Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
File:                     E74A2346929DE84143E5DF0DD921764C285B01A2.cer (raw, json)
Hash identifier:          OPwMoJNZ262VpwhbYQbyHBtbygQndVmkcpoii8aRHms=
Subject key identifier:   E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1D0C1DAADF127360B30139CF65F755C308B26058
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 04:49:06 +0000
Certificate not after:    Mon 04 Aug 2025 04:54:06 +0000
Subordinate resources:    IP: 103.110.100.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:1d:aa:df:12:73:60:b3:01:39:cf:65:f7:55:c3:08:b2:60:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  5 04:49:06 2024 GMT
            Not After : Aug  4 04:54:06 2025 GMT
        Subject: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:74:07:0a:31:fb:af:9a:22:0b:fb:3c:17:
                    30:ba:bb:ef:ec:4a:5d:74:7f:14:32:2d:01:f1:6b:
                    3f:b4:95:88:4e:c2:2f:8e:c3:7b:f8:c2:31:6b:9e:
                    06:5f:ad:ab:8c:67:df:8f:e7:ca:f3:83:e0:9b:bc:
                    c2:73:a7:94:10:95:22:c2:3f:4b:c5:4b:d1:2e:30:
                    a3:b8:5e:c4:81:ba:4d:0b:07:67:6b:fe:08:49:76:
                    3b:36:32:3e:fc:5b:7e:0a:4b:fc:1f:35:6a:97:b9:
                    42:4f:0b:c3:83:e5:bd:2e:7e:24:a1:91:12:f6:2e:
                    18:23:9a:e2:d3:b1:13:2f:83:8a:1b:d6:78:16:e7:
                    d0:4c:45:59:0c:a1:7b:5a:a6:87:b2:e8:19:2b:53:
                    47:88:59:9f:7a:53:65:a6:d6:9b:05:c5:44:f0:48:
                    97:c8:f2:12:eb:95:d0:75:04:9e:d4:14:2a:5a:84:
                    6f:84:3c:3a:c8:7f:5a:81:40:fb:da:16:e6:c5:4f:
                    73:f4:ae:6a:e3:ed:10:20:5f:ba:b0:04:71:4a:bd:
                    1a:bd:02:43:a3:a6:34:55:7d:80:dc:6e:b1:83:20:
                    c6:cc:55:d5:4a:ae:d0:b7:1f:73:a0:fb:ce:5e:a4:
                    f8:6f:92:64:c8:5a:88:6e:33:20:ed:01:33:55:56:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:24:0b:0e:47:29:45:23:4f:88:65:b9:02:c5:27:6c:84:5c:
         04:83:e6:f7:e6:d0:ae:14:a9:18:de:2c:3b:a8:68:63:6b:1d:
         a4:d6:dd:ff:50:6e:a4:7d:27:87:f9:20:64:5f:73:d1:53:05:
         fc:05:0e:d7:d9:a7:52:6f:1b:a9:2f:c0:fa:4e:07:07:97:61:
         bd:78:9d:dc:c1:16:b7:79:8a:20:b0:f2:78:ab:af:2f:fb:04:
         cb:2a:1a:9a:ee:a6:a6:2f:86:4a:81:a1:69:46:c4:0b:95:d7:
         fe:e7:e0:24:16:fd:70:ea:80:c5:0b:62:e7:ce:d3:e8:a6:cb:
         59:7c:95:ad:d2:d6:d9:ad:61:6b:ae:f0:72:97:c8:1f:db:f7:
         7b:e7:a9:9b:42:58:6a:6f:de:1e:d0:78:87:c4:71:d5:00:27:
         21:68:5c:a0:d6:d6:f4:a3:75:1d:62:76:ab:78:ed:c9:c3:21:
         bb:a7:4e:c7:01:0b:d9:67:eb:27:fb:1b:a6:67:34:73:19:c8:
         0d:1c:0f:1c:ee:2b:20:12:b0:dc:62:48:6e:b8:95:ba:56:25:
         ea:95:32:53:8a:f4:10:97:9c:d6:75:37:c6:79:c9:69:fa:61:
         1d:44:62:64:27:5b:27:1e:8e:9d:3a:da:46:27:1c:8f:09:55:
         5c:58:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org