Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
File:                     EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer (raw, json)
Hash identifier:          aylI+EcE8FRcfYG+ceL8XYpYtyXIIIb8U6AqRAviR3Q=
Subject key identifier:   EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2B866A247B44961D81D21B97BA65DC1A54699442
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 26 Nov 2024 17:47:06 +0000
Certificate not after:    Tue 25 Nov 2025 17:52:06 +0000
Subordinate resources:    IP: 103.180.166.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:86:6a:24:7b:44:96:1d:81:d2:1b:97:ba:65:dc:1a:54:69:94:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Nov 26 17:47:06 2024 GMT
            Not After : Nov 25 17:52:06 2025 GMT
        Subject: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:71:2c:5a:8b:dd:95:b6:57:2d:13:e4:1f:
                    38:e0:b4:ef:5e:7c:c6:fe:1e:49:fa:56:27:27:17:
                    51:cd:36:88:dd:06:51:90:35:b6:2e:bd:b4:c5:e6:
                    f9:cf:1a:6f:ef:92:41:00:b8:12:84:73:90:12:07:
                    2a:38:2d:97:21:62:7e:f2:58:c8:e5:37:29:f6:5e:
                    f6:32:93:25:a4:f5:3e:35:6c:9d:eb:40:92:61:d3:
                    7e:9d:f1:46:e5:87:bd:e4:a0:33:73:b6:8b:8f:8e:
                    06:bf:f7:0f:bd:d7:43:c2:c4:f1:76:e0:88:4f:b1:
                    34:28:de:e1:b4:24:fc:38:88:aa:c1:ab:64:a6:64:
                    6c:77:41:6b:f7:c2:a5:7a:5f:83:83:89:c0:21:7a:
                    cc:13:5c:a1:51:b6:98:2e:85:63:05:75:79:60:b1:
                    6d:8f:3b:f4:00:e7:46:bd:2d:3d:64:80:e6:85:d8:
                    98:80:4b:6c:c4:e1:4b:23:b8:cd:71:6e:c6:4b:0a:
                    86:6c:c2:84:5e:e9:39:c2:47:37:68:e1:f1:bf:57:
                    fe:74:7f:6c:fe:96:31:d9:d4:24:41:85:f6:57:43:
                    c5:1c:f9:94:54:f1:09:09:29:34:b9:a6:56:fe:72:
                    1a:1e:1e:f1:e5:eb:48:31:3c:f5:b6:ab:88:a7:5a:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:6d:ff:33:ff:c6:9e:20:a1:38:ef:6d:5f:de:e3:c6:96:
         95:fb:68:7d:f0:b2:dd:35:fd:7a:ff:59:ca:ae:a8:5f:3a:b5:
         0e:b0:45:a4:c1:10:5b:06:1c:9d:a5:6a:1e:34:dc:fe:a5:9b:
         55:82:55:fb:e7:7d:df:91:ea:6f:f2:73:3b:e3:3b:7e:77:fa:
         fd:4e:12:88:35:3d:44:63:7c:28:b2:12:d7:c6:d0:af:90:49:
         87:b8:f3:5e:64:8b:1f:91:01:14:f6:7c:5a:55:30:4b:32:08:
         e3:7b:5d:37:83:d1:7d:52:e9:7e:47:51:c1:87:74:99:a6:21:
         ef:82:62:f8:ab:a2:7d:b4:57:05:28:eb:70:2e:ae:71:0b:3b:
         50:2b:ef:67:1f:df:5d:98:0e:07:ea:3f:6e:80:d1:bf:1d:33:
         53:e8:fe:6a:2b:2d:e8:d4:ea:b4:ab:03:96:3d:53:74:8b:31:
         a7:4a:8b:e5:9c:93:c7:5d:2b:5f:37:7b:b0:8a:01:ca:19:6d:
         3c:39:6a:93:37:14:75:9d:12:e3:07:8c:f0:9d:5f:10:5b:1f:
         84:ab:aa:8c:60:ac:e1:89:98:be:25:db:df:56:17:59:81:13:
         66:2e:4c:e0:8e:ea:0a:4a:8b:ee:d9:57:56:52:8e:46:79:28:
         f4:1f:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:01 2025 by rpki-client