DkPZhgUcXvPvCYHLZSmFE3zkiE1BbHNAI=
Subject key identifier:   B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0B591D2F87420ACDFDACB0F2A995538FD75E78EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 13:42:20 +0000
Certificate not after:    Mon 03 Mar 2025 13:47:20 +0000
Subordinate resources:    IP: 103.141.254.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 16:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:59:1d:2f:87:42:0a:cd:fd:ac:b0:f2:a9:95:53:8f:d7:5e:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  4 13:42:20 2024 GMT
            Not After : Mar  3 13:47:20 2025 GMT
        Subject: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:46:4b:b4:ed:ae:9c:2a:44:dd:0e:20:92:
                    59:5e:ac:00:92:1e:78:cd:16:61:be:76:43:ae:f9:
                    45:bf:cb:9f:c3:c6:92:1f:52:06:74:6a:56:b8:4a:
                    07:ca:16:22:f5:06:9e:90:33:63:26:96:6b:b8:f2:
                    3f:42:05:d6:59:ca:44:97:1f:08:b2:b3:74:fd:4e:
                    5b:5b:65:5a:83:60:6c:32:50:37:4e:b9:42:11:f4:
                    42:d3:d3:1f:4d:39:e6:55:a7:f2:8b:a8:0a:0b:77:
                    08:cb:0a:6f:02:38:ab:9e:ba:dd:8b:94:09:c9:fc:
                    3f:ef:04:ae:2b:f7:39:c5:37:20:9a:75:1e:e6:45:
                    9e:2f:1d:c1:f0:82:e8:cc:d2:a9:eb:0b:8e:a4:ec:
                    92:13:47:60:61:42:ad:ee:e5:73:ee:a1:d9:f2:18:
                    cb:58:28:0d:e0:4b:b5:43:35:89:ad:df:fc:62:0b:
                    7b:14:22:58:8a:0f:f8:c5:f7:fd:b1:9e:7b:f6:1f:
                    8c:00:bd:05:53:7f:cf:56:84:24:bc:c9:92:f9:21:
                    f4:de:3c:6d:95:8e:e6:db:b4:ea:40:b3:18:c8:f7:
                    d5:ba:25:54:bb:4e:5e:94:f4:07:6c:39:75:84:96:
                    b2:c3:c6:8d:b8:d7:e8:a1:10:81:d2:5d:37:db:dd:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:3d:0e:bd:db:32:fa:14:51:0b:b9:98:74:59:68:e1:b9:
         c3:be:8f:dd:21:b1:02:f9:28:1d:6e:89:51:1e:41:9c:00:e1:
         79:94:4c:d5:fc:31:15:3f:93:b1:3d:c5:dd:4d:34:5f:47:81:
         1e:b9:25:46:06:2a:76:8e:9e:d8:fd:ba:bf:23:ee:cf:1d:0c:
         30:c4:93:aa:19:f0:1e:16:4a:c2:73:f9:a3:46:e1:15:fd:b7:
         f3:01:af:ee:0e:ee:7a:26:4c:03:52:82:ea:3e:f9:85:4a:9b:
         fd:88:ee:41:ed:94:86:50:d3:d8:60:be:52:a3:3b:59:8a:a3:
         55:05:46:b8:ac:14:de:95:5c:47:70:dc:7e:9f:cc:e9:fd:b6:
         1c:16:29:0d:60:7d:51:44:4e:40:57:26:d4:f8:5a:64:a3:f5:
         80:cb:79:40:28:3f:9e:eb:49:7b:f9:3a:e0:15:77:5f:1f:1a:
         b6:df:aa:b7:db:62:d9:84:1b:f0:6b:db:bf:06:ca:16:22:6b:
         47:96:73:de:5c:88:ac:60:e8:fe:74:47:1a:7b:42:e5:57:61:
         d8:57:ca:fc:65:89:61:d4:be:9f:90:6b:13:8a:f1:13:76:87:
         dd:a1:7b:81:9f:3b:4d:1d:5f:69:b0:fa:b0:4e:16:23:31:4b:
         0a:cd:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:42:43 2024 by rpki-client on console-ams.rpki-client.org