Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
File:                     B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer (raw, json)
Hash identifier:          1nKXu4fk9m01JN79J9lZM0ec9sVVh0Rt5hub0hO36bs=
Subject key identifier:   B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6B2E6B66EB29FC676898CFA9C1C59A134C8C1119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 Jan 2025 23:18:20 +0000
Certificate not after:    Mon 05 Jan 2026 23:23:20 +0000
Subordinate resources:    IP: 103.185.46.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 12:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2e:6b:66:eb:29:fc:67:68:98:cf:a9:c1:c5:9a:13:4c:8c:11:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan  6 23:18:20 2025 GMT
            Not After : Jan  5 23:23:20 2026 GMT
        Subject: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:b2:22:08:de:0c:0a:af:8d:0e:54:3b:6f:
                    29:82:78:5a:da:f6:e4:ee:cc:57:04:81:d2:63:56:
                    77:72:b6:e6:41:3e:5e:ad:51:e2:75:58:02:bb:bc:
                    5b:88:63:fb:24:cb:74:73:53:e7:59:7e:e2:cb:a9:
                    78:7a:a4:d4:9c:2f:c8:b9:01:40:58:15:d8:0e:70:
                    ef:25:a2:52:ba:fb:23:6a:3f:c5:e8:0d:c4:11:01:
                    e1:a3:66:2c:b7:c6:0b:74:d3:ff:d3:20:9a:21:23:
                    88:96:c0:14:4c:8a:99:e9:70:04:50:06:a5:e5:03:
                    c3:88:81:63:aa:39:f0:d6:ba:80:b6:7d:91:33:84:
                    f6:40:77:69:5b:54:35:76:4e:39:ad:14:cc:72:48:
                    e8:e6:a2:93:14:66:c3:5c:f1:8b:33:a3:7e:43:18:
                    cf:9a:7a:e6:3e:9d:8b:c9:58:3c:47:89:2a:ea:61:
                    88:a7:38:7e:b4:dc:c5:28:f9:12:f1:4c:77:81:bb:
                    02:02:6b:8c:dc:9b:12:6d:7d:f2:d8:19:3f:71:35:
                    fb:e5:61:e0:0c:4d:c9:76:dd:13:78:60:a1:23:f9:
                    9e:bd:76:24:dd:47:5a:1c:ea:b9:6e:e9:bc:e3:cb:
                    0e:62:05:f7:73:22:cf:f8:6f:4d:1c:44:4e:23:70:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:89:20:ed:f4:a9:42:5d:65:f2:36:85:ae:82:16:9d:4f:fd:
         95:60:3f:e0:9a:df:54:89:28:d2:1d:17:3e:2d:00:78:8c:43:
         73:2d:b3:f5:71:de:26:fa:54:15:fd:b8:ae:f8:52:f0:b6:dc:
         d6:c9:b7:cf:11:25:62:d9:a2:30:94:06:cc:22:03:43:60:c0:
         22:e4:8d:b6:a7:4a:47:1d:7d:aa:c8:ce:0d:9a:a3:a3:ec:f8:
         c2:83:b3:b0:24:4b:20:fd:fc:1a:27:fd:3b:ea:98:97:0b:fc:
         03:b4:de:7b:f0:51:bf:54:a5:05:67:2d:9d:c9:5a:e9:21:df:
         71:1e:7a:5b:3f:15:a4:b2:65:47:4b:73:c1:a4:5c:02:ad:24:
         89:12:a7:f5:ac:c4:bf:d9:ba:4a:ca:e5:93:31:b8:1e:05:1e:
         75:ef:df:96:54:96:53:02:6e:7f:fc:b0:d2:1f:8c:77:49:d2:
         90:fa:4c:cc:fd:9c:ad:3b:0b:6f:14:91:9a:dc:0e:2c:43:ab:
         2c:86:24:76:16:c1:98:bd:fa:c2:a8:00:4d:87:56:2d:25:66:
         17:92:09:b0:d9:9d:1d:75:05:2a:70:d0:87:e2:90:1d:dc:1a:
         e2:65:06:1d:19:ec:e3:38:f2:98:ae:19:64:f2:c5:4b:ad:45:
         e6:3d:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:54 2025 by rpki-client