Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer
File:                     E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer (raw, json)
Hash identifier:          Sv+clzZNdchf9Qnk3+BeHBA/YhJCksOEKxrjWk2nETA=
Subject key identifier:   E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       771974CDF778C527ACA4A37BFDF678FED6A9101D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 18 Oct 2024 09:51:27 +0000
Certificate not after:    Fri 17 Oct 2025 09:56:27 +0000
Subordinate resources:    IP: 103.124.20.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:19:74:cd:f7:78:c5:27:ac:a4:a3:7b:fd:f6:78:fe:d6:a9:10:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 18 09:51:27 2024 GMT
            Not After : Oct 17 09:56:27 2025 GMT
        Subject: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:f6:d7:7a:3e:5f:ad:15:cc:f4:28:cf:c0:
                    34:3c:dc:a4:69:2f:60:50:81:34:41:2f:bd:cc:be:
                    2f:08:6a:d9:c8:e5:08:b0:3e:d7:23:f1:e0:8b:ef:
                    3b:f7:c1:85:b6:80:c9:ee:1d:81:53:17:f0:65:01:
                    91:70:fe:7d:55:43:99:7c:60:4a:41:be:1b:2e:bc:
                    9f:3f:e7:f9:38:c7:92:87:1d:34:00:27:57:9c:11:
                    62:a5:e7:42:a6:cc:13:f2:e2:4d:1d:20:fe:70:93:
                    b6:35:ca:6f:b3:e3:a4:d8:54:59:e2:a1:7e:67:bf:
                    0b:41:de:c9:b7:bf:29:74:fc:83:d5:45:3d:31:01:
                    2e:ff:4e:a6:55:50:0e:82:9c:0a:29:f7:96:22:41:
                    f9:53:3f:88:de:b5:c6:67:db:ca:b2:44:2a:8d:f7:
                    c9:28:72:ab:cd:60:56:33:16:eb:33:ee:c1:14:83:
                    38:0c:7c:a3:3a:8c:b5:f8:2b:31:de:a1:1d:82:d8:
                    2e:8a:a5:36:3a:7a:6a:70:06:c8:6b:ce:bf:ee:e1:
                    cf:4f:b7:93:77:dc:4b:83:ba:86:38:a5:6f:f8:0e:
                    36:4e:b2:08:4b:df:41:ab:21:5c:5e:b6:06:26:8c:
                    98:9b:2e:36:bd:d4:3f:36:c1:d2:b0:f7:cf:2b:91:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:5e:30:92:a8:62:16:31:c8:0b:a1:d3:7c:03:97:dc:b5:
         54:8d:2b:92:1f:e9:e1:4d:13:dd:0b:02:b1:8e:c1:7f:92:f6:
         70:98:59:fe:fb:e0:6d:a6:f6:4c:3f:b9:76:96:51:4c:07:12:
         9e:7b:89:c6:b3:90:e2:f9:36:f9:2e:bd:0e:14:a0:5b:08:4e:
         d2:d3:5f:1b:42:96:e4:ff:83:6c:aa:6e:e1:7a:8d:b1:ba:ac:
         20:51:3c:75:4a:c0:0d:2f:65:63:a7:8d:31:8d:d9:ed:d9:b0:
         73:6f:8d:38:5d:bf:7d:a2:51:9c:37:e3:ea:d7:38:53:03:56:
         32:96:cb:35:f0:61:1e:08:4f:6e:fa:d1:28:87:23:54:aa:4a:
         13:7f:e2:6d:cb:54:35:f2:06:b2:fe:93:eb:2f:61:84:3c:53:
         5e:84:02:9a:65:bc:5c:e4:79:d7:d6:01:a0:05:f3:d4:7f:10:
         6d:e4:19:95:a9:03:b3:27:b2:de:45:2b:b7:0f:b7:9b:ab:35:
         c8:26:92:ad:b2:43:24:54:81:f4:a4:d3:1d:cc:23:45:eb:57:
         90:4b:3c:60:7c:40:4e:10:39:ff:a9:6a:50:d0:6a:0e:45:e4:
         88:52:4e:ff:bc:57:85:d3:ef:26:48:23:61:0e:34:c0:10:d7:
         32:37:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org