Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
File:                     E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer (raw, json)
Hash identifier:          gPviwVgiZi4Wq1J8hA0KbLX9svf4t2DJx8hBnmQTAYU=
Subject key identifier:   E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       51E49274AF377ECF49A4C2532D37FB1913FD56C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 03:38:22 +0000
Certificate not after:    Tue 18 Feb 2025 03:43:22 +0000
Subordinate resources:    IP: 103.186.0.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e4:92:74:af:37:7e:cf:49:a4:c2:53:2d:37:fb:19:13:fd:56:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 20 03:38:22 2024 GMT
            Not After : Feb 18 03:43:22 2025 GMT
        Subject: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:fc:aa:8e:3f:4e:1d:1b:fb:64:ae:86:e0:
                    5f:43:2b:c4:24:10:88:90:a1:9b:9d:8e:a1:49:1b:
                    0f:dc:74:ee:9f:a6:45:c1:bf:cd:1b:47:87:a8:0f:
                    8b:a3:2f:f6:27:fd:aa:c4:ab:95:05:29:dd:4f:82:
                    55:ae:fd:45:e0:9d:6a:dd:bc:27:5b:2a:0a:90:a2:
                    d0:e9:47:ea:17:72:bf:db:86:c1:38:ba:e3:a4:a2:
                    07:5b:1c:9a:4f:6c:9a:5c:db:e2:7e:2e:b6:c7:bc:
                    19:8d:54:46:58:b8:ab:c6:cf:55:fb:9f:01:8a:0a:
                    b3:5f:0c:cf:cd:58:14:16:11:f8:ab:97:2d:9e:c4:
                    13:fb:9d:13:96:ff:8c:da:2c:23:c3:18:0d:0a:a9:
                    7c:47:3d:77:90:d7:94:e4:fb:2e:76:4b:e9:07:42:
                    1b:f1:10:12:a5:9c:aa:0d:55:ef:fb:b4:d0:59:ac:
                    34:64:06:55:23:f1:65:d0:b3:72:39:db:6b:f9:32:
                    3c:ce:46:49:73:02:9a:ab:9a:c1:1f:b5:80:59:2f:
                    8e:0f:37:45:bc:fc:78:ed:59:64:7d:95:52:fe:03:
                    15:0f:ef:3d:a8:ad:a9:af:02:72:56:2c:88:1b:69:
                    d3:ab:11:a1:03:b0:77:b8:ae:18:38:4c:d8:8c:25:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:03:5e:f7:e8:2a:03:bf:f2:90:8f:90:be:8d:3b:fc:52:69:
         78:5b:df:d7:a2:66:c0:c8:d8:fd:6c:44:17:01:87:9e:07:3a:
         f4:ae:c6:a2:78:11:2c:88:0b:0e:90:e2:9d:33:5f:d8:c4:1a:
         b2:fb:92:fd:ec:01:64:57:73:10:b9:dd:59:e2:de:2b:4c:17:
         ac:08:47:23:aa:c5:10:f3:bf:aa:c7:37:9a:fd:51:05:21:d0:
         4b:4e:7f:06:47:2d:05:b2:d8:6a:e6:16:42:1f:4f:2c:47:79:
         80:11:00:1b:18:4f:64:1b:7f:9c:78:e1:09:e3:16:32:55:f4:
         0a:c5:b4:62:1c:ec:34:db:75:ed:2f:14:bb:5b:d1:fc:6b:73:
         e7:6d:38:22:e0:1e:db:4a:63:e5:32:d7:0c:f3:a7:63:03:48:
         df:fd:2f:f1:cd:65:92:03:aa:e2:1d:de:29:a1:4f:14:de:1d:
         69:9d:6b:4d:18:08:52:a4:1d:85:99:aa:92:5e:77:5b:18:6b:
         3b:6b:f9:d7:fd:5a:a2:f6:4e:94:a4:bc:db:32:c4:7f:89:a3:
         14:c5:66:81:03:96:12:47:a4:1e:1b:30:7b:7a:18:32:c8:92:
         a8:1e:22:35:ea:fa:06:ff:da:de:e9:98:2f:cf:5d:b6:0f:8c:
         6e:8a:3b:2a
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUUeSSdK83fs9JpMJTLTf7GRP9VsIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyMDAzMzgyMloX
DTI1MDIxODAzNDMyMlowMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2
MzhGQ0YxODM0N0ExQURBNUQ3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4z/KqOP04dG/tkrobgX0MrxCQQiJChm52OoUkbD9x07p+mRcG/zRtHh6gP
i6Mv9if9qsSrlQUp3U+CVa79ReCdat28J1sqCpCi0OlH6hdyv9uGwTi646SiB1sc
mk9smlzb4n4utse8GY1URli4q8bPVfufAYoKs18Mz81YFBYR+KuXLZ7EE/udE5b/
jNosI8MYDQqpfEc9d5DXlOT7LnZL6QdCG/EQEqWcqg1V7/u00FmsNGQGVSPxZdCz
cjnba/kyPM5GSXMCmquawR+1gFkvjg83Rbz8eO1ZZH2VUv4DFQ/vPaitqa8CclYs
iBtp06sRoQOwd7iuGDhM2IwleUUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOCWdUnvMtien/Fjj88YNHoa2l1wMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by84MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzN2E2ZGQ4
LWE4NDMtNDY5OC1hNWYzLTNlZWM0NjhkMTRhNC8wL0UwOTY3NTQ5RUYzMkQ4OUU5
RkYxNjM4RkNGMTgzNDdBMUFEQTVENzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnugAwDQYJKoZIhvcNAQELBQADggEBAEQDXvfoKgO/8pCPkL6NO/xSaXhb39ei
ZsDI2P1sRBcBh54HOvSuxqJ4ESyICw6Q4p0zX9jEGrL7kv3sAWRXcxC53Vni3itM
F6wIRyOqxRDzv6rHN5r9UQUh0EtOfwZHLQWy2GrmFkIfTyxHeYARABsYT2Qbf5x4
4QnjFjJV9ArFtGIc7DTbde0vFLtb0fxrc+dtOCLgHttKY+Uy1wzzp2MDSN/9L/HN
ZZIDquId3imhTxTeHWmda00YCFKkHYWZqpJed1sYaztr+df9WqL2TpSkvNsyxH+J
oxTFZoEDlhJHpB4bMHt6GDLIkqgeIjXq+gb/2t7pmC/PXbYPjG6KOyo=
-----END CERTIFICATE-----
Generated at Wed May 8 22:46:46 2024 by rpki-client on console-ams.rpki-client.org