Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
File:                     F61D0A85B56D8F824658A8287BE8D4F659680324.cer (raw, json)
Hash identifier:          ynjt8zE8b7DJBvcmAHu0KlwZTUW7+Ln8H2XGdXRJljo=
Subject key identifier:   F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       14246EE826CE3229379C33DBF65B6D556828212D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 09:40:35 +0000
Certificate not after:    Tue 25 Feb 2025 09:45:35 +0000
Subordinate resources:    IP: 103.186.96.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:24:6e:e8:26:ce:32:29:37:9c:33:db:f6:5b:6d:55:68:28:21:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 27 09:40:35 2024 GMT
            Not After : Feb 25 09:45:35 2025 GMT
        Subject: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:7d:53:1e:5a:cd:9e:6f:20:c1:e0:72:fc:
                    69:56:12:7a:f8:ef:e2:5c:4d:28:e3:9d:60:69:df:
                    64:20:74:a6:56:e5:cc:ff:d8:39:f3:ef:33:51:b8:
                    e3:6d:90:9e:d9:03:a6:e1:d2:bc:9e:9c:2d:6c:5f:
                    cd:ee:85:4e:0e:89:0e:04:9c:d0:97:d5:23:f2:47:
                    13:b7:16:01:7c:6a:62:af:9a:9b:cd:13:9c:b4:b9:
                    0a:2e:9f:58:92:c1:85:aa:e4:cb:2b:fe:ee:f0:98:
                    20:cb:84:87:30:ed:db:9c:15:cf:d2:b3:b2:0a:8b:
                    07:93:bb:8e:32:33:35:c6:f4:65:6e:36:cb:6b:ed:
                    9f:12:97:19:9b:3d:31:69:fd:e8:5a:88:ec:d5:a7:
                    c8:63:d5:5f:ab:b2:df:1d:82:55:d9:7d:9d:72:e1:
                    f5:0f:2a:41:b4:a4:71:77:d1:1c:df:c9:9c:41:2a:
                    c9:10:cc:75:59:38:f0:10:6a:d8:8a:75:91:0a:53:
                    7c:2e:76:d4:0d:dd:fb:5c:5d:36:fc:11:ba:26:dc:
                    26:9e:22:e9:13:87:4d:14:6c:95:91:fe:a6:cf:c4:
                    59:25:74:48:00:42:5c:f6:9a:15:af:a6:b4:97:c7:
                    30:f9:18:0a:1b:a3:e3:4e:a8:1b:5b:2f:a4:26:4a:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:26:6b:fe:d1:a9:aa:49:d1:0d:2b:bb:3b:b9:b3:ea:f4:
         57:59:e0:6b:3e:7d:4c:0e:46:94:32:03:3d:3d:c8:84:fa:c8:
         2c:f2:93:01:11:93:d4:0c:2b:be:88:7a:b4:ef:65:60:bc:09:
         fe:84:0c:c5:a6:87:74:2b:ff:b0:65:19:17:23:3f:2e:fe:27:
         65:fe:57:9d:e6:73:6f:4f:76:7f:70:04:eb:43:17:2a:a6:65:
         43:c8:b1:c9:1b:40:1d:ee:8f:d1:b6:29:9f:8d:dd:29:a3:08:
         0b:d5:5a:24:c4:3a:fc:90:bb:21:24:e4:1c:2d:3f:ae:77:c8:
         35:ab:53:1d:33:54:ed:d5:b3:f1:36:96:b2:fb:8a:5d:47:a3:
         bd:10:f2:c4:7f:02:86:9f:65:53:ea:cf:7e:82:1b:30:04:cf:
         91:6d:21:74:e6:2e:41:b6:12:b8:76:29:bf:ea:24:0b:1d:dc:
         ec:00:86:0c:2e:06:50:86:e0:2f:11:07:6c:32:98:0d:4a:17:
         bd:d5:ed:1c:42:dc:56:dc:8a:34:7e:db:5f:e8:a5:09:2f:c0:
         7b:0e:97:4f:5b:60:64:b4:f5:97:c8:95:d4:b2:16:2d:85:8f:
         52:18:39:aa:04:9f:aa:40:96:68:be:7f:7a:ed:dc:68:3f:41:
         5e:8c:30:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:02 2024 by rpki-client on console-fra.rpki-client.org