Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
File:                     F1F25C19AB419E370912452242B8B55038581157.cer (raw, json)
Hash identifier:          BYL6VjM4n5pb94tO18z52qH6CbQvjxaoOfRtPgXzrOg=
Subject key identifier:   F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       29157AD8B2CBFA3D221A1DE0EA1047A9CC3C4F7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 13:42:21 +0000
Certificate not after:    Thu 27 Mar 2025 13:47:21 +0000
Subordinate resources:    IP: 103.54.168.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:15:7a:d8:b2:cb:fa:3d:22:1a:1d:e0:ea:10:47:a9:cc:3c:4f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar 28 13:42:21 2024 GMT
            Not After : Mar 27 13:47:21 2025 GMT
        Subject: CN=F1F25C19AB419E370912452242B8B55038581157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:1d:cd:2f:7f:d8:a3:84:23:fd:eb:51:3d:
                    96:0c:c2:77:aa:49:9f:28:97:37:64:b6:4e:f6:5e:
                    c6:bf:4f:fc:33:3a:bb:e8:40:6f:24:15:7d:9b:ec:
                    6c:1a:77:b6:e7:97:9b:1f:f6:f8:22:36:47:d1:b0:
                    72:da:82:e2:aa:e1:b2:c7:77:f9:0d:08:6d:5d:41:
                    b8:9e:5e:7b:49:0d:87:dc:4e:2f:34:af:a4:d6:ea:
                    b6:93:6c:c9:16:a7:4f:05:a6:94:02:8f:21:30:38:
                    47:a9:00:64:5c:a4:56:d9:75:c1:0d:7c:aa:19:ce:
                    cb:0a:f9:f1:e8:f1:16:7e:40:1e:33:71:d7:f2:54:
                    35:06:d3:e1:f4:05:e0:da:2d:87:08:b7:50:0b:80:
                    b1:73:ff:b2:b5:d8:fe:d3:4d:ff:88:a8:6c:9f:6c:
                    2e:a9:16:67:84:ed:d2:87:12:c6:5c:63:0c:83:5c:
                    9f:80:ac:d4:40:4b:48:ea:30:c6:ad:c6:0c:aa:01:
                    bd:65:2d:29:cd:f7:09:93:e9:63:3f:62:c6:3f:63:
                    3c:8f:f0:95:a2:3d:ce:18:84:04:a0:21:82:8f:ac:
                    f1:8f:00:a8:30:f4:6c:24:ee:7f:24:ab:5f:da:a9:
                    7a:c5:fa:26:a2:5b:2c:7f:05:3c:84:6e:f5:e0:8a:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:dc:eb:6c:44:a9:c5:05:2b:81:ab:81:d2:d3:95:b0:d2:8a:
         7a:69:f7:4c:fa:b6:58:d3:2f:92:b0:f6:b2:df:97:c4:f5:16:
         3c:7b:94:95:3a:5c:50:ae:42:55:87:9f:c3:3b:46:14:cc:87:
         18:9f:c3:69:ba:03:ee:a3:cc:42:6a:d7:36:97:6e:6a:95:8a:
         6f:c6:4b:9c:06:87:f0:ce:7a:ed:29:5a:fe:71:be:87:da:13:
         39:dd:a5:f4:2a:ed:8d:ad:ca:7c:a8:8b:d7:90:ec:a4:92:13:
         5d:f9:3a:47:02:dd:3c:62:4c:9b:b3:48:69:0c:74:8c:71:af:
         b1:5d:2c:d4:0b:0f:90:1f:04:a9:8f:7c:1d:7b:6e:5a:a3:4b:
         ae:85:16:55:03:88:86:48:b4:8f:99:7c:9f:f7:6f:81:7c:30:
         04:ba:02:87:2a:56:c6:af:db:1e:c7:f6:dd:58:f2:d0:a5:b1:
         1c:e2:ef:a0:77:c8:41:71:31:95:fe:a9:c5:0d:2e:e9:5b:76:
         29:c4:d4:b6:2b:0b:77:ed:8f:b8:33:3c:db:3c:9a:98:1b:81:
         7c:4a:d8:c6:9a:cd:97:7f:86:f1:0c:8c:4e:d7:92:a1:e2:b9:
         e2:ad:9c:68:fc:49:6d:cc:06:a7:d5:84:fa:17:0a:ec:da:47:
         af:99:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:02:29 2024 by rpki-client on console-fra.rpki-client.org