Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
File:                     E0B1DDE4FA587276778B8ED650B682C82290CC74.cer (raw, json)
Hash identifier:          3h9gwtz3ZTxyXiqdebo0FiJR8948Xf4dZewRUlMUpTQ=
Subject key identifier:   E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4C7C27B91D872E9321A98057C6328D78647F33E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 12:40:08 +0000
Certificate not after:    Mon 31 Mar 2025 12:45:08 +0000
Subordinate resources:    IP: 103.176.68.0/24
                          IP: 103.176.121.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 17:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:27:b9:1d:87:2e:93:21:a9:80:57:c6:32:8d:78:64:7f:33:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr  1 12:40:08 2024 GMT
            Not After : Mar 31 12:45:08 2025 GMT
        Subject: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:87:71:56:3e:f8:71:e9:17:0e:ae:85:ea:
                    bf:c1:f2:be:30:e9:d8:32:55:48:36:e3:80:b2:7d:
                    ff:5b:11:26:9a:91:e9:8a:b4:0e:00:6b:92:df:8c:
                    b7:ab:5b:9c:27:c4:35:b2:6d:73:9b:e0:c2:3d:63:
                    e9:19:fc:ff:29:ba:ae:2f:6d:56:0e:2b:b3:3f:e3:
                    e9:8f:59:f4:e1:9a:c1:4b:05:bb:cc:10:65:04:76:
                    f0:d4:a6:02:8d:8e:7a:08:4b:f2:81:06:dc:75:38:
                    ba:ff:f7:a7:df:3b:74:b2:25:19:5a:78:8c:58:6b:
                    15:05:88:c8:8f:78:a6:69:d9:45:fb:43:89:22:d0:
                    52:31:1f:3b:83:a8:9d:55:d6:2e:8f:60:7a:25:30:
                    35:a5:2f:ee:78:b4:7b:79:c0:fc:84:30:98:91:dc:
                    68:70:96:d9:dc:75:e4:be:01:06:d9:90:68:51:43:
                    09:5c:89:e9:45:07:06:c7:8e:99:86:d8:10:f2:00:
                    26:ac:12:cc:ed:8a:d3:13:14:13:09:a8:b1:d7:90:
                    c1:d0:d2:27:0b:6e:ac:4f:22:b3:45:38:ce:cf:ef:
                    23:ac:a0:ff:4d:45:71:15:ee:b5:36:19:3c:c6:f9:
                    90:1d:db:25:23:0e:d3:76:32:76:1b:48:b3:25:09:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.68.0/24
                  103.176.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:1f:25:12:af:57:9d:6a:7c:d2:b9:3f:93:ad:0d:6b:b8:
         6e:5c:0a:96:c0:a0:9c:d5:06:b0:13:96:3d:70:3b:0d:50:be:
         70:c8:e3:ab:4c:b5:a1:6e:63:82:56:b5:f9:b5:85:89:41:18:
         c0:24:d6:78:16:ce:22:d5:db:98:fd:3d:2e:6e:40:d1:fc:6f:
         a4:07:3e:d6:5c:0b:c0:94:61:09:4a:da:d8:b4:ea:fc:92:a3:
         19:ce:47:e2:e5:3e:6a:0e:d3:4a:c3:f4:dc:a0:ad:d7:ee:eb:
         56:38:a7:30:f1:00:c8:5d:d6:02:73:63:80:fa:01:31:09:47:
         52:3b:88:d5:87:59:90:e0:75:f9:8c:42:78:5b:6b:71:87:1e:
         ea:a3:10:cb:b2:f2:0e:89:13:cb:86:f6:21:b0:d1:47:83:70:
         70:4c:12:29:f7:0b:ea:d1:45:09:26:33:3c:9d:98:6e:17:36:
         dc:a4:12:f7:5e:fa:6d:6a:e0:b1:70:a5:42:af:fe:ba:56:c2:
         3e:af:e1:2e:ad:c0:10:f8:01:3a:49:7d:19:af:c6:33:b8:00:
         8c:33:c0:df:30:ec:89:85:90:6d:36:c5:6f:b5:f6:52:23:10:
         a0:bd:96:af:c9:3d:7c:a1:68:c4:49:f3:7d:82:a8:a9:cf:f3:
         7a:d2:e3:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 8 15:17:48 2024 by rpki-client on console-fra.rpki-client.org