Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
File:                     C79C17C4F5C843791A7028B499932A84B65CD399.cer (raw, json)
Hash identifier:          voFqU8f4cir89O6Cm0pETnerV6cnn85QCTt9ftAiGbI=
Subject key identifier:   C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1CE88888223B91CC58305786C9E4EB986935ABF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 12:14:34 +0000
Certificate not after:    Tue 01 Jul 2025 12:19:34 +0000
Subordinate resources:    IP: 2001:df3:dfc0::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e8:88:88:22:3b:91:cc:58:30:57:86:c9:e4:eb:98:69:35:ab:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 12:14:34 2024 GMT
            Not After : Jul  1 12:19:34 2025 GMT
        Subject: CN=C79C17C4F5C843791A7028B499932A84B65CD399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:fe:56:67:00:da:3a:7c:b0:67:3b:0c:c2:
                    de:af:45:dc:0b:53:09:48:0e:8b:fd:b6:53:b7:eb:
                    ae:b7:cd:2f:ee:96:ee:0d:3c:b9:9f:d1:ed:af:c3:
                    34:e9:1d:c2:38:62:e8:75:b7:00:7b:91:80:6d:f7:
                    91:cc:fa:5b:c6:ef:93:6e:d9:dd:5f:87:7d:71:61:
                    01:7d:f4:96:27:8c:cc:7d:87:72:fb:97:33:0c:c8:
                    9f:ad:6f:39:d2:4b:b0:88:c5:9d:22:e7:37:f2:9c:
                    3e:25:dc:90:77:83:98:b2:16:2b:c0:16:80:6c:4b:
                    bb:21:a2:6b:de:b8:f5:69:e2:8e:88:18:fc:0b:86:
                    19:d7:f8:f2:57:16:42:94:ea:29:63:2f:bc:7c:04:
                    f8:e7:05:00:ca:53:23:e2:20:f0:e1:06:6f:57:54:
                    3a:b7:88:32:ed:b8:30:7b:61:42:a6:d1:4e:94:46:
                    b0:96:e6:69:d4:10:42:10:a7:3f:96:ce:cf:a1:be:
                    8e:4c:90:75:06:6e:0c:f6:be:c2:2c:da:bb:4b:d8:
                    46:43:e2:66:d9:5e:37:75:76:b5:0e:14:dd:d7:e8:
                    62:45:6b:6d:65:06:cc:b4:02:fa:2f:6a:23:c2:83:
                    0a:e1:da:cd:0a:6e:23:8c:92:8e:44:25:d2:5e:8f:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:dfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:9a:e1:9d:35:c8:5e:d8:aa:ad:27:1a:15:48:60:f9:14:
         09:fe:48:64:d3:16:90:4a:e1:00:fe:c8:ca:b1:c9:c0:37:58:
         d3:fc:05:c3:ef:1b:8a:ea:47:b7:3d:f2:9e:4d:e0:77:4f:d9:
         53:76:9e:a6:ef:2e:20:4b:79:c4:5f:4d:26:b1:7d:be:0e:d4:
         fd:9b:89:5e:3b:16:b1:76:78:04:7b:b6:b3:5b:76:2e:15:ee:
         8b:82:ee:dc:c3:57:3b:92:34:a1:c4:80:91:98:c2:7e:a4:2a:
         a3:bf:c6:c0:c7:59:35:20:44:7e:dd:33:7f:c0:27:07:30:6a:
         67:8a:f9:21:27:66:1d:3d:2a:95:44:e4:53:b3:8d:e2:5a:07:
         e1:0e:b9:fd:c6:b0:06:c7:4b:98:e7:5c:1d:5b:f0:22:17:9d:
         a0:54:39:bb:9a:de:7a:58:fb:a8:8d:fb:db:49:5a:84:45:80:
         88:51:42:73:c6:75:eb:49:dd:b8:20:d2:54:eb:9a:cc:36:e3:
         66:e3:fc:0d:be:34:e4:9e:7c:bc:a5:5b:c2:bf:c0:2b:3f:b7:
         c9:74:61:3a:74:70:bc:25:a2:33:26:d2:40:2a:54:0c:f8:b3:
         72:b0:f5:11:54:9c:2a:2d:6c:63:d2:8b:c3:d7:34:4e:66:b1:
         4e:97:da:99
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUHOiIiCI7kcxYMFeGyeTrmGk1q/kwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjEyMTQzNFoX
DTI1MDcwMTEyMTkzNFowMzExMC8GA1UEAxMoQzc5QzE3QzRGNUM4NDM3OTFBNzAy
OEI0OTk5MzJBODRCNjVDRDM5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMaL/lZnANo6fLBnOwzC3q9F3AtTCUgOi/22U7frrrfNL+6W7g08uZ/R7a/D
NOkdwjhi6HW3AHuRgG33kcz6W8bvk27Z3V+HfXFhAX30lieMzH2HcvuXMwzIn61v
OdJLsIjFnSLnN/KcPiXckHeDmLIWK8AWgGxLuyGia9649WnijogY/AuGGdf48lcW
QpTqKWMvvHwE+OcFAMpTI+Ig8OEGb1dUOreIMu24MHthQqbRTpRGsJbmadQQQhCn
P5bOz6G+jkyQdQZuDPa+wizau0vYRkPiZtleN3V2tQ4U3dfoYkVrbWUGzLQC+i9q
I8KDCuHazQpuI4ySjkQl0l6PKUsCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFMecF8T1yEN5GnAotJmTKoS2XNOZMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9lMjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMTCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyNTZiYmJh
LTE4MjYtNGQ4Ni1iODczLTJmNmRkNjMyNTc3MS8xL0M3OUMxN0M0RjVDODQzNzkx
QTcwMjhCNDk5OTMyQTg0QjY1Q0QzOTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQ3z38AwDQYJKoZIhvcNAQELBQADggEBAHpTmuGdNche2KqtJxoVSGD5FAn+
SGTTFpBK4QD+yMqxycA3WNP8BcPvG4rqR7c98p5N4HdP2VN2nqbvLiBLecRfTSax
fb4O1P2biV47FrF2eAR7trNbdi4V7ouC7tzDVzuSNKHEgJGYwn6kKqO/xsDHWTUg
RH7dM3/AJwcwameK+SEnZh09KpVE5FOzjeJaB+EOuf3GsAbHS5jnXB1b8CIXnaBU
Obua3npY+6iN+9tJWoRFgIhRQnPGdetJ3bgg0lTrmsw242bj/A2+NOSefLylW8K/
wCs/t8l0YTp0cLwlojMm0kAqVAz4s3Kw9RFUnCotbGPSi8PXNE5msU6X2pk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:33 2024 by rpki-client on console-ams.rpki-client.org