Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
File:                     E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer (raw, json)
Hash identifier:          F3GoapVUTP/qCIcfdKOWVhA5o76hh6iikp+wO1UnA9U=
Subject key identifier:   E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5CA7A8B0BBDD034B26B412FEBEAD36A4EA58A1B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 04 Aug 2024 14:53:30 +0000
Certificate not after:    Sun 03 Aug 2025 14:58:30 +0000
Subordinate resources:    IP: 103.73.76.0/22
                          IP: 2406:f180::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 06:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a7:a8:b0:bb:dd:03:4b:26:b4:12:fe:be:ad:36:a4:ea:58:a1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Aug  4 14:53:30 2024 GMT
            Not After : Aug  3 14:58:30 2025 GMT
        Subject: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:26:66:0e:59:8f:64:40:ee:f9:95:7e:b5:
                    ba:e4:f2:10:b9:13:a4:d6:ae:72:47:6d:f4:94:2d:
                    7e:54:0e:5b:46:4b:0d:c7:72:0e:85:46:2e:dc:31:
                    95:c4:21:3f:c0:5b:70:cf:6b:25:24:52:39:c2:32:
                    b1:12:40:32:fd:51:93:c5:9c:51:67:1d:05:29:c3:
                    fb:14:55:4c:67:d8:b7:e3:bb:8b:c9:62:22:93:a8:
                    09:4d:22:6c:e3:e3:a1:d7:1b:29:71:18:92:3c:c0:
                    04:ef:11:ce:e2:57:17:e9:d1:e9:68:f7:4f:3d:eb:
                    51:0c:84:28:08:a0:13:02:d4:f1:40:8a:4a:2b:0e:
                    55:cd:82:97:3d:3b:b5:45:19:9c:de:9c:ff:46:db:
                    d2:eb:f5:1c:d9:48:f8:ce:eb:e0:3c:bb:af:34:15:
                    97:e3:2c:0b:0f:f6:a5:0a:51:72:e6:76:38:de:c8:
                    0e:3e:2b:4b:ff:9f:90:26:cd:e8:6b:62:e6:0a:0b:
                    d8:22:73:bd:0e:61:41:27:6f:fb:7c:b8:58:1e:7b:
                    07:ac:05:97:83:50:37:b2:c9:a5:6c:30:49:ca:99:
                    79:2e:ae:79:50:ce:b2:41:07:a3:21:e2:97:57:d4:
                    f9:d8:51:f5:d4:7b:7e:f9:17:4a:24:08:a9:81:e8:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.76.0/22
                IPv6:
                  2406:f180::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:7b:bd:5e:0b:c8:e3:4d:76:f0:e0:8e:e6:55:b9:0c:84:f4:
         1c:01:03:d7:df:f5:bf:b3:93:87:5a:9b:a2:8f:ce:e5:7c:46:
         6a:63:9e:86:c3:43:02:4a:7f:f7:5a:e0:b9:7b:cb:01:45:4b:
         7e:95:64:9f:b1:c6:63:5d:8e:1e:5b:10:e2:d8:a6:61:1c:11:
         6d:ba:6e:00:31:4a:be:d0:c0:d3:7c:c4:66:2f:3a:0c:2c:9e:
         52:5e:a9:fe:06:0a:45:fb:45:85:93:b8:50:e7:bd:83:54:8d:
         db:8f:44:04:f5:dc:35:16:69:40:f7:14:f7:ba:d7:5a:fb:a3:
         32:00:ce:ca:50:b6:31:48:c8:9e:7e:63:dd:7f:1f:52:ab:21:
         aa:2d:27:23:c0:b9:88:d5:1a:1b:33:22:ef:95:61:ca:8d:71:
         4d:54:6a:a3:1b:4e:67:55:16:bc:cc:75:19:7d:28:0f:b8:0e:
         12:f2:b9:71:76:e4:a7:f0:65:dd:1e:74:7d:86:a8:f6:9c:02:
         60:f6:5f:d1:c5:bb:b7:92:81:1d:dd:69:1c:85:cc:59:6f:cc:
         46:2b:18:e5:8e:3b:d6:61:dc:9b:96:44:99:17:9a:12:86:72:
         7e:d0:91:f8:29:fa:d6:a0:a8:d8:54:d4:15:70:6f:2f:c2:65:
         33:a3:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:49 2025 by rpki-client