Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
File:                     C85C49978E8023F2D58521524D4EC616244CDC14.cer (raw, json)
Hash identifier:          6KAgbesWOwt37oQTm2y/cWKca1Uv024rqORTmOVMiEk=
Subject key identifier:   C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       274392D2BA7FF01C69BA6D5803CF6F9ECF8EC57C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Jul 2024 22:58:07 +0000
Certificate not after:    Thu 24 Jul 2025 23:03:07 +0000
Subordinate resources:    IP: 103.239.214.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:43:92:d2:ba:7f:f0:1c:69:ba:6d:58:03:cf:6f:9e:cf:8e:c5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 25 22:58:07 2024 GMT
            Not After : Jul 24 23:03:07 2025 GMT
        Subject: CN=C85C49978E8023F2D58521524D4EC616244CDC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:06:fc:a1:8a:e6:c9:68:ad:0f:9f:fe:4f:
                    2b:87:c7:45:6b:ac:10:ac:85:fa:1c:f8:00:0c:13:
                    60:1b:1c:13:ac:c7:c8:97:88:fb:37:92:8b:4f:b7:
                    fd:e1:86:0b:7b:5e:ed:72:1e:aa:6d:11:57:56:4e:
                    a0:b9:1e:71:eb:ad:13:b8:0c:1d:c5:f4:98:7c:08:
                    16:30:fa:30:a4:99:ec:20:c1:52:96:93:95:ec:ff:
                    29:d7:ad:64:e8:12:9c:51:4a:6a:12:d6:b3:20:dd:
                    9a:f7:e6:73:46:af:d6:5b:6e:23:68:7c:f7:b2:d2:
                    ea:06:75:5d:d4:ff:02:c5:39:4d:6c:b9:3b:37:58:
                    75:21:b9:d2:74:1d:5b:3c:4a:60:65:45:16:75:cd:
                    75:7d:4b:c1:35:7a:21:65:70:35:4c:d7:4a:34:35:
                    2e:fa:d8:2a:bb:4a:06:92:f1:ac:18:44:08:96:bb:
                    ea:f0:3b:b1:28:eb:03:e9:18:83:70:fc:ef:2b:d2:
                    a2:ce:53:cc:09:c7:02:5d:d9:3a:b3:da:ec:c2:4e:
                    9b:58:0b:a8:18:2a:ff:3c:ef:42:cb:77:d9:be:e9:
                    c4:79:e8:d6:f8:b1:75:71:5d:a7:d7:30:22:7f:c2:
                    6a:94:93:25:14:73:25:d3:9b:83:82:9b:74:f1:fd:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:96:de:6e:f3:66:64:58:f7:83:a9:8a:88:2e:7d:db:e1:
         5d:ea:a0:06:82:61:4b:ab:33:d9:d4:6e:5a:db:cd:22:ca:99:
         58:45:c6:82:dd:ba:d3:69:e8:ae:84:f8:27:0f:f4:59:85:0f:
         ab:f8:91:dd:32:74:c7:cc:40:44:92:02:90:0f:86:e4:1d:07:
         98:2e:72:70:ea:d2:35:20:94:40:52:62:53:de:25:14:90:7e:
         85:23:df:64:70:37:6a:aa:41:d9:ba:1b:f1:d7:31:3a:37:41:
         2f:f8:50:57:4a:bc:a0:42:28:cb:74:7c:36:3a:b8:51:ce:8b:
         1d:1f:4a:11:b8:37:de:5b:18:e3:65:a4:43:a3:b1:c4:0a:ff:
         5a:f4:18:92:ce:34:ba:8f:e8:fb:2d:21:91:88:a8:21:54:a3:
         47:5b:39:22:5d:dd:12:61:47:02:53:ae:43:26:a9:16:76:14:
         e1:81:e2:b0:02:8b:a9:a5:96:f7:07:06:12:ec:40:66:7c:2e:
         f4:f2:40:e4:99:40:4c:5d:1d:a6:e9:5a:4b:21:57:18:5a:7d:
         ff:49:73:e3:bc:b2:01:d7:a3:e9:bf:e4:75:1e:31:ab:08:ed:
         cb:2d:66:a9:6f:64:3c:10:26:1a:fc:1f:35:ff:d9:fe:18:80:
         de:cc:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:30 2024 by rpki-client on console-fra.rpki-client.org