Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer
File:                     ED137633BAEE661A0ACBBF277089F107CB59439A.cer (raw, json)
Hash identifier:          KQROS4wf5RK40uw2uy68p4NCAYtuSH2P5/FHvfjdUsc=
Subject key identifier:   ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6732D1F2B84977704C76B6A85D4B335A5A5026F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 22 Dec 2023 13:42:09 +0000
Certificate not after:    Fri 20 Dec 2024 13:47:09 +0000
Subordinate resources:    IP: 103.162.105.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 00:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:32:d1:f2:b8:49:77:70:4c:76:b6:a8:5d:4b:33:5a:5a:50:26:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 22 13:42:09 2023 GMT
            Not After : Dec 20 13:47:09 2024 GMT
        Subject: CN=ED137633BAEE661A0ACBBF277089F107CB59439A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:7d:da:90:44:e1:7b:80:77:79:2d:2e:43:
                    58:83:87:50:c6:06:f6:b2:05:db:5e:69:c9:ef:15:
                    48:3d:3f:8d:d7:de:d0:11:5d:42:86:67:a2:01:40:
                    3c:e3:93:bb:10:3c:99:ae:d7:24:50:c5:d4:74:98:
                    31:f7:c0:cd:40:6a:f4:90:3a:1e:cb:4d:67:f2:56:
                    e7:5d:22:ff:0e:4f:4c:23:db:59:6c:20:4e:a1:7c:
                    af:d7:ec:24:50:79:be:a5:6b:7d:92:5f:e3:74:4d:
                    1d:97:03:f6:89:4d:56:12:8d:e1:37:11:a1:08:a0:
                    09:7d:81:d3:b6:4f:52:db:cb:31:8a:d1:34:2c:b9:
                    58:e9:5b:45:63:0c:52:f5:b4:8b:77:e3:ba:68:d4:
                    66:8b:90:29:36:ea:ac:2c:60:9d:06:9d:70:e8:ae:
                    25:df:a1:eb:f5:68:2e:54:cc:24:f8:77:0e:f6:85:
                    d4:7b:50:2f:02:5a:02:4a:3b:a0:2b:23:d2:79:a3:
                    f9:4f:70:00:8c:34:a9:bc:54:86:7e:58:a7:8d:e3:
                    b7:60:a1:cb:f1:44:c3:22:ef:81:92:9d:a2:a4:d9:
                    7c:1b:bf:c9:e1:72:c7:7a:9a:f1:2c:2c:95:6b:9f:
                    bc:62:1c:d0:5c:77:ca:00:06:0c:a8:37:c2:2d:a0:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:13:4e:e5:85:2c:e6:35:57:4d:e9:c8:ea:bc:79:39:24:ac:
         05:23:84:fe:c9:81:8e:9a:8f:bb:3f:0d:3a:18:96:a9:15:19:
         56:db:ac:b5:de:8b:72:d9:2e:45:e4:b0:a9:33:dc:a3:5f:74:
         bb:fb:3a:99:e8:d3:8f:ea:94:18:86:ae:59:78:e9:15:44:0b:
         9a:91:d3:e3:b0:df:55:01:4f:c2:df:6f:41:3f:19:bc:e2:00:
         41:29:64:97:4a:33:2d:db:31:22:f7:df:80:c1:33:34:f4:42:
         58:9a:67:a2:d8:f8:22:21:2e:40:8d:99:cd:e5:e1:19:83:2b:
         40:5d:10:66:82:fc:95:11:24:35:14:3c:4b:d2:0e:18:01:b3:
         e1:8f:28:f2:1a:35:42:03:a3:65:bb:11:d9:1a:f6:15:ab:38:
         eb:e9:4f:0d:70:d3:5a:50:39:8e:21:43:76:33:f8:5e:6c:ee:
         af:bb:60:52:8c:1b:79:16:a8:5a:30:61:10:b2:d2:4e:0b:ec:
         ce:66:f3:73:2e:b1:bf:ed:90:a8:9a:cc:9a:81:9d:8d:51:8c:
         26:0e:90:80:01:4a:3f:33:77:89:67:fb:ef:d8:b7:8b:a1:35:
         f8:81:7b:57:77:87:48:0b:c0:ea:33:55:3a:41:e9:22:bd:74:
         ea:e4:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:37:12 2024 by rpki-client on console-fra.rpki-client.org