Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer
File:                     E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer (raw, json)
Hash identifier:          N972qJ27LHeBFqIw/TgPHMzXaUxSvcMrjfuQeLhfGtQ=
Subject key identifier:   E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5881D6D5873C51005C10E232868E0E3A0299705C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 11:24:25 +0000
Certificate not after:    Mon 29 Jul 2024 11:29:25 +0000
Subordinate resources:    IP: 103.51.44.0/22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:81:d6:d5:87:3c:51:00:5c:10:e2:32:86:8e:0e:3a:02:99:70:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 31 11:24:25 2023 GMT
            Not After : Jul 29 11:29:25 2024 GMT
        Subject: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:24:4b:0e:d8:1c:ec:07:e4:74:82:fd:c0:
                    1f:f8:55:41:21:5b:13:86:cf:64:f2:bb:33:41:0d:
                    d3:51:e2:58:53:33:84:51:9d:1a:36:30:48:50:b9:
                    d2:50:d1:3f:99:9f:8d:cc:ca:e1:f8:0f:2c:d4:50:
                    47:88:8d:68:84:2b:4e:85:91:37:9d:46:9a:6d:d3:
                    0e:a2:82:10:7a:51:42:ba:53:92:95:ea:c3:06:4a:
                    5d:2b:70:0a:52:54:1b:d7:ab:58:30:c3:61:81:97:
                    16:95:62:8d:7e:e7:36:23:fb:c8:64:3a:cb:53:d9:
                    86:85:40:d4:af:d2:4b:52:20:47:93:a7:c4:55:cb:
                    3d:98:41:ef:3e:a0:e9:46:c1:48:2e:e1:84:ae:3e:
                    e4:da:9a:8d:66:0d:43:df:eb:ce:28:a3:18:b3:ae:
                    f2:f3:89:00:92:09:59:61:a6:0a:41:59:cc:c5:19:
                    82:4b:10:6b:60:6c:f9:aa:d0:48:68:7f:20:8d:03:
                    17:cc:d4:89:e2:e8:51:16:4c:1c:85:82:b6:9f:84:
                    0b:d5:8d:e4:f9:89:7b:2e:17:81:f1:ca:91:46:eb:
                    83:6b:f7:f6:ec:43:48:ae:71:00:10:37:92:3a:21:
                    dd:96:2c:dd:d6:54:55:24:02:00:0d:3f:3a:00:e6:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:65:a1:64:51:61:a6:c5:42:41:58:fe:1c:4d:06:09:43:
         2e:91:04:32:88:a4:1f:2f:29:99:44:68:88:57:47:3d:1c:8d:
         2d:ec:5b:aa:b1:18:8f:79:c3:22:4b:f9:f5:dc:65:73:09:e6:
         8a:93:08:61:23:80:3d:63:7e:88:70:5c:3f:ee:6d:c1:8a:17:
         56:8d:a9:d3:fe:da:b7:c1:61:fc:88:16:de:d6:b5:94:34:4f:
         53:6b:13:79:90:5f:a0:fb:9d:91:7d:27:3c:43:cf:65:7e:3c:
         8e:54:41:16:b9:1d:e0:82:78:93:12:ca:ec:4c:f3:63:fa:2a:
         d3:81:18:b9:6f:ef:33:98:c4:cb:e2:35:be:8c:e1:0b:8b:ee:
         f4:67:16:d5:71:60:ff:49:dd:e2:20:cf:1d:e3:e1:6c:fe:97:
         dc:6f:db:97:62:4a:a4:0c:2f:e0:21:54:79:3b:ad:d0:39:f9:
         64:b7:fc:7a:b0:e0:2b:26:60:51:b2:88:2e:53:c8:99:61:08:
         3d:8c:d0:ce:cd:4e:e2:6c:1b:37:cb:bb:9f:c3:36:8e:ab:c8:
         b2:35:99:31:5a:22:6c:5b:39:50:dc:d0:3c:b2:cc:48:6b:c1:
         f5:20:c1:f1:a0:8d:84:e8:64:45:f1:f2:14:e1:2c:ee:9d:c9:
         f6:30:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:12:22 2024 by rpki-client on console-fra.rpki-client.org