Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
File:                     DA3283EBD45CCF7056D92A914183FB7825C66692.cer (raw, json)
Hash identifier:          iN9/8GXh333FOhwndpa5mRKOEzY2/xGx1+hvuzCxMJA=
Subject key identifier:   DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7D73D1A8D675099540FA7D66C5CD279CF47B47D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Apr 2024 12:43:37 +0000
Certificate not after:    Fri 25 Apr 2025 12:48:37 +0000
Subordinate resources:    IP: 103.166.36.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 13:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:73:d1:a8:d6:75:09:95:40:fa:7d:66:c5:cd:27:9c:f4:7b:47:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 12:43:37 2024 GMT
            Not After : Apr 25 12:48:37 2025 GMT
        Subject: CN=DA3283EBD45CCF7056D92A914183FB7825C66692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:0d:f0:1f:74:b5:d6:f6:be:40:7c:d0:5a:
                    b9:ca:58:84:9b:f1:97:56:66:d3:5c:ba:87:42:5f:
                    ce:73:e2:fa:81:09:81:79:06:a8:f2:6c:9d:cb:05:
                    c3:ba:60:27:af:c7:59:5d:ac:f6:0a:c6:88:41:b9:
                    02:65:21:96:4e:88:b6:7e:6a:e7:29:f2:c4:c6:73:
                    6b:2b:68:74:0c:cb:c2:84:77:8d:fd:ee:20:db:88:
                    da:91:69:a7:03:13:4e:4b:4f:04:51:16:d5:33:94:
                    09:cc:0f:b2:79:39:76:bd:62:30:4c:45:96:ff:ad:
                    cf:2e:ff:6a:95:ea:12:0a:06:b4:29:6d:56:f2:a5:
                    a0:33:c0:77:ff:8a:81:3f:da:0a:a6:2f:41:fe:12:
                    53:cb:bc:ac:f1:00:a3:ca:16:f4:80:5b:5f:6f:78:
                    e5:25:b5:8d:03:e9:7c:59:b1:62:9b:d9:e3:ee:09:
                    6a:9f:3e:85:88:fc:ed:fe:f3:f4:46:89:4a:38:a9:
                    1e:77:66:c5:9c:ce:3a:50:2f:f9:b1:4a:1d:98:09:
                    a5:b1:de:97:f7:3a:eb:af:b8:8b:68:a2:e7:27:6e:
                    88:6a:81:d1:3b:88:e3:10:5d:27:fd:cd:40:89:bf:
                    00:5e:e3:66:7c:bf:ab:24:ba:0e:60:a8:e1:3d:3e:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:64:6f:e5:a8:6b:c0:ab:6c:9f:61:da:81:bd:33:22:5c:
         da:df:8e:5c:81:8b:8f:12:e8:4b:d0:54:93:a2:c4:11:8c:84:
         fc:40:c5:76:7b:ff:f9:0f:27:15:35:61:fb:d3:7f:ee:b7:20:
         db:24:86:75:b1:cf:26:d7:bf:54:7a:20:ec:5b:29:4a:44:95:
         55:f5:df:01:60:2b:44:a2:1b:46:56:40:96:22:31:6a:b7:c4:
         f7:1a:8c:fd:3c:0f:9c:a3:93:91:ba:f4:99:ff:14:94:fe:8f:
         32:c1:0d:f1:af:be:f2:f1:ce:aa:8f:28:12:b4:06:b7:99:93:
         fd:f0:d1:0b:97:63:88:ee:15:f9:bc:22:d3:1c:04:0a:08:68:
         10:2b:b3:ee:e5:ed:f5:98:f4:d5:67:36:1f:cb:73:c3:6f:eb:
         50:8b:83:cf:00:0e:a7:8d:1b:1a:7b:3b:c2:ca:02:4f:0b:31:
         59:39:4f:13:89:71:44:86:30:d2:e7:ff:04:f6:61:ae:a7:c1:
         5d:4f:fd:30:d6:8c:81:63:57:2e:cb:2d:de:ad:bf:f0:b9:ba:
         6d:10:02:75:da:c9:a1:0c:ef:b5:f2:a5:a4:ea:e5:a8:3c:0c:
         e8:ec:50:c1:13:7d:17:e2:63:37:78:60:ae:80:c7:22:c6:b1:
         8d:07:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:50:44 2024 by rpki-client on console-fra.rpki-client.org