Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
File:                     F999F87E868383FB5DA974A732B21FA770F1AC5C.cer (raw, json)
Hash identifier:          p5lS/dEtftJLJJGXqzjF74YQD6DmzzPJbJ2PlbK9Ocs=
Subject key identifier:   F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       275691BA4CBC8C92B51ADEBE7375B7E791AED1A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 12:49:27 +0000
Certificate not after:    Wed 04 Sep 2024 12:54:27 +0000
Subordinate resources:    IP: 103.117.183.0/24
                          IP: 2001:df5:b100::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:56:91:ba:4c:bc:8c:92:b5:1a:de:be:73:75:b7:e7:91:ae:d1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 12:49:27 2023 GMT
            Not After : Sep  4 12:54:27 2024 GMT
        Subject: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:25:4a:97:d6:6f:60:8e:6a:e3:77:98:be:d5:
                    4f:0a:40:25:ee:6f:03:45:0c:00:82:1c:97:45:be:
                    c0:1b:33:e0:f3:85:82:d5:9c:61:36:3f:6a:c0:9f:
                    2f:22:56:49:43:ca:59:c0:aa:c7:e1:4d:92:08:03:
                    40:90:92:f2:1a:80:68:40:f6:3a:0c:65:2f:49:a6:
                    64:e5:36:0e:ff:f2:cf:a3:03:34:20:a4:43:78:c5:
                    f3:64:b7:a7:d4:0d:7c:f1:a5:de:41:8b:be:87:ad:
                    4c:c5:f7:79:1b:ec:1a:00:2e:07:98:96:95:48:1f:
                    e5:3f:dc:42:9d:32:b1:76:6d:f3:1f:12:bf:08:3b:
                    f5:f3:52:1d:4e:20:a1:31:13:15:2e:2a:af:13:fb:
                    a9:eb:01:34:c1:16:04:ce:04:b4:fd:2b:73:be:96:
                    54:5b:fe:3c:00:cb:38:7a:1b:82:a5:3e:18:81:75:
                    b8:30:fc:18:ff:78:82:d6:d0:84:16:07:b8:39:61:
                    5e:67:6c:b4:2d:af:ac:59:75:14:b7:1b:03:64:15:
                    60:52:67:26:95:e9:07:f7:79:c2:0e:9f:d0:f3:e2:
                    64:52:74:9c:2d:71:02:4a:8d:91:e1:42:78:92:b1:
                    30:8d:cd:b5:bb:93:0d:d2:ae:8f:1c:3c:e9:94:1a:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.183.0/24
                IPv6:
                  2001:df5:b100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:30:80:cb:b7:c4:cc:d3:62:9f:3f:64:9d:06:17:ed:8d:14:
         c2:c3:d3:a6:ab:25:19:dd:a3:02:7c:9d:15:22:89:42:17:cf:
         30:1c:9e:ec:18:07:3a:c3:32:d2:75:de:c3:d0:c2:9f:97:1e:
         6c:32:a6:98:60:92:d0:b3:49:d2:01:63:4e:b8:9a:ec:a7:f8:
         7d:17:ef:dd:4e:c3:bd:4c:d0:86:c9:83:1e:a6:71:23:8a:d9:
         30:d7:e1:b6:41:b5:3e:6b:35:04:94:d5:88:8a:45:66:91:01:
         99:dc:6f:8d:31:56:d7:f9:66:0a:78:36:95:b6:7d:3f:49:ee:
         0b:b3:93:c5:9b:6a:8b:8c:f9:46:92:1f:5f:64:89:32:00:0d:
         ed:1c:8a:90:b0:b5:93:cc:e4:8c:a5:8f:00:8c:d9:cd:2d:27:
         55:3c:07:51:f0:a1:8f:bc:7a:e6:4b:f2:28:0c:c1:73:56:9c:
         5b:e2:7c:82:03:fa:c4:47:ab:bb:1b:45:60:ae:32:60:a1:3c:
         87:b8:10:d1:f3:32:09:4a:32:58:a8:75:82:d7:56:96:67:75:
         da:bc:2d:80:1f:b5:b7:2f:99:40:06:de:e7:0c:6f:6b:39:9f:
         d8:ee:0c:35:6a:c3:0d:d1:7e:9b:d2:9d:af:f0:78:c2:59:a7:
         de:af:d6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:38:03 2024 by rpki-client on console-fra.rpki-client.org