Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer
File:                     C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer (raw, json)
Hash identifier:          gmO0xsFkY9DA40/YegZYhouSM++j8DSs1E4OQgE/J2A=
Subject key identifier:   C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6DDC27380441188761DA87C321041ADA19B5C42A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 03:48:10 +0000
Certificate not after:    Wed 05 Mar 2025 03:53:10 +0000
Subordinate resources:    IP: 210.79.142.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:dc:27:38:04:41:18:87:61:da:87:c3:21:04:1a:da:19:b5:c4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  6 03:48:10 2024 GMT
            Not After : Mar  5 03:53:10 2025 GMT
        Subject: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:06:39:06:87:dc:2e:e8:de:c3:cb:6e:b4:
                    b3:c6:62:fb:2d:6a:9c:cb:62:04:72:e8:78:b7:5f:
                    1c:f1:44:27:90:5a:fd:a3:7a:c3:ec:04:9f:33:ef:
                    69:5e:3d:05:70:63:76:99:da:41:3e:e4:0c:6a:9d:
                    63:de:aa:4f:8c:dd:75:07:61:9f:78:f0:7c:47:10:
                    75:d0:47:90:56:f1:76:49:91:dc:68:65:59:01:eb:
                    ba:37:fd:2f:bd:82:d1:01:16:01:54:71:38:b1:28:
                    8b:27:eb:9c:37:48:7d:30:11:0d:80:18:6a:11:c2:
                    de:cf:92:db:56:d5:24:5c:02:2f:d2:47:42:4e:2a:
                    95:28:05:4c:ae:4a:ed:c8:d7:0b:aa:de:94:8c:9b:
                    f9:3c:6a:db:fa:5a:ea:01:13:84:44:d8:35:19:f9:
                    5e:b0:ef:ae:79:f0:60:31:7b:de:cc:4e:46:44:78:
                    3b:40:0e:62:0c:04:32:18:e5:88:2b:d0:07:52:98:
                    2c:8a:81:1e:36:0d:40:ca:a1:c6:15:1d:5a:70:aa:
                    15:8a:63:b9:07:bd:6a:6a:05:b9:75:a1:51:27:0f:
                    5d:35:01:a5:b6:b2:64:1d:fc:4e:d7:3d:65:35:68:
                    06:d0:53:af:7c:e2:a3:9c:e5:a6:f7:b4:b0:3c:34:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:1e:7c:41:ef:97:ed:fb:33:35:5f:37:13:f6:54:fd:59:
         14:d7:3b:63:d5:86:c6:e0:65:5a:49:ec:73:5d:54:18:41:21:
         25:38:60:46:2a:f1:29:03:31:30:a8:bb:70:f4:bb:8c:e4:2b:
         98:ee:fb:e2:f4:51:e2:1d:d2:c0:07:0e:87:dc:40:ab:39:7d:
         91:84:46:97:76:0f:35:7f:1e:e1:73:b6:9c:c5:f4:41:af:20:
         06:e5:4a:39:3a:11:1f:57:00:3b:f7:3e:17:29:23:1e:45:eb:
         63:dd:46:db:fb:da:c3:cb:93:58:4a:10:ec:35:83:18:24:d5:
         ea:ac:10:ba:ba:fc:c9:88:a4:e9:e6:09:19:c3:a0:86:6f:32:
         c2:ff:05:5e:60:89:82:22:98:49:d7:cc:f5:db:a3:d2:b1:64:
         5e:08:23:0b:10:6a:9c:80:44:55:73:f8:57:aa:15:8b:fc:a0:
         0d:f5:45:5f:35:97:e3:05:86:c5:53:b4:69:e5:29:56:37:c7:
         7c:2f:82:89:3f:99:fd:de:47:9e:2c:39:4b:99:f6:ae:ef:e4:
         f6:8a:47:50:79:43:6f:e6:b7:3c:40:49:a0:e1:20:26:45:9a:
         a2:6b:2d:91:e2:61:a3:4a:08:74:65:4a:08:96:ad:f6:e2:e6:
         b9:dd:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:02:27 2024 by rpki-client on console-fra.rpki-client.org