Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer
File:                     C5E0183A7142717E23D90AF4650F1E14418D85C3.cer (raw, json)
Hash identifier:          9alxGn91xX4gAegXXUlvFvmKA/0qqXGo6oh7H1vAizo=
Subject key identifier:   C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18BB980B8811856242D2D4592DF5613F636C79D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Jul 2024 09:58:36 +0000
Certificate not after:    Mon 30 Jun 2025 10:03:36 +0000
Subordinate resources:    IP: 103.133.56.0/24
                          IP: 103.142.21.0/24
                          IP: 2001:df7:9b00::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:98:0b:88:11:85:62:42:d2:d4:59:2d:f5:61:3f:63:6c:79:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 09:58:36 2024 GMT
            Not After : Jun 30 10:03:36 2025 GMT
        Subject: CN=C5E0183A7142717E23D90AF4650F1E14418D85C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:9d:74:6b:51:0c:23:cb:8b:32:37:8e:1e:
                    82:56:04:84:6d:9e:0b:8f:3b:56:01:27:ec:5b:8d:
                    f1:95:71:91:d7:51:cc:09:9e:37:50:97:35:f1:09:
                    06:44:b3:8c:3a:91:26:e0:f0:86:44:b6:6c:7b:f4:
                    78:10:d3:c1:ff:1a:01:f7:67:04:db:48:41:8c:5a:
                    0b:25:8a:8c:bf:19:0b:9d:8e:ea:56:d2:5f:2d:d9:
                    36:fc:fe:8a:c8:fc:86:92:ab:45:d0:b9:5a:9d:60:
                    8e:32:77:51:03:eb:fa:7a:c6:54:27:0e:ec:77:24:
                    97:b5:35:0c:83:46:03:5d:a0:4a:a7:ca:e4:3b:54:
                    61:14:41:e0:7a:1e:77:e2:04:bc:a8:de:76:ab:a9:
                    26:bd:65:85:ec:83:58:23:68:0c:79:5f:c2:d4:37:
                    da:26:c8:3e:6c:da:89:1e:09:a5:6e:c4:ec:c1:de:
                    be:be:35:36:c9:60:1b:76:3b:13:ab:fd:f9:f8:f6:
                    08:f3:b4:3b:c6:df:dc:e9:2c:57:88:0a:a8:93:2d:
                    02:33:a0:83:24:3c:51:00:f7:ad:4f:33:3d:7c:ac:
                    d0:9b:51:b8:5e:ee:bd:8f:64:c1:24:42:89:59:1f:
                    7e:c2:96:ce:9b:ba:bd:62:77:c5:39:3f:24:1d:ac:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.56.0/24
                  103.142.21.0/24
                IPv6:
                  2001:df7:9b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:69:11:dd:dd:0a:fd:14:87:a7:a5:24:19:f3:22:7b:63:42:
         a4:70:10:68:d2:f8:93:92:52:4d:83:0c:9d:a0:d4:ba:aa:91:
         61:0b:ea:c0:cc:a2:59:55:a3:20:9b:be:63:52:2c:4c:d2:59:
         06:f8:57:db:89:16:21:83:10:7d:c4:e5:05:0e:42:cc:64:f0:
         ff:03:b3:0f:60:eb:21:69:11:a0:5f:6e:18:f5:2c:17:17:91:
         53:6f:83:81:6f:60:25:ba:53:69:9f:ee:9f:af:83:70:14:7e:
         5d:08:32:62:ed:86:84:ac:86:ca:00:44:5f:85:f1:76:31:74:
         7d:95:23:cf:66:5b:d0:a4:e6:15:4c:eb:fa:9f:7a:37:46:b6:
         3f:f1:fb:98:c2:7d:0f:e8:29:b1:8c:6e:e2:ba:f8:60:63:cc:
         33:4d:76:74:b7:e4:4c:25:dc:f5:ce:3e:73:68:87:31:ab:69:
         cf:ef:62:34:c2:1b:19:77:78:17:a8:fe:39:75:c4:8f:12:0e:
         a6:03:3e:37:b5:e2:a3:0e:90:31:ef:ef:bc:fd:ef:f1:63:2a:
         1d:9a:45:d4:94:66:02:38:fb:87:27:5a:3d:de:4a:55:56:70:
         90:28:01:a8:1d:38:9d:2c:24:a4:7a:7e:73:9d:20:d8:44:33:
         13:e3:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org