Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
File:                     C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer (raw, json)
Hash identifier:          el6UdnUOvbIm3LtzTaLjbeGtzGOYcmVhlHwjMc4BI/I=
Subject key identifier:   C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4AE168ADA313CC80168101CF31F73F9A474DB51E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 04:42:36 +0000
Certificate not after:    Tue 01 Jul 2025 04:47:36 +0000
Subordinate resources:    IP: 103.133.60.0/22
                          IP: 2404:48c0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e1:68:ad:a3:13:cc:80:16:81:01:cf:31:f7:3f:9a:47:4d:b5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 04:42:36 2024 GMT
            Not After : Jul  1 04:47:36 2025 GMT
        Subject: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:9f:b4:b7:32:d6:a1:3f:2d:13:b0:2e:9b:
                    a4:e9:58:16:2a:5b:2e:c3:95:78:6e:4c:0b:ae:b6:
                    a4:b5:66:0c:b5:ac:a8:db:d2:3e:23:35:35:0e:d9:
                    ab:0c:37:c2:74:2c:08:0e:de:96:27:23:29:d2:e8:
                    92:4f:c6:08:c5:74:39:01:e3:c8:8a:ff:6b:31:23:
                    5d:54:6a:6d:d8:cb:fe:80:58:7f:6b:4d:6e:e9:74:
                    af:64:a8:de:aa:36:3c:c7:c9:a0:99:d5:0b:a7:ba:
                    e2:7e:56:c6:0f:9f:a3:fc:8b:0e:ff:da:6e:0a:f5:
                    69:cb:6d:0e:5a:ff:6c:18:5d:4a:27:5c:b0:4e:20:
                    4d:5a:b7:0b:de:d7:10:87:87:51:bd:fd:13:1f:d9:
                    c1:07:0a:88:18:35:0f:d8:37:58:5a:b6:9d:fb:d8:
                    f8:0c:d5:4e:e2:d4:1f:65:b5:c8:b5:44:6d:65:d4:
                    fb:55:7b:7d:7b:45:eb:08:7d:2a:7d:8b:6d:8b:35:
                    9d:eb:da:0b:a7:03:73:23:21:85:6b:e6:eb:27:b9:
                    47:e7:10:2d:60:76:f0:f2:2c:f3:43:f5:e8:a8:4c:
                    45:e9:3e:59:e8:e2:62:4b:ee:90:56:01:1f:a8:1c:
                    6d:72:30:43:a7:28:32:51:5f:20:e8:4d:ea:c2:54:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.60.0/22
                IPv6:
                  2404:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:51:39:86:98:09:3e:dc:76:f0:a2:60:6b:ab:69:4a:08:63:
         8e:a1:1b:c3:6b:77:2d:6b:c9:70:60:31:74:27:1c:e6:c8:6a:
         e6:eb:55:d3:79:64:fe:2a:85:81:14:5e:5b:af:df:50:f6:f5:
         de:05:a1:0e:3f:ac:d5:a2:9c:19:f7:15:06:75:55:22:d1:b5:
         ef:ba:05:29:97:be:dc:bd:0c:a2:19:e2:38:6d:8b:02:cc:55:
         0b:d0:a1:f2:15:6c:03:6e:76:5a:f5:3b:ab:b6:4f:37:fc:ac:
         0a:1b:aa:2d:44:0f:d0:52:60:dc:65:14:bf:90:a4:16:c9:e1:
         75:cc:c4:66:13:80:c6:eb:05:01:9e:cc:da:6f:cf:aa:fa:da:
         b5:5e:5b:79:f8:b4:07:02:12:66:48:3b:b9:00:19:a6:ea:05:
         0f:41:99:2c:b7:a0:0f:e0:40:49:96:6a:97:f4:08:c3:14:56:
         55:eb:fc:67:9e:3e:34:1c:5d:76:63:75:41:94:51:c5:2b:ff:
         a4:99:5a:0e:63:2f:de:c3:2a:90:59:ae:0f:e9:a0:0e:97:36:
         df:2a:b7:57:e9:d6:13:f9:55:ac:3b:7f:c7:c3:03:77:90:7f:
         7e:e7:d0:e8:31:36:72:c7:9f:ed:5c:be:f6:30:a4:a4:29:69:
         b6:a7:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:32 2024 by rpki-client on console-ams.rpki-client.org