Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
File:                     EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer (raw, json)
Hash identifier:          XZBsuTni7tv2v8aqhea7xP2YI7cafCT83LG39GNv+OA=
Subject key identifier:   EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       650DD4F61B100B77F34E2FF3B47B22AD51B05FF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 13:08:25 +0000
Certificate not after:    Tue 24 Dec 2024 13:13:25 +0000
Subordinate resources:    IP: 103.180.166.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:d4:f6:1b:10:0b:77:f3:4e:2f:f3:b4:7b:22:ad:51:b0:5f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 26 13:08:25 2023 GMT
            Not After : Dec 24 13:13:25 2024 GMT
        Subject: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:71:2c:5a:8b:dd:95:b6:57:2d:13:e4:1f:
                    38:e0:b4:ef:5e:7c:c6:fe:1e:49:fa:56:27:27:17:
                    51:cd:36:88:dd:06:51:90:35:b6:2e:bd:b4:c5:e6:
                    f9:cf:1a:6f:ef:92:41:00:b8:12:84:73:90:12:07:
                    2a:38:2d:97:21:62:7e:f2:58:c8:e5:37:29:f6:5e:
                    f6:32:93:25:a4:f5:3e:35:6c:9d:eb:40:92:61:d3:
                    7e:9d:f1:46:e5:87:bd:e4:a0:33:73:b6:8b:8f:8e:
                    06:bf:f7:0f:bd:d7:43:c2:c4:f1:76:e0:88:4f:b1:
                    34:28:de:e1:b4:24:fc:38:88:aa:c1:ab:64:a6:64:
                    6c:77:41:6b:f7:c2:a5:7a:5f:83:83:89:c0:21:7a:
                    cc:13:5c:a1:51:b6:98:2e:85:63:05:75:79:60:b1:
                    6d:8f:3b:f4:00:e7:46:bd:2d:3d:64:80:e6:85:d8:
                    98:80:4b:6c:c4:e1:4b:23:b8:cd:71:6e:c6:4b:0a:
                    86:6c:c2:84:5e:e9:39:c2:47:37:68:e1:f1:bf:57:
                    fe:74:7f:6c:fe:96:31:d9:d4:24:41:85:f6:57:43:
                    c5:1c:f9:94:54:f1:09:09:29:34:b9:a6:56:fe:72:
                    1a:1e:1e:f1:e5:eb:48:31:3c:f5:b6:ab:88:a7:5a:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:eb:1f:5e:ea:26:a7:09:ef:19:d4:2e:83:d4:3d:44:5b:
         50:75:cf:c0:1f:a2:f8:17:d5:4e:95:15:56:8e:31:44:82:a8:
         86:e8:f5:ab:8a:25:a4:08:43:ea:cb:92:b0:35:94:d7:85:45:
         1d:76:29:99:b5:5b:3a:9f:1a:93:e6:06:e8:1f:3a:84:78:85:
         ae:c8:59:ee:0b:30:a7:41:06:37:7c:df:eb:b5:af:e6:56:11:
         85:4c:77:42:5f:65:48:1a:b0:dc:a1:6e:5e:a0:fe:99:c4:7a:
         27:f0:80:03:db:0d:5c:9a:a3:32:a9:4e:f3:a2:ab:97:fc:ec:
         72:99:5b:49:57:9f:a7:03:a4:0d:9d:4c:9d:3c:e3:43:c9:88:
         0e:07:2a:ac:9e:d6:a5:42:fe:a5:d2:f9:3f:98:a2:0a:0a:b3:
         dc:cf:4a:5f:e7:4f:c3:0a:5d:ec:97:01:91:00:9b:a7:b7:b1:
         19:1f:d3:4b:7a:07:5b:3e:e2:bd:52:f6:15:d3:7d:dd:68:32:
         45:09:69:7b:ba:fc:e8:34:f3:b1:a7:78:0a:f2:e6:6f:04:f2:
         ab:b6:4f:8c:b4:53:35:50:4c:d4:92:89:cf:d3:ba:de:5f:30:
         84:67:f4:2c:bd:27:e6:26:2a:88:7a:9b:1a:91:03:96:92:aa:
         4f:74:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:02:29 2024 by rpki-client on console-fra.rpki-client.org