Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
File:                     F23ACCA147720B423A9576F3E408691505B293A3.cer (raw, json)
Hash identifier:          njucmVxkSj0wi3k8QMB4EDcrO5b69i91mE8Ohpxscbg=
Subject key identifier:   F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       49A4220DA277F7F855140C7ECE02500AE5BA7C3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Sep 2024 21:38:13 +0000
Certificate not after:    Thu 11 Sep 2025 21:43:13 +0000
Subordinate resources:    IP: 103.190.28.0/23
                          IP: 2401:8a0::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a4:22:0d:a2:77:f7:f8:55:14:0c:7e:ce:02:50:0a:e5:ba:7c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 12 21:38:13 2024 GMT
            Not After : Sep 11 21:43:13 2025 GMT
        Subject: CN=F23ACCA147720B423A9576F3E408691505B293A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:04:fa:15:b1:c0:91:3b:4c:84:3e:07:26:
                    ac:30:65:b3:b5:5e:1e:72:49:03:90:af:17:ec:d5:
                    c4:07:20:0a:7c:5c:ea:2a:c6:fb:22:12:48:0a:82:
                    e0:e4:04:f5:e6:fc:37:b9:8c:38:ad:7a:11:d9:6e:
                    d2:e7:0d:bd:c9:05:16:54:eb:7e:1e:f1:53:8c:c2:
                    a8:78:f9:54:82:7f:07:7c:ac:17:47:24:9c:17:ba:
                    79:02:9d:cd:92:3d:ee:91:f1:0e:8a:d9:25:d5:01:
                    2a:fe:94:26:f1:70:9a:7d:f2:2c:e3:10:97:61:59:
                    50:f9:93:d0:3f:8e:c2:c5:32:1f:b1:e4:bd:b1:f7:
                    c1:51:5f:f5:db:a2:c3:c0:7f:f3:19:57:b9:fc:a3:
                    99:2c:36:18:ff:9b:b2:40:14:b7:49:11:bc:36:41:
                    dd:ad:c1:36:c9:eb:06:2c:34:9c:39:37:e2:80:8e:
                    56:4e:55:fd:61:02:31:0a:60:13:11:9b:3b:f8:7c:
                    07:38:2f:f0:09:8f:d7:a7:20:f9:e4:6c:30:fb:be:
                    48:11:47:5a:06:67:f9:29:ae:08:05:e1:4f:9a:33:
                    68:e6:b3:fb:34:be:8d:ff:d3:28:bd:f2:17:90:6a:
                    3c:b1:50:25:41:bd:1d:72:9c:c3:05:1f:1c:fd:52:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.28.0/23
                IPv6:
                  2401:8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:3e:a9:e1:3c:bb:7c:54:53:7b:34:96:54:6b:fa:ec:9c:40:
         22:0f:2e:c1:26:61:8c:bd:75:9f:ef:5f:11:50:cb:84:61:53:
         38:ab:6b:60:9f:61:0b:4f:6e:74:a2:6b:87:0a:c9:0a:d5:82:
         41:8b:19:97:33:5e:36:32:b1:1e:12:f3:81:80:59:a0:43:ae:
         19:5e:2b:44:08:61:ed:00:16:65:b7:f9:b0:17:2f:f4:71:9e:
         a0:ab:70:df:ea:b1:75:fc:95:6b:8f:ef:20:3c:bc:8d:06:be:
         1b:63:77:1f:42:71:6f:ad:f7:64:3a:e8:8b:fd:44:d8:3f:e8:
         d4:b9:ae:2d:8c:7a:b0:4f:21:bb:36:76:ae:2a:de:8d:7e:45:
         39:ac:ce:b5:75:84:17:a3:e4:61:09:97:42:41:c4:5e:40:2a:
         d5:85:79:13:b7:7e:93:99:d0:59:6c:e9:66:23:bc:11:a2:d7:
         28:6c:2e:53:32:22:6b:99:1d:53:35:bd:4e:63:2c:a3:4f:39:
         38:7d:0c:b7:2c:e0:34:d4:cd:83:87:0b:d0:c8:61:e3:c1:32:
         2d:6d:ae:b4:25:a1:4a:39:58:f8:1d:6e:05:b0:2c:72:34:5a:
         6e:e6:c0:13:73:95:d5:2f:be:12:da:fb:bf:8b:e4:2b:c5:e0:
         d1:08:47:f6
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUSaQiDaJ39/hVFAx+zgJQCuW6fD0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMjIxMzgxM1oX
DTI1MDkxMTIxNDMxM1owMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3
NkYzRTQwODY5MTUwNUIyOTNBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMyLBPoVscCRO0yEPgcmrDBls7VeHnJJA5CvF+zVxAcgCnxc6irG+yISSAqC
4OQE9eb8N7mMOK16Edlu0ucNvckFFlTrfh7xU4zCqHj5VIJ/B3ysF0cknBe6eQKd
zZI97pHxDorZJdUBKv6UJvFwmn3yLOMQl2FZUPmT0D+OwsUyH7HkvbH3wVFf9dui
w8B/8xlXufyjmSw2GP+bskAUt0kRvDZB3a3BNsnrBiw0nDk34oCOVk5V/WECMQpg
ExGbO/h8Bzgv8AmP16cg+eRsMPu+SBFHWgZn+SmuCAXhT5ozaOaz+zS+jf/TKL3y
F5BqPLFQJUG9HXKcwwUfHP1S0zUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPI6zKFHcgtCOpV28+QIaRUFspOjMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlZTE0Mzgy
LWQ1ODctNGU4Ni04ZTdlLTZhMjY0YTU4ZWEwNi8wL0YyM0FDQ0ExNDc3MjBCNDIz
QTk1NzZGM0U0MDg2OTE1MDVCMjkzQTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAFnvhwwDQQCAAIwBwMFACQBCKAwDQYJKoZIhvcNAQELBQADggEBABk+qeE8u3xU
U3s0llRr+uycQCIPLsEmYYy9dZ/vXxFQy4RhUzira2CfYQtPbnSia4cKyQrVgkGL
GZczXjYysR4S84GAWaBDrhleK0QIYe0AFmW3+bAXL/RxnqCrcN/qsXX8lWuP7yA8
vI0Gvhtjdx9CcW+t92Q66Iv9RNg/6NS5ri2MerBPIbs2dq4q3o1+RTmszrV1hBej
5GEJl0JBxF5AKtWFeRO3fpOZ0Fls6WYjvBGi1yhsLlMyImuZHVM1vU5jLKNPOTh9
DLcs4DTUzYOHC9DIYePBMi1trrQloUo5WPgdbgWwLHI0Wm7mwBNzldUvvhLa+7+L
5CvF4NEIR/Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org