RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer (download)

Subject key identifier:   20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft
CA Repository:            repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.162.0.0/23

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:53:73:7a:ab:b9:7f:76:cb:32:2e:b2:8f:fa:87:3a:29:ba:ca:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 25 04:30:57 2021 GMT
            Not After : Jan 25 04:35:57 2022 GMT
        Subject: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:96:da:3f:7a:a2:b2:f5:43:b7:32:74:a8:
                    ac:49:60:c3:eb:cc:13:05:7b:1b:7d:1d:7e:ae:57:
                    86:cb:22:08:ac:f1:e4:7e:60:83:84:83:bc:2b:d4:
                    c6:11:fa:f7:ad:48:58:fc:12:2c:4b:71:3d:56:bc:
                    fe:39:86:6d:14:0b:a8:ff:ea:a8:5f:0e:3b:d0:b7:
                    b9:62:a8:5c:dc:ca:b5:b2:30:df:e0:4e:5e:53:da:
                    41:4e:88:da:f7:6c:7d:fb:25:46:ad:8f:9c:c9:e8:
                    3b:fe:b4:3f:dd:11:83:cf:26:24:d7:f7:96:65:52:
                    6c:2e:45:de:95:0f:59:bc:b0:58:da:f3:49:fa:aa:
                    cb:71:7c:32:79:a3:74:e6:a8:0d:66:92:18:52:a6:
                    1d:c5:a9:f9:35:da:13:8f:7a:04:bf:62:8b:5f:c6:
                    f9:57:93:c3:1b:22:9d:b3:86:fc:f6:c0:d9:00:42:
                    0c:6e:2c:ea:83:5e:41:27:21:f7:f8:82:7c:9c:41:
                    e4:4c:d2:17:e3:69:d0:23:a3:7d:e3:5e:34:ca:ec:
                    ec:b8:d6:89:05:6f:44:23:f2:53:50:ab:6d:13:77:
                    2c:05:20:65:55:72:6e:44:6f:4e:68:96:fa:5e:7b:
                    5c:2a:a6:4a:b2:eb:f6:da:99:72:a9:8b:4d:c7:79:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:be:33:da:f1:91:d6:da:61:ef:4d:3c:7d:c6:be:8d:aa:09:
         f7:d5:6e:11:cf:60:47:e8:28:34:91:86:b5:7b:73:13:28:52:
         13:ad:67:82:82:4d:cd:9f:e8:60:96:af:81:97:d1:ee:83:4f:
         28:c2:01:f4:0e:ba:1b:1b:ce:4d:4a:f6:83:5c:b0:23:3c:cd:
         90:02:52:0e:94:67:16:a8:78:52:de:e3:9e:52:75:8a:67:68:
         5f:cc:09:79:05:f3:83:da:42:41:db:32:e3:a1:e3:96:00:6a:
         ce:b7:a1:c0:10:bf:26:c5:2e:cf:d6:4a:05:e1:95:86:a2:7d:
         73:3e:26:32:45:23:9a:a2:ca:2f:06:03:8f:dc:7f:4b:3c:84:
         51:82:72:56:a2:b2:69:42:21:6f:94:ab:c3:1f:c6:72:69:61:
         e7:34:be:78:f0:b1:c2:c0:41:36:4c:0b:3d:fa:e5:e9:b2:0a:
         b1:0d:b2:00:56:9e:7b:86:de:49:92:c2:65:dc:a2:ac:06:d5:
         e0:bc:54:fd:54:03:10:cf:37:d3:16:94:fe:f3:70:3f:88:7a:
         64:ad:ec:84:5d:34:39:d3:04:41:89:51:bb:26:ef:f3:74:17:
         95:9d:13:f5:1e:d6:49:15:01:5d:fc:d2:70:67:02:4a:30:6a:
         76:17:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 13:22:58 2021 by LibreSSL & rpki-client.