Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer
File:                     F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer (raw, json)
Hash identifier:          b3wSDjB+O4J0up0SgVNreSpPEToiDNAYD2ZtOCIwva0=
Subject key identifier:   F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18ED5616727F0E5F4747D0DADFF31A9C6B7DE2BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Aug 2024 06:21:44 +0000
Certificate not after:    Fri 01 Aug 2025 06:26:44 +0000
Subordinate resources:    IP: 103.154.170.0/23
                          IP: 2001:df4:9280::/48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ed:56:16:72:7f:0e:5f:47:47:d0:da:df:f3:1a:9c:6b:7d:e2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  2 06:21:44 2024 GMT
            Not After : Aug  1 06:26:44 2025 GMT
        Subject: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:19:84:52:75:79:ae:05:75:0b:5e:de:57:
                    54:b5:e2:2b:1e:7a:1d:4f:83:0d:31:40:c0:e9:0e:
                    9f:05:6c:95:fc:cb:50:36:fe:de:53:95:97:31:ff:
                    91:c7:9e:a3:49:ce:3c:4a:1d:23:8b:07:65:1a:03:
                    62:66:2b:ef:13:eb:38:fa:42:d2:9c:ef:a7:6f:9e:
                    26:fc:21:7a:64:26:38:b9:6f:36:86:bd:76:aa:6c:
                    8b:36:99:0d:01:fd:d0:ad:9a:52:0f:2b:5a:1c:95:
                    8b:d2:c7:bd:41:54:0e:80:0c:40:54:3e:ae:0f:cb:
                    7f:58:6e:5c:5e:c6:0a:f0:8c:89:d9:dc:b1:c1:54:
                    29:8d:06:a9:f2:a3:17:05:e6:78:41:f7:ef:ce:d0:
                    d0:a3:23:fa:9c:53:63:7b:4c:d3:98:94:8f:d2:9b:
                    2e:2f:1b:a9:92:1e:98:17:ea:df:c9:9d:66:40:c0:
                    9a:3e:17:71:e3:4e:69:9b:b8:d9:eb:6c:8c:40:0b:
                    31:7e:8d:e8:9c:37:f6:46:e9:42:9a:8c:c5:67:11:
                    10:9e:2b:af:cc:d7:09:8f:1f:6f:34:90:9a:79:cd:
                    72:e3:f3:cb:dc:97:7e:b1:59:31:45:73:4c:c0:33:
                    06:76:fa:f0:ce:cc:32:05:3c:21:21:1e:63:a7:07:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.170.0/23
                IPv6:
                  2001:df4:9280::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:96:40:96:2f:35:48:15:ad:f9:0f:e5:53:c0:7a:98:9d:95:
         42:59:63:aa:75:cd:65:0d:5e:99:9c:42:f0:47:1a:c6:be:06:
         f8:11:19:fc:3a:39:c0:29:dc:a1:b8:55:45:7b:57:3e:bd:f2:
         f7:52:d1:c8:ab:29:e3:e8:3e:95:42:90:5d:65:31:c5:04:05:
         d1:3c:82:cc:e8:d2:55:62:5c:c0:6f:2a:f3:58:a2:75:2b:25:
         12:a8:64:51:b6:57:02:66:ce:c3:dc:27:48:9d:65:79:02:c8:
         e6:e5:5d:c7:b8:83:9e:18:fd:e0:fe:54:99:bf:d5:f9:ea:a0:
         5a:e9:fb:f9:fc:a0:a8:ea:43:05:b9:86:9f:b1:8c:be:15:93:
         57:c5:dc:a7:9e:44:ce:a7:63:80:fb:b0:ad:8c:46:20:c2:42:
         78:d7:e6:4e:89:01:bb:3a:29:60:6e:42:1d:62:b5:19:f9:57:
         73:64:87:d8:39:62:c2:b8:b0:db:e6:9e:5f:00:d5:5c:f1:8a:
         e4:4c:48:54:f8:9a:be:5d:3c:b8:3b:36:ce:c6:95:45:7b:82:
         94:73:52:57:ba:63:6c:85:63:a7:3f:2e:9a:3c:bd:ce:d6:2a:
         ab:e1:1a:8e:2e:25:0f:5a:7e:c5:87:13:bc:a7:d7:69:d8:c8:
         88:18:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:35 2024 by rpki-client on console-ams.rpki-client.org