Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer
File:                     FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer (raw, json)
Hash identifier:          QeertrOq2+tP33jEuqjwGkI8rVrlG2ZhYXWyMTclJAU=
Subject key identifier:   FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5AB14DCADC1F4CA1DE82CA0C44CC0ADEEC8B2C48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 04:52:27 +0000
Certificate not after:    Tue 02 Jun 2026 04:57:27 +0000
Subordinate resources:    IP: 103.112.189.0/24
                          IP: 2001:df4:b300::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 03:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b1:4d:ca:dc:1f:4c:a1:de:82:ca:0c:44:cc:0a:de:ec:8b:2c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  3 04:52:27 2025 GMT
            Not After : Jun  2 04:57:27 2026 GMT
        Subject: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:bc:f8:6d:f7:62:87:99:c5:3b:fe:8e:a7:
                    fb:64:33:d0:ea:19:a5:12:be:a5:11:4e:f9:33:ab:
                    13:5b:87:10:99:ea:35:6e:e3:4c:40:da:62:91:35:
                    6b:30:2c:27:61:4e:37:54:66:05:e9:d4:14:65:18:
                    05:d3:50:1f:ac:34:d8:50:c7:4e:15:4c:bf:e6:e9:
                    62:64:1c:2a:27:b7:e0:d8:ca:52:fb:00:99:3c:7d:
                    03:88:f6:89:71:e8:5f:39:a1:c2:37:b3:0b:d1:80:
                    c4:69:45:26:df:96:3e:b6:8c:6e:b8:17:a8:23:2e:
                    ec:56:08:84:f2:c0:cd:d5:14:97:90:9b:f3:94:89:
                    5e:c2:20:ad:cd:93:f7:b7:48:e1:73:86:9e:16:fb:
                    72:f5:9e:88:dc:74:08:09:6e:4f:85:1b:30:51:c3:
                    4b:3d:78:8e:0d:84:5c:68:64:96:84:30:1f:1e:ca:
                    39:e4:47:db:44:9c:67:b6:1a:24:92:38:b5:7c:49:
                    27:4f:03:92:ef:85:a8:7f:c4:2c:17:e3:fb:3b:e0:
                    35:14:4f:49:36:8b:5c:a8:66:4b:a2:c7:00:3d:cf:
                    58:aa:95:01:84:4b:9f:7f:0d:4c:c4:5d:2f:f8:6a:
                    36:70:41:6c:a2:71:8d:7a:11:8c:d5:66:9d:08:28:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.189.0/24
                IPv6:
                  2001:df4:b300::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:82:57:fe:51:28:a1:de:b4:b5:cf:19:4a:94:82:f9:3c:
         62:c6:71:af:1d:51:46:fa:da:a7:d8:ca:08:e3:a5:ca:93:4a:
         b1:e5:f0:eb:f0:75:4f:6a:1e:8f:ca:48:7b:b2:c3:41:0c:78:
         29:3f:d9:83:d5:26:b2:bc:16:1e:c1:2c:95:1c:2a:e4:6d:f7:
         5d:e4:89:4a:f5:7a:2a:c8:f9:28:a0:1d:b7:64:70:20:e3:fd:
         27:d5:ed:bd:bd:c9:13:a8:cc:b8:10:29:5d:d0:b2:bf:b7:8a:
         4e:d5:47:10:7f:4d:0a:3c:78:89:db:00:b1:4c:45:5d:ee:dc:
         44:1d:09:d1:d4:0d:de:c4:0d:a4:d5:04:72:d7:a5:c7:20:fc:
         a1:df:ed:95:4b:fd:dc:7e:f1:e9:7d:55:fc:1d:d8:8e:71:90:
         bc:03:f3:b8:a7:3d:18:7a:01:7d:a1:c0:82:2f:32:ac:b4:d0:
         2f:58:45:e9:81:50:76:44:a1:92:ef:45:5d:08:c9:fa:06:25:
         75:d8:cb:10:e9:26:55:7f:e9:e9:4e:05:fa:86:60:13:b5:23:
         27:5d:b8:5b:5b:1d:de:4c:85:28:e4:ec:92:2c:70:6c:02:3f:
         29:7d:60:12:16:e7:2c:27:d5:a7:8e:66:74:e9:57:49:9f:da:
         33:4c:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:25:26 2025 by rpki-client