RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer (download)

Subject key identifier:   00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft
CA Repository:            repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.119.116.0/22
    2: IP: 2403:4340::/32

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:64:72:61:cf:f6:59:58:81:ba:25:80:15:f6:c9:71:9f:ca:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 20:54:39 2020 GMT
            Not After : Oct 23 20:59:39 2021 GMT
        Subject: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:c3:f8:9d:8a:06:32:f4:06:74:e7:1e:4d:
                    28:94:f3:bd:77:86:cf:4d:7b:c2:5b:32:25:08:d8:
                    95:2f:71:57:83:b0:ee:d1:39:c9:1a:d6:df:4b:13:
                    2c:0c:69:75:7e:68:53:59:86:41:4d:65:4d:cd:25:
                    38:d8:e8:60:49:be:1b:c0:5f:a0:e7:85:a1:ec:0b:
                    41:f0:5e:68:e6:9e:39:ca:48:bb:7e:76:1f:dc:42:
                    50:78:e7:b3:24:c3:2d:04:42:d4:93:a3:56:15:db:
                    4b:5a:65:b1:24:b7:1e:2a:ec:b2:ae:c5:dd:0e:66:
                    fe:ff:47:34:78:85:a0:f6:5c:3e:e4:4c:95:40:63:
                    78:da:73:fa:bd:0e:62:a6:f0:87:76:6f:1a:1a:6d:
                    9a:a3:4a:cb:92:df:3c:df:da:21:5d:75:64:09:a7:
                    dd:24:a7:04:fe:b5:d8:3c:20:f4:14:8c:ca:3c:20:
                    c2:5f:f4:d2:89:49:39:cc:d5:e4:79:ff:66:5b:6e:
                    98:ee:6c:03:a2:85:61:0e:2a:9c:e6:e0:4a:82:b5:
                    e3:5d:bb:7f:ac:9f:46:8b:ff:e5:6a:eb:15:e9:64:
                    71:5b:36:f4:be:3b:3e:a1:4f:80:8f:f6:5f:69:57:
                    b8:cc:16:12:a2:72:43:1f:06:8a:1f:f6:ff:e7:e6:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....gwt0
....0....$.C@
    Signature Algorithm: sha256WithRSAEncryption
         08:be:14:06:9c:0c:76:67:9b:d5:d8:85:87:6f:c6:a6:e4:4b:
         e4:2d:cd:07:6c:01:50:22:15:dc:9c:37:69:07:c6:27:59:8a:
         b5:ba:91:28:51:4b:84:01:14:38:d3:11:66:e3:63:0a:19:f9:
         d6:a4:88:2f:56:37:76:49:92:1d:f4:08:f1:23:62:44:e1:93:
         14:a4:0d:56:89:ee:52:f6:bc:9f:cb:fb:6a:37:c2:50:64:60:
         28:17:7e:8f:6b:09:ed:38:84:16:b3:04:52:88:94:6e:17:24:
         e3:86:8b:09:dc:3e:f0:83:c0:5e:e5:1e:55:12:bd:fc:18:a4:
         d0:19:3f:0d:97:ca:a9:64:43:ea:0f:85:80:fb:df:6a:dc:1b:
         71:5f:69:d8:68:ce:35:cc:5e:37:3c:28:db:94:8d:77:89:a6:
         ea:55:50:1c:e4:80:2a:b2:2a:53:25:01:72:07:29:92:fc:ee:
         43:1e:2c:b9:6d:16:6b:44:96:4e:7b:5e:ea:df:de:1d:c8:31:
         0f:42:bd:b0:ce:ae:06:a7:31:fa:79:1f:db:3f:9c:9b:ea:82:
         c6:71:00:a7:a9:c4:e3:32:b4:22:eb:e8:9d:a9:23:a3:87:20:
         f5:b8:b5:38:45:4c:49:b3:5c:ca:c8:87:7b:60:8c:b7:91:27:
         be:63:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 14:36:17 2021 by LibreSSL & rpki-client.