Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
File:                     FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer (raw, json)
Hash identifier:          m8VosBBUwPfk1F9LAWtMLPyUWlPgPzUO293cohjxKYs=
Subject key identifier:   FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       409D7F4B6071278E57EE99792E37BCE11F15F665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 09:11:01 +0000
Certificate not after:    Wed 25 Dec 2024 09:16:01 +0000
Subordinate resources:    IP: 103.180.194.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9d:7f:4b:60:71:27:8e:57:ee:99:79:2e:37:bc:e1:1f:15:f6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 27 09:11:01 2023 GMT
            Not After : Dec 25 09:16:01 2024 GMT
        Subject: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:fc:40:26:c2:85:0c:36:ff:b3:55:d8:94:
                    f6:8a:91:3f:e8:4f:e2:4c:e0:f9:c3:68:0d:4d:c1:
                    8e:a7:2d:26:ef:ef:b3:ba:8d:d2:bf:2b:c0:08:82:
                    b8:17:dd:e7:9e:b4:05:51:09:85:06:cb:3c:23:eb:
                    51:27:cc:7c:20:6d:3e:00:ca:05:c7:2d:d9:6e:27:
                    b5:56:0f:92:21:29:48:d2:c5:12:e8:d9:4d:a5:a2:
                    80:6f:06:32:29:7c:c2:20:de:0c:40:40:fb:27:9a:
                    7a:9e:1e:ab:a9:85:6a:30:f3:16:4a:41:d1:b0:90:
                    c2:98:04:cb:d0:90:2f:0b:6c:de:a8:ee:9f:7a:29:
                    49:1e:41:27:4a:ef:11:5d:0c:e1:95:46:ac:59:34:
                    69:44:16:be:27:26:db:34:25:bb:25:16:7e:1e:f7:
                    fc:0a:d8:90:d9:0f:8a:4c:d1:0f:f7:15:00:11:0c:
                    8e:5d:07:61:59:77:af:c5:ee:8f:7a:68:0a:53:60:
                    07:c2:6b:cb:52:df:c3:44:a2:7e:ab:3d:17:83:b7:
                    1d:0d:06:84:4a:db:11:f1:7c:24:bc:13:18:c5:37:
                    a7:a5:39:aa:ea:56:18:51:eb:4a:9d:e1:18:70:73:
                    be:09:29:d3:b4:bc:94:33:db:23:73:2f:22:c2:85:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:e6:2e:3c:49:b1:b4:81:5d:47:91:bd:a7:7c:a7:58:be:d6:
         f5:21:79:17:ec:60:b7:a4:6e:a9:69:ef:c7:d1:0c:84:e6:39:
         aa:73:9f:5e:1b:66:5e:de:34:c8:b4:9f:cd:3b:f2:9b:d8:74:
         f4:88:03:df:ee:3f:a9:b3:37:52:07:84:82:ca:7a:95:19:50:
         da:56:a5:05:53:60:b8:aa:28:3e:4d:c3:00:96:0c:fb:db:e2:
         d2:73:d6:7e:77:f3:a3:f2:f8:70:ce:c6:67:cc:6f:90:1a:a0:
         f5:87:93:87:e5:3b:25:74:f4:0c:5e:13:b2:b2:70:9b:8f:0c:
         be:cd:11:de:72:1d:6f:6a:28:85:03:2b:d2:67:ab:8f:83:a6:
         cf:a4:86:f0:38:b9:9f:d7:b2:17:86:37:11:56:13:c1:98:c7:
         4c:aa:d0:b6:dc:e2:e4:64:74:24:81:7d:98:0f:f9:07:46:1a:
         2a:56:78:78:24:fe:99:b5:79:9d:18:39:80:56:87:21:8d:d1:
         78:50:d4:d9:dd:40:dc:86:4c:37:e0:2b:e1:cf:12:50:4d:2c:
         90:3e:cc:bd:92:82:ca:66:b9:e4:3d:f5:b3:64:8c:7c:d4:c4:
         cc:e8:72:9f:82:6c:ca:7e:4f:54:93:08:08:51:c9:40:99:7a:
         c0:58:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:33:25 2024 by rpki-client on console-ams.rpki-client.org