Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
File:                     E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer (raw, json)
Hash identifier:          ngClsWSC7dwTs0DEoPtpr/lpe2zyTTnbaKJcp5/78WA=
Subject key identifier:   E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6FF7B2C2AD26D42F67DF7E94EC891A231F2885E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jul 2024 11:20:44 +0000
Certificate not after:    Mon 07 Jul 2025 11:25:44 +0000
Subordinate resources:    IP: 210.79.138.0/23
                          IP: 2001:df3:fd40::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f7:b2:c2:ad:26:d4:2f:67:df:7e:94:ec:89:1a:23:1f:28:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  8 11:20:44 2024 GMT
            Not After : Jul  7 11:25:44 2025 GMT
        Subject: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:f5:53:18:aa:b5:43:03:bc:58:f5:fa:e8:
                    22:be:88:fd:56:05:ba:5d:be:ee:b5:29:e8:4f:ca:
                    8e:d5:a8:50:e3:ea:45:5e:09:dd:15:da:a1:8d:1e:
                    45:08:8a:d0:7d:2b:44:1a:8f:1b:79:15:bd:b2:a9:
                    7a:30:d6:75:9a:24:ae:7a:1e:42:1e:88:0f:6c:ce:
                    6d:0d:0d:d9:6e:1b:a4:82:67:de:f7:12:d2:5c:ae:
                    20:71:c5:d0:4a:eb:63:2a:48:a0:10:fa:2b:15:62:
                    37:1d:7d:83:d7:bd:52:93:24:39:90:97:db:4a:77:
                    1e:2e:6d:ba:7b:07:17:9b:96:e2:bd:24:6d:9f:61:
                    fb:19:ce:ca:6c:aa:a8:21:70:03:9a:ed:89:ba:fe:
                    54:2d:e4:16:a5:e5:31:f5:4f:dd:0a:bb:fa:ae:08:
                    53:50:31:27:4b:9d:48:a8:cd:b0:e1:e8:d3:92:71:
                    39:d1:31:fc:1f:42:9f:ed:29:2b:e0:92:42:4e:64:
                    3c:66:4a:49:7e:ab:b8:d3:1a:bc:c9:83:3d:68:d6:
                    76:4d:70:a9:61:f0:32:aa:d9:24:e9:35:f0:c5:17:
                    6b:7e:ea:71:86:c2:3f:03:6c:0d:4e:aa:db:62:9a:
                    9b:c1:6c:e5:83:a9:78:5d:e6:00:ac:dc:c4:f4:cb:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.138.0/23
                IPv6:
                  2001:df3:fd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:07:c7:c1:81:b7:6c:62:6e:58:50:69:fa:c3:08:67:d3:3c:
         27:5f:c7:4c:a0:15:84:60:be:80:25:b6:2a:82:49:5a:90:ed:
         02:fb:28:06:b3:38:e4:1a:f3:d7:d3:92:91:60:02:58:fb:67:
         b4:57:7e:f8:b1:ff:55:a6:09:3f:f2:14:97:8d:82:7b:06:34:
         61:c8:43:3f:f4:4b:6a:e3:5d:b6:ea:9d:e5:9e:4b:57:38:e1:
         8b:40:58:83:91:33:01:d9:8f:26:65:36:f7:aa:44:9a:41:2b:
         ff:38:a6:83:f3:be:e4:1f:a0:a5:ba:9e:e5:b6:09:07:2f:17:
         a1:71:e2:73:19:05:19:2b:b6:ec:06:9e:d2:ef:43:0b:84:1c:
         15:94:65:31:33:eb:f9:2d:a0:e7:6c:30:48:7c:b7:20:1e:74:
         ef:9a:81:a3:ec:84:46:c9:31:bf:ee:25:62:87:63:1e:79:31:
         77:a4:b2:4d:72:28:43:78:a6:79:73:fb:34:45:69:6f:bb:ba:
         20:59:6c:bc:24:e6:79:84:df:a8:b0:81:07:22:7e:73:0f:32:
         5d:c2:c7:a3:88:d7:48:3c:90:43:8e:38:59:69:b9:b0:fb:1b:
         9c:13:25:b0:23:3d:fe:ab:bc:1c:39:11:63:1c:f7:84:13:bb:
         a0:5f:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org