Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer
File:                     C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer (raw, json)
Hash identifier:          EMQ4zrux3mWlJhUgAfGtw+D6NH9HWsVLTgXCLr5hrMM=
Subject key identifier:   C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3086830777AC88D3792F054F697B641DCB7363F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 08:56:53 +0000
Certificate not after:    Tue 01 Jul 2025 09:01:53 +0000
Subordinate resources:    IP: 103.160.160.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:86:83:07:77:ac:88:d3:79:2f:05:4f:69:7b:64:1d:cb:73:63:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 08:56:53 2024 GMT
            Not After : Jul  1 09:01:53 2025 GMT
        Subject: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:26:3f:83:46:a0:01:e3:73:57:3d:a3:6b:
                    58:7f:21:ca:46:55:38:ea:0a:b4:e9:99:27:f5:db:
                    2b:f6:5c:ea:67:9e:4f:cc:ab:04:db:05:ae:89:49:
                    5a:ee:42:18:33:e0:cc:0e:c3:45:9a:89:39:64:35:
                    55:1b:ea:0f:31:b4:29:69:e6:d3:f7:72:6d:1b:1e:
                    72:d2:8a:12:e2:7b:a6:40:bd:91:c5:b9:bb:96:44:
                    94:84:ca:8d:3e:88:c9:79:71:b0:74:fa:a5:85:2b:
                    51:b1:e4:4b:44:cf:8b:79:85:63:3a:35:f6:16:e3:
                    44:01:4f:fa:88:99:a2:4e:59:36:5d:5a:a0:7a:c7:
                    8f:4a:79:51:86:58:8b:81:d8:98:40:05:a6:56:d3:
                    9d:a1:80:cc:46:3e:24:df:4b:de:cb:4b:c8:de:ea:
                    82:77:02:fe:56:5c:c2:2f:9e:34:c4:7f:c8:82:81:
                    05:b1:6f:1d:50:ed:ce:65:3a:f2:e8:f8:da:98:26:
                    c4:8e:0d:99:18:83:ea:ca:b2:ab:cc:38:50:b4:96:
                    d9:f5:0e:76:f1:68:cb:93:72:54:75:36:72:f8:cb:
                    33:18:b0:f8:5f:6d:0e:4e:72:a6:1d:3b:24:83:86:
                    20:72:4c:00:ea:bb:d5:a5:33:58:31:d5:0f:fa:2d:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:d4:f7:43:f4:bb:fa:c6:52:f5:f2:f6:d6:7f:64:6b:35:
         28:29:09:74:72:3a:38:1f:7f:0f:c3:1b:78:b6:8e:8a:9e:a0:
         c5:26:4d:f3:17:a9:be:11:eb:e1:82:c4:a4:eb:00:59:82:d5:
         46:be:b4:ae:6b:e6:9e:46:3e:92:39:6f:0f:b6:49:fc:01:aa:
         79:31:aa:62:c0:be:11:96:ee:d5:eb:3b:27:ad:77:a9:c7:99:
         7e:3c:53:61:e7:77:37:80:23:ad:01:8f:a1:bb:46:2a:70:3a:
         44:e4:e7:24:b7:41:7a:ae:bf:7c:e6:4d:d0:55:39:95:65:65:
         d5:d9:83:f5:06:b7:5c:c8:cf:cb:86:ac:eb:33:84:88:23:4c:
         27:f1:c2:b6:4e:a6:3b:75:b3:88:d2:25:17:a9:57:a9:83:33:
         68:75:f6:53:c3:72:81:42:8b:61:85:b6:eb:af:02:52:03:99:
         4a:97:e3:8d:93:7d:16:e0:2b:2d:c5:d9:ae:5e:07:53:fa:87:
         fd:99:4e:2c:c0:9c:30:0c:e4:dd:2e:24:99:f3:5a:c7:ef:52:
         df:08:c1:03:73:fa:a9:cc:68:bc:13:38:aa:5c:2e:63:f9:a2:
         66:6a:18:44:14:66:77:76:7f:e2:60:a2:56:84:f6:90:6c:27:
         7e:2d:0f:22
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUMIaDB3esiNN5LwVPaXtkHctzY/cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjA4NTY1M1oX
DTI1MDcwMTA5MDE1M1owMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNB
MTBGOUQ1N0FFOTMxRjlBOUZDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL0PJj+DRqAB43NXPaNrWH8hykZVOOoKtOmZJ/XbK/Zc6meeT8yrBNsFrolJ
Wu5CGDPgzA7DRZqJOWQ1VRvqDzG0KWnm0/dybRsectKKEuJ7pkC9kcW5u5ZElITK
jT6IyXlxsHT6pYUrUbHkS0TPi3mFYzo19hbjRAFP+oiZok5ZNl1aoHrHj0p5UYZY
i4HYmEAFplbTnaGAzEY+JN9L3stLyN7qgncC/lZcwi+eNMR/yIKBBbFvHVDtzmU6
8uj42pgmxI4NmRiD6sqyq8w4ULSW2fUOdvFoy5NyVHU2cvjLMxiw+F9tDk5yph07
JIOGIHJMAOq71aUzWDHVD/otDhkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFMknaf1dl6RncOOhD51XrpMfmp/CMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9mNWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1ZDc3ODQw
LTYwOGUtNDQ5YS1iMjJmLTM2YTZlMjUyZmIyMy8wL0M5Mjc2OUZENUQ5N0E0Njc3
MEUzQTEwRjlENTdBRTkzMUY5QTlGQzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnoKAwDQYJKoZIhvcNAQELBQADggEBADif1PdD9Lv6xlL18vbWf2RrNSgpCXRy
Ojgffw/DG3i2joqeoMUmTfMXqb4R6+GCxKTrAFmC1Ua+tK5r5p5GPpI5bw+2SfwB
qnkxqmLAvhGW7tXrOyetd6nHmX48U2HndzeAI60Bj6G7RipwOkTk5yS3QXquv3zm
TdBVOZVlZdXZg/UGt1zIz8uGrOszhIgjTCfxwrZOpjt1s4jSJRepV6mDM2h19lPD
coFCi2GFtuuvAlIDmUqX442TfRbgKy3F2a5eB1P6h/2ZTizAnDAM5N0uJJnzWsfv
Ut8IwQNz+qnMaLwTOKpcLmP5omZqGEQUZnd2f+JgolaE9pBsJ34tDyI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:30 2024 by rpki-client on console-fra.rpki-client.org