Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
File:                     E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer (raw, json)
Hash identifier:          fwhxrt2tRWvyWKRWnlZPYpLAhS4zba5dvgDUcXtcGhY=
Subject key identifier:   E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67606E6C7DDF5BF735D3C8C14C6EE38B690E23E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jul 2024 01:34:47 +0000
Certificate not after:    Tue 01 Jul 2025 01:39:47 +0000
Subordinate resources:    IP: 103.129.220.0/22
                          IP: 2001:df6:8900::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:60:6e:6c:7d:df:5b:f7:35:d3:c8:c1:4c:6e:e3:8b:69:0e:23:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  2 01:34:47 2024 GMT
            Not After : Jul  1 01:39:47 2025 GMT
        Subject: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:f1:ad:79:b6:b8:1e:ee:a3:35:1e:ed:59:
                    1c:0b:02:73:ca:41:34:49:ac:84:e2:0c:43:a4:e9:
                    92:bd:97:e4:23:a7:9a:25:ec:01:0b:0e:b3:2d:6c:
                    11:9d:0d:7c:9b:ba:87:99:73:a6:68:f0:8f:28:d5:
                    5e:a2:f1:6a:45:f7:07:84:39:9e:24:87:aa:77:f6:
                    dc:a9:b4:6f:25:05:b5:99:94:9e:9b:c1:3f:c8:d3:
                    0d:c2:4c:96:7b:6d:53:b4:9a:58:27:5f:31:66:24:
                    e1:f3:12:f9:75:df:8b:11:4c:06:9f:f6:21:ae:4f:
                    2c:ba:56:e3:80:56:f0:8e:c4:63:92:77:3e:38:5e:
                    e7:3e:1d:65:42:fd:17:2b:85:95:3c:62:0c:26:8b:
                    b5:b5:96:4a:a9:e6:c3:69:9a:6b:12:2c:07:e1:26:
                    e9:5c:d4:ea:18:c3:1b:62:8e:17:2d:e2:93:93:df:
                    14:4a:db:c5:b9:44:7f:18:0d:6d:79:ee:d7:a0:d6:
                    97:5f:02:22:78:c2:74:ad:db:e7:76:32:b7:29:4e:
                    50:49:eb:8c:3f:14:7a:42:3d:2c:af:f7:e3:c5:ff:
                    96:45:93:ff:8d:f6:60:21:5b:a1:4c:7b:f1:4f:70:
                    8b:b4:32:9d:b0:05:c1:48:d6:59:e1:34:5c:2a:92:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.220.0/22
                IPv6:
                  2001:df6:8900::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:aa:5d:50:d4:28:22:8e:aa:78:4b:c8:29:0a:ea:e4:90:89:
         7b:df:7a:74:7e:af:d9:7b:45:4a:0d:9e:cd:30:9a:ee:b5:3d:
         d8:42:bd:9d:c1:25:6e:73:b8:5a:16:6c:f4:8e:db:f6:bc:86:
         29:1b:af:5c:4b:f8:ef:b3:2b:d0:57:42:75:21:57:a6:44:c6:
         d5:18:10:67:df:ff:c2:ee:4b:a0:61:15:a3:59:44:7b:1f:40:
         8a:c2:ed:05:2a:e9:91:1e:0e:80:a5:87:57:e8:fd:8c:6f:c0:
         3a:22:c1:d5:06:42:4b:b8:06:6b:e4:cd:f4:f1:a3:e2:43:ef:
         06:cd:48:a7:a5:57:c5:10:9d:29:ac:a2:96:81:21:71:4e:88:
         5f:d1:d2:4b:53:5a:44:47:3d:be:69:d8:f2:cc:44:53:13:b1:
         37:51:42:0a:76:c7:f4:d8:8b:b7:8d:ca:a0:4f:6f:19:e1:90:
         63:7f:0a:8c:58:ba:27:02:b1:8d:9b:97:47:7e:40:6f:07:bc:
         76:62:31:53:a6:ed:d3:dc:e4:23:f9:88:ff:b6:a7:b3:5c:bb:
         4a:ad:a8:2d:d5:8c:e0:c2:da:59:ff:76:e5:66:87:63:62:65:
         0a:66:80:8b:0e:55:fb:c0:55:f5:84:87:7d:69:9b:53:a8:3d:
         02:bc:52:68
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUZ2BubH3fW/c108jBTG7ji2kOI+gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAxMzQ0N1oX
DTI1MDcwMTAxMzk0N1owMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1
MjNGMUExQUNEN0QwMThEMEFERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALA/8a15trge7qM1Hu1ZHAsCc8pBNEmshOIMQ6Tpkr2X5COnmiXsAQsOsy1s
EZ0NfJu6h5lzpmjwjyjVXqLxakX3B4Q5niSHqnf23Km0byUFtZmUnpvBP8jTDcJM
lnttU7SaWCdfMWYk4fMS+XXfixFMBp/2Ia5PLLpW44BW8I7EY5J3Pjhe5z4dZUL9
FyuFlTxiDCaLtbWWSqnmw2maaxIsB+Em6VzU6hjDG2KOFy3ik5PfFErbxblEfxgN
bXnu16DWl18CInjCdK3b53YytylOUEnrjD8UekI9LK/348X/lkWT/432YCFboUx7
8U9wi7QynbAFwUjWWeE0XCqSVysCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOJ/Bwsn6rCW4rNSPxoazX0BjQrdMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by83NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2YTAwMmRl
LTBjZGUtNDYyZS05NDA0LTQ2YmM2MjcwZTA0Zi8wL0UyN0YwNzBCMjdFQUIwOTZF
MkIzNTIzRjFBMUFDRDdEMDE4RDBBREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAJngdwwDwQCAAIwCQMHACABDfaJADANBgkqhkiG9w0BAQsFAAOCAQEAZapdUNQo
Io6qeEvIKQrq5JCJe996dH6v2XtFSg2ezTCa7rU92EK9ncElbnO4WhZs9I7b9ryG
KRuvXEv477Mr0FdCdSFXpkTG1RgQZ9//wu5LoGEVo1lEex9AisLtBSrpkR4OgKWH
V+j9jG/AOiLB1QZCS7gGa+TN9PGj4kPvBs1Ip6VXxRCdKayiloEhcU6IX9HSS1Na
REc9vmnY8sxEUxOxN1FCCnbH9NiLt43KoE9vGeGQY38KjFi6JwKxjZuXR35Abwe8
dmIxU6bt09zkI/mI/7ans1y7Sq2oLdWM4MLaWf925WaHY2JlCmaAiw5V+8BV9YSH
fWmbU6g9ArxSaA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:01 2024 by rpki-client on console-fra.rpki-client.org