Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer
File:                     E7D91E7B841DB274E77E823084312F8B78A5C951.cer (raw, json)
Hash identifier:          496eTlSdER/P2iQy9dYkNE4J8n90CPMSAyVd5MZAcsg=
Subject key identifier:   E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D7113D17A7CF3AFAA91F8047323E114C0E64CF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2024 08:00:16 +0000
Certificate not after:    Wed 13 Aug 2025 08:05:16 +0000
Subordinate resources:    IP: 103.141.238.0/23
                          IP: 2001:df1:1c80::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:71:13:d1:7a:7c:f3:af:aa:91:f8:04:73:23:e1:14:c0:e6:4c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 14 08:00:16 2024 GMT
            Not After : Aug 13 08:05:16 2025 GMT
        Subject: CN=E7D91E7B841DB274E77E823084312F8B78A5C951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:db:8c:c5:e5:6f:9a:6a:c2:4f:2d:8e:92:
                    87:7e:87:37:50:84:ef:28:f4:8b:c9:f3:97:f6:13:
                    42:5b:ec:20:85:95:9e:8e:7c:a0:fd:4d:4b:fa:dc:
                    74:c1:4e:84:aa:cf:b0:2f:57:7c:d9:98:7e:6b:e2:
                    14:22:09:11:bc:2a:84:24:ee:b4:f9:1e:33:90:1b:
                    04:0b:69:cb:34:55:ec:02:20:b8:fd:87:9b:fb:12:
                    79:07:88:76:10:a2:ee:23:1f:25:5a:27:e9:e9:07:
                    5e:8b:52:5e:83:58:fe:df:f6:bb:fb:35:a8:dc:32:
                    4d:01:df:94:c4:16:ac:92:04:5c:25:52:d0:0e:95:
                    af:6a:52:8a:f6:73:a4:d8:09:ac:70:2d:e2:66:ef:
                    ae:9f:8a:60:79:40:f6:a7:2c:a5:df:a8:b0:4a:a3:
                    af:8a:37:aa:f7:a6:1e:4a:4b:8b:ab:e7:38:64:97:
                    08:c3:d2:83:e3:46:44:4a:db:c7:4e:1d:db:ba:c9:
                    04:a8:e6:fd:09:23:79:15:8b:f4:44:6e:c6:74:86:
                    41:69:2d:66:47:c2:d7:d6:e7:a0:8d:a9:a5:34:40:
                    18:7d:42:30:9e:8d:e1:0c:7c:8c:3d:c9:b2:10:c7:
                    36:af:47:23:c0:a0:d7:8f:27:ac:f1:65:91:5d:85:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.238.0/23
                IPv6:
                  2001:df1:1c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:12:fd:9d:fe:38:9d:be:a7:f6:85:4c:5b:21:f8:27:6c:4d:
         c2:d1:aa:66:86:a9:ae:77:fd:30:7b:50:af:26:0e:f8:33:37:
         1c:16:5f:77:2d:6f:8c:56:cb:7f:ae:23:44:29:15:e6:d1:7e:
         13:33:20:a3:20:b1:ec:57:67:9f:a1:c1:8f:24:d0:b7:dc:04:
         d8:8c:f0:0b:f4:fd:b6:95:eb:b4:cf:6c:a0:58:2b:36:82:ca:
         c3:7f:0b:82:63:66:d2:e5:0b:bc:01:ca:aa:c8:d2:40:91:86:
         43:ce:e5:da:dd:5b:50:7f:a2:0e:7b:aa:70:e2:2c:5d:7a:24:
         23:3a:55:18:b3:bb:06:0e:b7:9c:5f:50:23:6e:60:ed:07:40:
         2f:ab:11:fb:97:12:36:a0:67:ec:7e:7e:11:63:45:23:d9:73:
         4f:31:67:6c:be:4c:3e:70:af:fe:45:07:83:c0:a5:bf:24:19:
         01:fc:80:3e:02:f1:35:7c:cf:a1:c6:19:d3:9a:fe:71:ce:b9:
         8a:84:cf:41:14:07:e4:cb:44:69:b1:c2:64:46:78:1b:6a:78:
         12:ed:20:51:08:29:35:e1:9b:e6:0e:59:ab:b2:ca:33:88:f4:
         c8:44:0c:d1:65:3d:fe:2e:d7:78:03:25:62:3f:57:bf:74:d5:
         77:68:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:34 2024 by rpki-client on console-ams.rpki-client.org